Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
File:                     BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft (raw, json)
Hash identifier:          RuxAitrziUGMmfNMFOxfNWH861u3v/JGiZVhy/9wqjA=
Subject key identifier:   43:89:DC:C5:C3:4B:AA:4F:E9:42:11:E3:00:C1:75:83:5C:19:43:1D
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Certificate issuer:       /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial:       05F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
Manifest number:          05DF
Signing time:             Fri 22 Nov 2024 22:36:58 +0000
Manifest this update:     Fri 22 Nov 2024 22:36:57 +0000
Manifest next update:     Fri 29 Nov 2024 22:36:57 +0000
Files and hashes:         1: BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl (hash: NHwY4BOzx8FRlg15fDIWjgK+U2UjrqTl/01wmxN3aag=)
                          2: BFC00D26D18011EEB673FD69C4F9AE02.roa (hash: v2pifPgOwNDmh/wYV1DkyCR4TlF4IX+bXrJPT+Zae4s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
                          rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
        Validity
            Not Before: Nov 22 22:36:57 2024 GMT
            Not After : Nov 29 22:36:57 2024 GMT
        Subject: CN=6741078a-3df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:01:be:b0:bc:78:72:f8:36:8d:dd:1c:25:
                    3f:61:c5:0a:28:91:3b:b6:c7:11:6e:84:f8:c2:ec:
                    3b:fe:3e:de:0e:1c:f2:d3:c3:b7:e6:b4:be:b7:16:
                    10:55:e4:a1:5b:7c:12:e7:a9:d7:05:b6:46:0e:7a:
                    03:da:42:08:78:7a:a7:4f:2e:d6:21:46:b4:0a:df:
                    56:66:71:07:e6:19:f7:24:1d:d4:21:1f:29:47:98:
                    24:f4:50:2e:f3:be:fc:b3:72:91:18:ce:c4:bf:6a:
                    2c:40:9d:fe:db:1c:27:6a:d3:dc:5c:a7:79:58:84:
                    44:e3:48:02:57:63:e7:d1:41:30:5c:ce:a2:b0:c8:
                    72:63:bb:5d:2a:05:18:9f:aa:14:00:95:06:66:e7:
                    98:91:46:13:45:33:3b:fe:1a:23:1d:7d:ff:97:bb:
                    50:cd:2a:b8:22:d9:b7:b4:9f:c9:10:6a:3f:7a:52:
                    e7:ae:8b:b8:43:af:fb:c7:92:22:d1:ef:85:47:3b:
                    5c:b4:42:ad:fa:b1:3c:7b:3d:d3:4f:27:38:59:24:
                    93:3d:73:22:d1:d6:16:61:98:88:2c:5f:fe:d8:85:
                    94:3a:5f:aa:e7:eb:bd:4f:6b:ee:1b:69:d4:cd:4a:
                    02:36:3b:7e:67:a0:2e:d5:e4:e6:45:d0:7a:49:31:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:89:DC:C5:C3:4B:AA:4F:E9:42:11:E3:00:C1:75:83:5C:19:43:1D
            X509v3 Authority Key Identifier:
                keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a7:77:0c:f2:4f:d8:30:a7:d0:15:4e:64:6a:5e:2b:f2:b4:
         c4:3b:d4:15:22:4b:99:68:53:3f:33:f0:55:2c:70:a6:cd:7f:
         42:9b:c3:91:e7:f5:34:3a:aa:62:df:03:2b:9d:e2:a9:dc:77:
         a1:50:c7:69:f4:8e:0c:df:41:a5:06:0b:c2:7a:5b:52:f8:41:
         6d:6f:4f:24:d2:5b:82:ab:d4:f4:4d:00:93:38:db:40:d2:1e:
         2e:8c:68:24:f6:7d:db:0d:07:c7:30:22:76:b1:63:64:92:ce:
         09:46:15:14:a7:cd:ad:cb:dd:83:0c:cd:b8:1b:91:6d:88:18:
         3b:d9:6c:66:a7:73:bf:8b:9d:ed:cb:04:d7:0e:70:5a:4c:ce:
         fe:85:86:c3:6a:5e:0f:b5:24:d9:d9:87:d7:41:81:82:50:c0:
         07:04:20:35:d8:c5:f6:cd:6a:d8:d6:da:25:f0:31:ec:c8:0c:
         dc:cf:bf:e6:3b:a7:fa:d2:4d:6b:a8:3c:77:c9:d5:8f:f2:d0:
         0b:4b:69:43:b9:92:27:3b:e8:45:35:8c:65:a8:2e:02:58:81:
         b1:b9:4b:30:4c:f6:12:5d:38:e0:b8:ae:f3:42:23:81:4c:b7:
         89:a8:f9:a8:12:21:3f:b7:5f:f4:5c:f0:e6:3c:57:01:4e:9d:
         d7:dc:2d:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQyNzkxMTAvBgNVBAUTKDA2RDI4QzQzRUFFNDNGMUY1REE1NkM2QTIxRTZDQUJC
RkNCODhEQkUwHhcNMjQxMTIyMjIzNjU3WhcNMjQxMTI5MjIzNjU3WjAYMRYwFAYD
VQQDEw02NzQxMDc4YS0zZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1kwBvrC8eHL4No3dHCU/YcUKKJE7tscRboT4wuw7/j7eDhzy08O35rS+txYQ
VeShW3wS56nXBbZGDnoD2kIIeHqnTy7WIUa0Ct9WZnEH5hn3JB3UIR8pR5gk9FAu
8778s3KRGM7Ev2osQJ3+2xwnatPcXKd5WIRE40gCV2Pn0UEwXM6isMhyY7tdKgUY
n6oUAJUGZueYkUYTRTM7/hojHX3/l7tQzSq4Itm3tJ/JEGo/elLnrou4Q6/7x5Ii
0e+FRztctEKt+rE8ez3TTyc4WSSTPXMi0dYWYZiILF/+2IWUOl+q5+u9T2vuG2nU
zUoCNjt+Z6Au1eTmRdB6STF50wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOJ3MXD
S6pP6UIR4wDBdYNcGUMdMB8GA1UdIwQYMBaAFAbSjEPq5D8fXaVsaiHmyrv8uI2+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI3OS8wRTM2MUJCNjlD
MTUxMUVCOTk3QUJENTlDNEY5QUUwMi9CdEtNUS1ya1B4OWRwV3hxSWViS3VfeTRq
YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0S01RLXJrUHg5ZHBXeHFJZWJLdV95NGpiNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDI3OS8wRTM2MUJCNjlDMTUxMUVCOTk3QUJENTlDNEY5QUUwMi9CdEtNUS1ya1B4
OWRwV3hxSWViS3VfeTRqYjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAep3cM8k/YMKfQFU5kal4r8rTEO9QVIkuZaFM/M/BVLHCmzX9Cm8OR
5/U0Oqpi3wMrneKp3HehUMdp9I4M30GlBgvCeltS+EFtb08k0luCq9T0TQCTONtA
0h4ujGgk9n3bDQfHMCJ2sWNkks4JRhUUp82ty92DDM24G5FtiBg72Wxmp3O/i53t
ywTXDnBaTM7+hYbDal4PtSTZ2YfXQYGCUMAHBCA12MX2zWrY1tol8DHsyAzcz7/m
O6f60k1rqDx3ydWP8tALS2lDuZInO+hFNYxlqC4CWIGxuUswTPYSXTjguK7zQiOB
TLeJqPmoEiE/t1/0XPDmPFcBTp3X3C08
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org