Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
File:                     Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft (raw, json)
Hash identifier:          U1P1eEdf0tB/GwLIPSOhUGiDShU5ajsgBrw2yhVbO+k=
Subject key identifier:   D2:00:04:A1:EB:DA:32:CD:FE:EF:B5:92:C4:B7:C3:94:10:97:7E:6D
Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43
Certificate issuer:       /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
Manifest number:          011E
Signing time:             Sun 19 May 2024 05:24:59 +0000
Manifest this update:     Sun 19 May 2024 05:24:58 +0000
Manifest next update:     Sun 26 May 2024 05:24:58 +0000
Files and hashes:         1: Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl (hash: UWpIKfg0TthMNFkY6kFavJIqVdKAE7mvc9ZV1TUSot8=)
                          2: 538172167F5211ED8A16EF81C4F9AE02.roa (hash: t+tOioULLbdadbVo+wcXgqHV26aKT7BFQ5ZKogdQLMI=)
                          3: E6EB68347F4F11EDBD813D85C4F9AE02.roa (hash: 68t7AoSZP/afLoYmZ2cIjMvIFXrWh3T5i52ayRfPKe4=)
                          4: FA05DFF47F4911ED847FF862C4F9AE02.roa (hash: J6vqwZm1lCenuly0yp2d06eQQieFO+C8qbrJwg1f8lA=)
                          5: F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa (hash: oOv8IWm3CJSx/2lXFPDKWEyMUTroKLJl6Cmo0UJ6tYQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl
                          rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
        Validity
            Not Before: May 19 05:24:58 2024 GMT
            Not After : May 26 05:24:58 2024 GMT
        Subject: CN=66498d2b-0268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ce:09:5a:fd:97:74:1b:2f:16:c5:2e:6d:13:
                    4b:0f:16:bb:f8:68:41:ab:34:84:ab:87:5e:67:c2:
                    09:17:a1:f8:46:95:ca:88:31:a9:10:6c:fe:eb:7c:
                    fc:3d:ff:ae:99:8a:d3:22:5d:fb:be:54:63:a7:a4:
                    46:50:86:56:5a:87:70:c5:4c:f6:fa:e6:21:13:0d:
                    46:e0:77:4b:3d:ce:66:63:6e:e8:6f:77:f0:3f:8f:
                    47:d6:c3:22:ab:ac:b2:b3:aa:8d:eb:52:98:44:82:
                    b0:03:88:7e:aa:f1:f3:14:80:a1:5f:5c:ef:d6:52:
                    04:3a:b3:3c:fb:5c:fc:1a:d3:b3:ec:53:ab:34:5c:
                    c8:70:64:30:5a:59:34:1f:b0:39:f1:db:2d:cf:b7:
                    fd:13:c6:82:ff:27:1b:33:48:5d:b6:d7:a8:90:be:
                    19:5c:97:bc:05:d7:d4:6f:7c:da:29:98:a6:e1:5e:
                    e5:92:58:96:58:f9:cd:12:fa:dd:62:1c:61:11:51:
                    c0:77:e5:e8:1b:e0:65:18:0e:1d:33:01:a8:12:ef:
                    17:48:b2:b9:6f:eb:fc:9b:21:44:87:64:c9:72:e0:
                    0c:89:42:2b:8a:26:73:de:e3:51:15:8f:f0:72:5a:
                    4a:2f:a8:44:2c:11:93:c4:51:00:37:f0:6b:00:cf:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:00:04:A1:EB:DA:32:CD:FE:EF:B5:92:C4:B7:C3:94:10:97:7E:6D
            X509v3 Authority Key Identifier:
                keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:38:74:ac:70:3c:af:60:02:0b:17:91:9e:3e:44:ab:9a:e1:
         d2:5a:44:da:32:5c:86:d7:b4:a5:15:89:75:1c:19:b3:56:16:
         82:01:82:66:d2:62:88:d8:0c:8d:ea:8e:dc:0b:01:6e:c3:90:
         6a:2c:54:b2:6a:bd:1b:8a:f1:5a:76:b2:7f:0c:f4:fc:c1:42:
         fe:bb:d0:8d:da:c4:7f:ae:33:f3:bc:1b:11:21:b0:74:f0:36:
         37:97:5b:65:75:c0:9c:2b:8b:2e:eb:69:23:80:a5:9b:49:e5:
         63:f5:dd:4c:00:b6:56:76:56:5f:92:3b:85:a6:a0:61:bc:fd:
         fb:78:ae:dc:6a:dd:ed:aa:79:dd:c9:77:f2:21:82:f8:cf:3b:
         a1:eb:6b:b2:d1:8d:0b:28:ed:ac:af:be:fb:a1:fb:b4:10:7e:
         ae:ad:a1:81:18:25:3f:1b:39:14:8d:da:3e:30:ef:37:86:b2:
         76:d2:42:72:2a:ed:34:34:30:d6:07:e8:f9:2f:cd:00:ff:57:
         92:4b:ca:0b:cb:48:40:e9:f0:02:64:bc:cd:57:5f:ef:cc:a0:
         7a:76:22:67:93:a9:5e:70:3b:3a:21:17:2c:ce:29:c2:50:54:
         6b:e7:b5:28:8a:35:cf:e5:c9:90:e1:0f:9f:80:c3:d9:dc:c3:
         22:78:8e:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNFM0YxMTAvBgNVBAUTKDU5RERDMzk2OUI5ODYzQ0ZCNUExNTUyOEFBNEEzOTFB
RjIzMzdGNDMwHhcNMjQwNTE5MDUyNDU4WhcNMjQwNTI2MDUyNDU4WjAYMRYwFAYD
VQQDEw02NjQ5OGQyYi0wMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5s4JWv2XdBsvFsUubRNLDxa7+GhBqzSEq4deZ8IJF6H4RpXKiDGpEGz+63z8
Pf+umYrTIl37vlRjp6RGUIZWWodwxUz2+uYhEw1G4HdLPc5mY27ob3fwP49H1sMi
q6yys6qN61KYRIKwA4h+qvHzFIChX1zv1lIEOrM8+1z8GtOz7FOrNFzIcGQwWlk0
H7A58dstz7f9E8aC/ycbM0hdtteokL4ZXJe8BdfUb3zaKZim4V7lkliWWPnNEvrd
YhxhEVHAd+XoG+BlGA4dMwGoEu8XSLK5b+v8myFEh2TJcuAMiUIriiZz3uNRFY/w
clpKL6hELBGTxFEAN/BrAM85zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIABKHr
2jLN/u+1ksS3w5QQl35tMB8GA1UdIwQYMBaAFFndw5abmGPPtaFVKKpKORryM39D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi9GQkRGRkVDMDc2
ODYxMUVEQTZDQjNGNDFDNEY5QUUwMi9XZDNEbHB1WVk4LTFvVlVvcWtvNUd2SXpm
ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dkM0RscHVZWTgtMW9WVW9xa281R3ZJemYwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0UzRi9GQkRGRkVDMDc2ODYxMUVEQTZDQjNGNDFDNEY5QUUwMi9XZDNEbHB1WVk4
LTFvVlVvcWtvNUd2SXpmME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3OHSscDyvYAILF5GePkSrmuHSWkTaMlyG17SlFYl1HBmzVhaCAYJm
0mKI2AyN6o7cCwFuw5BqLFSyar0bivFadrJ/DPT8wUL+u9CN2sR/rjPzvBsRIbB0
8DY3l1tldcCcK4su62kjgKWbSeVj9d1MALZWdlZfkjuFpqBhvP37eK7cat3tqnnd
yXfyIYL4zzuh62uy0Y0LKO2sr777ofu0EH6uraGBGCU/GzkUjdo+MO83hrJ20kJy
Ku00NDDWB+j5L80A/1eSS8oLy0hA6fACZLzNV1/vzKB6diJnk6lecDs6IRcszinC
UFRr57UoijXP5cmQ4Q+fgMPZ3MMieI6J
-----END CERTIFICATE-----
Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org