Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
File:                     lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json)
Hash identifier:          D52HCdLrplG8LeNkAwN8DZsZmcveRMHb+4ey3VK15tE=
Subject key identifier:   DC:17:82:A7:90:8E:73:67:06:8A:31:9E:2A:8F:DA:84:97:CD:07:27
Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69
Certificate issuer:       /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
Manifest number:          64
Signing time:             Sat 23 Nov 2024 04:57:46 +0000
Manifest this update:     Sat 23 Nov 2024 04:57:46 +0000
Manifest next update:     Sat 30 Nov 2024 04:57:46 +0000
Files and hashes:         1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: jwOU5bbgCq1j9Y1K3PeaRWgWyq8I6uaBZi6Uq85ULHc=)
                          2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: QbtjxmLTL2Cws1ASsYlhmpNTZ1I8QqQQdpKElbXl0rY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl
                          rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
        Validity
            Not Before: Nov 23 04:57:46 2024 GMT
            Not After : Nov 30 04:57:46 2024 GMT
        Subject: CN=674160ca-8df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:b5:b8:eb:90:ee:ff:50:16:51:b1:45:49:
                    c1:40:7e:0a:9e:ed:ad:c0:fc:3e:ef:1d:3a:34:27:
                    9e:01:77:8f:4e:99:e1:54:23:0b:c0:e5:27:fd:c0:
                    fa:ec:80:72:a3:1f:fc:36:f4:c4:ea:26:54:2e:32:
                    24:bb:2c:17:63:38:ee:be:53:81:72:59:13:f7:e4:
                    5b:ca:fb:63:7d:df:7d:b1:25:a1:5b:a1:6c:53:d9:
                    af:01:0e:6e:53:44:0a:72:f2:56:aa:b1:cd:08:bb:
                    15:2e:7a:a7:c1:18:68:22:0b:b9:77:90:df:3e:d4:
                    14:b9:74:48:75:cc:ca:6b:4d:90:e2:ec:3f:3a:17:
                    fc:df:26:72:53:63:a0:55:7a:ee:eb:89:09:9a:f7:
                    8b:ad:2a:44:0a:27:4b:98:6d:77:9b:25:f6:84:1a:
                    df:19:fb:ec:a9:22:9c:40:5b:ec:03:69:19:dc:cb:
                    a9:a5:91:53:ec:ef:02:b8:05:57:e3:65:0b:4a:80:
                    01:7d:27:a1:85:34:6d:c6:7d:71:60:55:4f:b6:4e:
                    5d:c2:eb:69:50:69:88:93:e0:a1:37:39:25:96:e3:
                    7b:a8:1e:1e:b4:c1:02:57:1e:d3:4e:82:e0:4a:0f:
                    c4:6f:a2:45:c5:b3:c7:16:14:ae:0c:a8:e9:8a:c3:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:17:82:A7:90:8E:73:67:06:8A:31:9E:2A:8F:DA:84:97:CD:07:27
            X509v3 Authority Key Identifier:
                keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:71:41:fe:1e:52:fd:ca:c0:3d:62:8f:37:f2:27:70:ed:c4:
         52:09:b6:85:90:50:db:f2:b2:36:d8:72:86:4f:30:08:5d:b3:
         fb:55:fc:ee:1b:ac:50:a8:c0:ee:7a:1b:e1:b9:2c:db:ff:24:
         52:84:ac:83:d2:7a:32:e6:42:bf:cb:ba:43:14:9a:e3:59:63:
         50:00:9d:91:71:34:af:4c:5c:18:d6:b7:a5:67:7d:50:e4:c0:
         68:55:f2:ac:e3:4c:82:18:a5:0d:e6:53:4a:93:99:e4:d6:41:
         59:d3:19:4e:c7:ba:67:bd:a8:75:fc:f5:6d:9e:76:e1:c4:51:
         94:f7:49:af:2b:3a:3e:ad:98:f1:72:51:bf:04:ed:8a:86:3d:
         f8:7d:dc:99:7b:55:fd:2b:ce:d9:a6:30:5a:7e:a8:a0:cd:84:
         03:5d:76:27:55:cc:0d:84:15:33:fe:cc:f9:0a:8c:e3:66:db:
         cd:31:a6:e5:cc:38:3b:f7:f9:e9:6c:ce:c6:7d:a0:29:24:1d:
         57:a8:f8:d6:6f:86:62:0a:e6:50:27:bc:78:02:a5:cd:3e:c8:
         b3:ec:6b:0f:b6:c2:30:46:b5:ef:71:54:24:c2:6e:02:5f:81:
         9d:f7:13:fd:72:70:91:84:4f:5b:2d:e6:8b:37:16:52:af:4a:
         0c:9e:3f:7a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NkY2OTExMC8GA1UEBRMoOTZDNjJBMDc5RDJFN0Q4RTdBOTk1RDIwRjQyMjlEODI2
OTM5OEU2OTAeFw0yNDExMjMwNDU3NDZaFw0yNDExMzAwNDU3NDZaMBgxFjAUBgNV
BAMTDTY3NDE2MGNhLThkZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQ3bW465Du/1AWUbFFScFAfgqe7a3A/D7vHTo0J54Bd49OmeFUIwvA5Sf9wPrs
gHKjH/w29MTqJlQuMiS7LBdjOO6+U4FyWRP35FvK+2N9332xJaFboWxT2a8BDm5T
RApy8laqsc0IuxUueqfBGGgiC7l3kN8+1BS5dEh1zMprTZDi7D86F/zfJnJTY6BV
eu7riQma94utKkQKJ0uYbXebJfaEGt8Z++ypIpxAW+wDaRncy6mlkVPs7wK4BVfj
ZQtKgAF9J6GFNG3GfXFgVU+2Tl3C62lQaYiT4KE3OSWW43uoHh60wQJXHtNOguBK
D8RvokXFs8cWFK4MqOmKw2hlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3BeCp5CO
c2cGijGeKo/ahJfNBycwHwYDVR0jBBgwFoAUlsYqB50ufY56mV0g9CKdgmk5jmkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2RjY5LzY2QTBBREEyMTEy
OTExRUY4MDYzNUIyN0M0RjlBRTAyL2xzWXFCNTB1Zlk1Nm1WMGc5Q0tkZ21rNWpt
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbHNZcUI1MHVmWTU2bVYwZzlDS2RnbWs1am1rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2
RjY5LzY2QTBBREEyMTEyOTExRUY4MDYzNUIyN0M0RjlBRTAyL2xzWXFCNTB1Zlk1
Nm1WMGc5Q0tkZ21rNWptay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGVxQf4eUv3KwD1ijzfyJ3DtxFIJtoWQUNvysjbYcoZPMAhds/tV/O4b
rFCowO56G+G5LNv/JFKErIPSejLmQr/LukMUmuNZY1AAnZFxNK9MXBjWt6VnfVDk
wGhV8qzjTIIYpQ3mU0qTmeTWQVnTGU7Hume9qHX89W2eduHEUZT3Sa8rOj6tmPFy
Ub8E7YqGPfh93Jl7Vf0rztmmMFp+qKDNhANddidVzA2EFTP+zPkKjONm280xpuXM
ODv3+elszsZ9oCkkHVeo+NZvhmIK5lAnvHgCpc0+yLPsaw+2wjBGte9xVCTCbgJf
gZ33E/1ycJGET1st5os3FlKvSgyeP3o=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:27 2024 by rpki-client on console-fra.rpki-client.org