Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
File:                     BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft (raw, json)
Hash identifier:          Id3s2tT64adR6x1pwj7oy5ABvWmWZVs7aVmlUxP0ZXs=
Subject key identifier:   8A:DB:C1:D5:47:0E:B4:80:6B:DB:FC:90:EE:F7:F2:8A:DE:C3:5A:89
Authority key identifier: 05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77
Certificate issuer:       /CN=A9184559/serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
Manifest number:          0158
Signing time:             Sun 19 May 2024 04:51:36 +0000
Manifest this update:     Sun 19 May 2024 04:51:36 +0000
Manifest next update:     Sun 26 May 2024 04:51:36 +0000
Files and hashes:         1: BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl (hash: ht+t7u80CvW4bdZmtlmK4hFmIwXwjdeXs7EB5PDA9dA=)
                          2: FEC28FDE329511EDBF29A211C4F9AE02.roa (hash: s203ahG078BUF8vOuoOqsFfETwzt6oYXpB1VfpCv4n0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl
                          rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184559/serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277
        Validity
            Not Before: May 19 04:51:36 2024 GMT
            Not After : May 26 04:51:36 2024 GMT
        Subject: CN=66498558-d336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:1b:b8:4f:f4:10:bb:70:80:10:42:32:31:
                    fd:d8:16:3d:77:af:bc:74:6b:1e:93:3b:ee:f9:cf:
                    68:ae:8a:d6:74:90:be:6f:3d:db:e5:98:f6:56:a5:
                    ad:46:e4:71:f5:e4:57:8c:38:d2:d9:ec:1c:80:ca:
                    98:8b:95:5b:24:a7:66:95:2d:64:f1:7f:33:7f:9f:
                    cd:c4:0e:fd:14:a9:bb:3c:74:64:2c:d3:21:28:0c:
                    04:b3:28:94:e6:74:9c:5c:45:2e:0e:2c:28:d9:c8:
                    67:15:04:3e:05:2e:94:1c:59:18:03:0c:4c:4e:9c:
                    9a:c5:ee:5b:e2:a8:af:b0:24:6d:27:12:42:d6:b9:
                    10:32:f0:94:57:d5:9d:68:21:14:1f:cf:c5:b7:92:
                    52:f1:29:9f:c6:a5:98:05:3b:39:11:8c:80:63:29:
                    80:67:75:9d:41:74:77:87:14:74:e2:a5:70:4f:5e:
                    d6:9b:09:6e:60:a3:6e:04:95:14:9f:56:94:94:cf:
                    ae:85:ad:d4:c1:21:62:55:57:a7:a1:7f:15:3a:a6:
                    aa:8e:c0:11:ed:a0:19:ae:e8:56:b6:25:8e:20:40:
                    6e:5c:2d:f8:a5:57:71:8a:1b:f0:fb:6b:cd:88:4d:
                    4d:9c:e9:82:ba:a9:bf:be:d3:a3:e8:8f:7d:e6:a6:
                    ab:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DB:C1:D5:47:0E:B4:80:6B:DB:FC:90:EE:F7:F2:8A:DE:C3:5A:89
            X509v3 Authority Key Identifier:
                keyid:05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:63:60:19:7a:6b:b3:b9:b3:6e:37:b9:fa:46:8d:60:5a:15:
         20:08:52:70:36:c6:fd:65:e5:d0:ef:f6:aa:22:59:29:8b:9f:
         23:97:98:d6:6b:a7:05:2c:30:9d:e9:82:66:83:d5:d6:fe:b4:
         09:1f:99:c5:78:0a:91:41:9d:36:33:eb:d3:15:09:97:08:47:
         72:da:29:be:ea:a8:3d:da:02:3b:9e:c2:47:97:45:33:ee:34:
         51:ef:cc:8c:c6:e3:1b:70:5d:7c:23:a6:0f:3e:28:36:e4:a0:
         dd:e5:a2:ae:45:5f:34:21:44:0c:38:ec:c4:98:5a:fc:15:62:
         e7:b9:dd:2a:1c:1b:7a:46:4c:ca:6e:93:9d:6b:84:32:86:5b:
         94:63:05:c7:63:05:db:d7:3b:71:9a:c2:1d:04:bb:5e:df:7e:
         97:8a:8f:54:00:8c:57:f6:9c:45:e0:e0:80:d5:52:77:98:a8:
         d9:2c:61:7a:e5:37:05:c5:6c:39:fc:cf:07:b8:f5:be:df:ba:
         21:07:d7:af:30:3e:59:10:6c:5d:29:d4:bf:b2:52:dd:14:70:
         c5:eb:be:d9:84:95:fa:e8:f7:1b:a0:a1:64:0f:54:39:b6:46:
         c4:a1:04:21:7b:98:9b:2d:73:17:58:cc:36:f1:8b:24:72:ef:
         43:a0:53:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ1NTkxMTAvBgNVBAUTKDA1Q0M4M0NGNEI4QjFCMzc4OUZGRTRFQzQ0NjBBMTZE
ODlFQTMyNzcwHhcNMjQwNTE5MDQ1MTM2WhcNMjQwNTI2MDQ1MTM2WjAYMRYwFAYD
VQQDEw02NjQ5ODU1OC1kMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvlsbuE/0ELtwgBBCMjH92BY9d6+8dGsekzvu+c9ororWdJC+bz3b5Zj2VqWt
RuRx9eRXjDjS2ewcgMqYi5VbJKdmlS1k8X8zf5/NxA79FKm7PHRkLNMhKAwEsyiU
5nScXEUuDiwo2chnFQQ+BS6UHFkYAwxMTpyaxe5b4qivsCRtJxJC1rkQMvCUV9Wd
aCEUH8/Ft5JS8SmfxqWYBTs5EYyAYymAZ3WdQXR3hxR04qVwT17WmwluYKNuBJUU
n1aUlM+uha3UwSFiVVenoX8VOqaqjsAR7aAZruhWtiWOIEBuXC34pVdxihvw+2vN
iE1NnOmCuqm/vtOj6I995qarOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrbwdVH
DrSAa9v8kO738orew1qJMB8GA1UdIwQYMBaAFAXMg89Lixs3if/k7ERgoW2J6jJ3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU1OS83NzdBMzA0RTMy
OTExMUVEOTgzMDgwMTlDNEY5QUUwMi9CY3lEejB1TEd6ZUpfLVRzUkdDaGJZbnFN
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JjeUR6MHVMR3plSl8tVHNSR0NoYllucU1uYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDU1OS83NzdBMzA0RTMyOTExMUVEOTgzMDgwMTlDNEY5QUUwMi9CY3lEejB1TEd6
ZUpfLVRzUkdDaGJZbnFNbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB/Y2AZemuzubNuN7n6Ro1gWhUgCFJwNsb9ZeXQ7/aqIlkpi58jl5jW
a6cFLDCd6YJmg9XW/rQJH5nFeAqRQZ02M+vTFQmXCEdy2im+6qg92gI7nsJHl0Uz
7jRR78yMxuMbcF18I6YPPig25KDd5aKuRV80IUQMOOzEmFr8FWLnud0qHBt6RkzK
bpOda4QyhluUYwXHYwXb1ztxmsIdBLte336Xio9UAIxX9pxF4OCA1VJ3mKjZLGF6
5TcFxWw5/M8HuPW+37ohB9evMD5ZEGxdKdS/slLdFHDF677ZhJX66PcboKFkD1Q5
tkbEoQQhe5ibLXMXWMw28Yskcu9DoFNK
-----END CERTIFICATE-----
Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org