Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
File:                     mc3A6r4YBBJhGaHVGpjMhxkT86k.mft (raw, json)
Hash identifier:          dTP5U9ea21JhAlLvEodfSDl7J0UVZDkpiXqWBgQUPFQ=
Subject key identifier:   5E:DD:83:A5:E6:F0:81:13:F0:7C:D3:25:63:C0:3D:96:47:06:02:97
Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9
Certificate issuer:       /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
Certificate serial:       0727
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
Manifest number:          0720
Signing time:             Fri 22 Nov 2024 21:21:39 +0000
Manifest this update:     Fri 22 Nov 2024 21:21:38 +0000
Manifest next update:     Fri 29 Nov 2024 21:21:38 +0000
Files and hashes:         1: mc3A6r4YBBJhGaHVGpjMhxkT86k.crl (hash: ASMtSTwOA/NczC0bS8rN8qU2o0ljhozFKMrtaolYTeg=)
                          2: AE26CE12180911EB962CB216C4F9AE02.roa (hash: IhePS3j385LdYR7mqTCypnNrI1A+ZbVNzeveI3VyTNg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl
                          rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
        Validity
            Not Before: Nov 22 21:21:38 2024 GMT
            Not After : Nov 29 21:21:38 2024 GMT
        Subject: CN=6740f5e3-9047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7f:fe:24:93:55:bf:80:c9:9d:23:09:2f:c5:
                    ff:87:30:7d:6b:25:24:39:54:5b:38:cb:ff:eb:61:
                    49:cf:14:2f:bd:cb:45:6e:6e:af:42:7f:75:31:2e:
                    b9:15:a2:5f:dc:e2:b1:93:f5:cc:7e:fc:05:bf:2d:
                    c6:57:cd:ef:9a:63:b5:47:89:bc:0a:b5:da:92:60:
                    cf:d2:6b:17:e6:96:fd:de:38:94:65:3b:e1:db:a8:
                    45:f5:3c:aa:9c:7f:ca:d0:73:6a:67:4e:94:ca:26:
                    81:e3:2b:a8:5c:23:eb:04:70:60:42:62:8a:25:9c:
                    35:6b:f2:05:5e:42:08:81:70:f6:77:4b:28:7e:c3:
                    2d:8e:49:88:90:01:f3:9c:f0:9b:c2:e1:9a:ac:93:
                    9e:40:1d:d2:2b:6d:27:93:2b:1a:3a:61:0f:71:3a:
                    d4:48:68:27:ea:14:c9:63:ed:8a:cb:82:68:0a:44:
                    82:78:1d:3e:e9:b4:ed:9b:cd:d2:d4:00:d5:47:f4:
                    c7:2b:cb:65:24:7e:93:d6:e8:fa:43:ea:47:a8:6a:
                    72:c0:0a:e8:9c:7d:2e:0c:c5:cf:6f:c1:d7:45:87:
                    f4:73:84:c5:8d:ba:03:8e:4b:8f:45:29:fb:24:d9:
                    9a:ab:1c:fe:83:f8:59:8b:2b:f7:b6:0b:85:d0:b0:
                    7a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DD:83:A5:E6:F0:81:13:F0:7C:D3:25:63:C0:3D:96:47:06:02:97
            X509v3 Authority Key Identifier:
                keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:60:5c:3b:9f:4e:22:79:78:d0:9d:9a:4b:bb:1a:bc:11:8b:
         cb:71:e7:51:9d:47:86:f7:58:b2:4b:24:99:af:eb:9e:b4:bd:
         6e:be:71:81:b6:0f:34:2b:38:94:ca:ec:38:ee:c6:64:47:4d:
         16:96:8b:bc:3d:d5:1c:e9:01:93:ea:16:ca:10:0c:c9:86:2b:
         4f:a4:66:9f:0f:66:32:29:38:cc:00:61:72:b6:25:91:05:8c:
         f9:60:83:bf:4d:e5:04:1d:fd:48:6f:18:b8:d6:e1:c0:54:14:
         6a:71:e5:b6:d7:6c:52:62:e7:7a:e1:28:c2:bc:ff:c0:ac:2a:
         c3:72:e3:de:72:55:ca:ae:d3:b4:51:a5:68:c9:b9:69:d6:b0:
         68:11:82:31:62:63:cf:29:eb:57:24:b3:3a:e1:84:e2:a5:7e:
         8d:26:29:66:49:46:4a:98:c1:4d:af:98:90:14:fd:96:83:3c:
         ba:59:44:0b:ba:bb:9e:21:f5:bd:71:fb:d1:55:f9:fd:fd:71:
         8d:b4:e7:bf:25:44:63:4a:7e:a3:5c:a9:28:e8:e5:eb:0e:e9:
         f5:ac:61:a9:16:f5:fc:f3:a6:82:0a:25:d1:ee:53:a4:bf:d5:
         9e:f7:e9:71:00:74:59:42:8c:84:27:95:62:2c:b7:89:8d:cf:
         85:08:78:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNGN0YxMTAvBgNVBAUTKDk5Q0RDMEVBQkUxODA0MTI2MTE5QTFENTFBOThDQzg3
MTkxM0YzQTkwHhcNMjQxMTIyMjEyMTM4WhcNMjQxMTI5MjEyMTM4WjAYMRYwFAYD
VQQDEw02NzQwZjVlMy05MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0X/+JJNVv4DJnSMJL8X/hzB9ayUkOVRbOMv/62FJzxQvvctFbm6vQn91MS65
FaJf3OKxk/XMfvwFvy3GV83vmmO1R4m8CrXakmDP0msX5pb93jiUZTvh26hF9Tyq
nH/K0HNqZ06UyiaB4yuoXCPrBHBgQmKKJZw1a/IFXkIIgXD2d0sofsMtjkmIkAHz
nPCbwuGarJOeQB3SK20nkysaOmEPcTrUSGgn6hTJY+2Ky4JoCkSCeB0+6bTtm83S
1ADVR/THK8tlJH6T1uj6Q+pHqGpywAronH0uDMXPb8HXRYf0c4TFjboDjkuPRSn7
JNmaqxz+g/hZiyv3tguF0LB6mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7dg6Xm
8IET8HzTJWPAPZZHBgKXMB8GA1UdIwQYMBaAFJnNwOq+GAQSYRmh1RqYzIcZE/Op
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0Y3Ri9FMzdFNUIzMjE1
MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJCSmhHYUhWR3BqTWh4a1Q4
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21jM0E2cjRZQkJKaEdhSFZHcGpNaHhrVDg2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0Y3Ri9FMzdFNUIzMjE1MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJC
SmhHYUhWR3BqTWh4a1Q4NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpYFw7n04ieXjQnZpLuxq8EYvLcedRnUeG91iySySZr+uetL1uvnGB
tg80KziUyuw47sZkR00Wlou8PdUc6QGT6hbKEAzJhitPpGafD2YyKTjMAGFytiWR
BYz5YIO/TeUEHf1Ibxi41uHAVBRqceW212xSYud64SjCvP/ArCrDcuPeclXKrtO0
UaVoyblp1rBoEYIxYmPPKetXJLM64YTipX6NJilmSUZKmMFNr5iQFP2Wgzy6WUQL
urueIfW9cfvRVfn9/XGNtOe/JURjSn6jXKko6OXrDun1rGGpFvX886aCCiXR7lOk
v9We9+lxAHRZQoyEJ5ViLLeJjc+FCHiE
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org