Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
File:                     L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json)
Hash identifier:          pK0MYj3Yn+uxSODDBogZXaVQCkY62fCOHMCVzdvY7g0=
Subject key identifier:   F9:7A:6A:43:32:75:4F:5D:DA:0E:1D:BC:15:8A:C6:CD:C3:C9:F8:15
Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32
Certificate issuer:       /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
Manifest number:          AE
Signing time:             Sat 23 Nov 2024 04:10:44 +0000
Manifest this update:     Sat 23 Nov 2024 04:10:44 +0000
Manifest next update:     Sat 30 Nov 2024 04:10:44 +0000
Files and hashes:         1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: Yy4m7eivU2xBhLfhBIO4MCd6wFLk9W5xDThQgT2YI6Y=)
                          2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: +frr+wTOoHrcgFMpLKILndUUUD44Ln0TV7/77IoTLr0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl
                          rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432
        Validity
            Not Before: Nov 23 04:10:44 2024 GMT
            Not After : Nov 30 04:10:44 2024 GMT
        Subject: CN=674155c4-bdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:35:45:0f:c8:78:ba:3f:a0:3b:8f:39:4d:
                    7a:aa:62:f5:ba:10:84:12:9e:9e:e2:c1:39:e3:d3:
                    83:17:72:1a:44:7d:f8:6d:e7:e3:17:83:c2:41:92:
                    2c:42:31:8f:4b:34:c6:0d:0c:67:38:63:5f:20:ca:
                    04:dd:76:21:6a:d3:80:f8:d8:7d:c5:a9:52:a5:b8:
                    eb:7c:f4:62:30:95:71:d8:21:89:fb:e3:43:dd:74:
                    b0:e7:38:4a:0c:39:0d:28:1f:52:b0:17:42:6a:a4:
                    a2:c3:a4:81:2b:72:ec:8f:b9:9d:d4:af:1d:e4:bb:
                    1d:21:ec:e5:75:e5:06:21:86:d1:78:0b:86:0b:fc:
                    a3:ad:d6:08:c4:50:98:89:d9:ff:04:80:4c:71:93:
                    55:48:b3:a0:5d:27:04:44:67:3d:38:37:81:28:ab:
                    ea:34:a7:00:33:5a:21:e4:ce:b0:95:b3:48:04:f2:
                    64:b5:83:c2:4f:96:24:24:3b:ea:48:2b:3e:eb:3e:
                    82:08:b2:82:9c:f9:10:2d:b7:7f:0b:bf:35:80:0a:
                    e7:46:7f:79:e3:82:d6:79:31:60:20:56:44:3d:bb:
                    31:36:5b:37:6c:e1:36:c6:f8:ed:3a:0c:8d:9a:d0:
                    f7:2d:ce:e6:0c:19:c0:76:0f:46:c6:a7:4d:b1:74:
                    00:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7A:6A:43:32:75:4F:5D:DA:0E:1D:BC:15:8A:C6:CD:C3:C9:F8:15
            X509v3 Authority Key Identifier:
                keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:83:b0:cb:fb:89:2e:f4:2a:48:8d:17:e1:59:09:d7:f0:5b:
         0f:20:0a:2a:51:e1:e5:5b:a2:be:2f:fa:73:2a:2f:ab:41:cb:
         f0:16:fc:0c:b8:84:f3:26:48:b0:fa:93:87:f2:30:63:59:71:
         c2:a9:a1:6f:81:b9:37:e1:fe:86:be:40:c3:51:4d:c7:72:3a:
         75:e0:fa:53:73:e3:49:28:cd:19:d8:d9:37:12:0e:95:48:20:
         64:df:fd:c6:50:95:cf:bd:d7:5f:6d:e2:72:4e:05:ff:08:d6:
         15:22:f7:39:81:72:97:68:ee:d6:2a:18:64:a2:fd:a4:7a:c2:
         40:d5:f5:8b:f9:82:83:fc:39:18:fe:c8:6b:f8:56:17:4b:e5:
         37:31:e2:5c:08:05:48:3c:cf:bc:47:fc:39:4f:52:ea:b1:f6:
         f7:03:28:32:3a:45:47:2c:78:77:f8:75:05:d9:42:02:90:b9:
         76:89:96:41:eb:58:b7:b2:59:17:43:43:3b:9a:5f:bd:2a:6e:
         e7:8f:4a:31:80:5c:e5:ac:7f:c1:03:ff:9c:f6:8e:b8:1a:4d:
         88:e4:92:94:b6:fe:07:1f:18:4b:c6:4a:4e:85:b4:43:b3:36:
         b2:9b:1a:d0:91:03:bd:23:56:41:1b:43:d1:f2:2b:a0:ae:6d:
         1b:5d:c4:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTM2MDQxMTAvBgNVBAUTKDJGRkZGQ0EzRTY0QkQ3NUEwODVFNkM3NjczMjYyNUYy
MjRDNzQ0MzIwHhcNMjQxMTIzMDQxMDQ0WhcNMjQxMTMwMDQxMDQ0WjAYMRYwFAYD
VQQDEw02NzQxNTVjNC1iZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq3g1RQ/IeLo/oDuPOU16qmL1uhCEEp6e4sE549ODF3IaRH34befjF4PCQZIs
QjGPSzTGDQxnOGNfIMoE3XYhatOA+Nh9xalSpbjrfPRiMJVx2CGJ++ND3XSw5zhK
DDkNKB9SsBdCaqSiw6SBK3Lsj7md1K8d5LsdIezldeUGIYbReAuGC/yjrdYIxFCY
idn/BIBMcZNVSLOgXScERGc9ODeBKKvqNKcAM1oh5M6wlbNIBPJktYPCT5YkJDvq
SCs+6z6CCLKCnPkQLbd/C781gArnRn9544LWeTFgIFZEPbsxNls3bOE2xvjtOgyN
mtD3Lc7mDBnAdg9GxqdNsXQA7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl6akMy
dU9d2g4dvBWKxs3DyfgVMB8GA1UdIwQYMBaAFC///KPmS9daCF5sdnMmJfIkx0Qy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzYwNC9CNTk1RkRBMjlG
NEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDExb0lYbXgyY3lZbDhpVEhS
REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xfXzhvLVpMMTFvSVhteDJjeVlsOGlUSFJESS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzYwNC9CNTk1RkRBMjlGNEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDEx
b0lYbXgyY3lZbDhpVEhSREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJg7DL+4ku9CpIjRfhWQnX8FsPIAoqUeHlW6K+L/pzKi+rQcvwFvwM
uITzJkiw+pOH8jBjWXHCqaFvgbk34f6GvkDDUU3Hcjp14PpTc+NJKM0Z2Nk3Eg6V
SCBk3/3GUJXPvddfbeJyTgX/CNYVIvc5gXKXaO7WKhhkov2kesJA1fWL+YKD/DkY
/shr+FYXS+U3MeJcCAVIPM+8R/w5T1Lqsfb3AygyOkVHLHh3+HUF2UICkLl2iZZB
61i3slkXQ0M7ml+9Km7nj0oxgFzlrH/BA/+c9o64Gk2I5JKUtv4HHxhLxkpOhbRD
szaymxrQkQO9I1ZBG0PR8iugrm0bXcSp
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:14 2024 by rpki-client on console-ams.rpki-client.org