Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
File:                     PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json)
Hash identifier:          uQWS2jM4NsBOG8hzu1lhCspDizuCTKVDBoKhl2Z6enE=
Subject key identifier:   8C:23:8B:19:F8:42:A6:53:D1:EC:A3:9B:9E:91:3F:68:ED:CA:D1:DF
Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E
Certificate issuer:       /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
Certificate serial:       05FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
Manifest number:          05EF
Signing time:             Fri 22 Nov 2024 22:26:28 +0000
Manifest this update:     Fri 22 Nov 2024 22:26:27 +0000
Manifest next update:     Fri 29 Nov 2024 22:26:27 +0000
Files and hashes:         1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: 6wrOt26OqTdwzbTQNf5yt2373+C6wZMNEpz+0Z4mYKw=)
                          2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: AmaUz+EXza9ap5Ndg+GApOzoKeEyWm7IYO9NmvdFo54=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl
                          rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1530 (0x5fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
        Validity
            Not Before: Nov 22 22:26:27 2024 GMT
            Not After : Nov 29 22:26:27 2024 GMT
        Subject: CN=67410514-1a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:4b:d2:d7:8e:85:48:77:3a:99:fd:36:63:
                    be:47:fe:30:68:71:23:d3:fb:b9:a3:fb:09:1c:62:
                    f9:de:43:8b:12:bd:1a:67:1d:42:cf:b5:64:55:b8:
                    c0:e1:f1:bf:52:b2:fc:b9:3f:a7:22:60:41:d6:ea:
                    17:62:4f:b0:38:92:2b:58:70:96:89:aa:66:38:51:
                    be:38:1a:6b:32:43:ba:67:38:4c:dd:cf:6d:ca:30:
                    bf:3e:47:41:17:aa:4d:33:c9:31:7a:b4:0d:eb:88:
                    a5:d4:ef:de:72:be:9d:03:a2:f7:0a:a3:b7:63:b8:
                    fe:c0:4d:16:aa:8f:fe:35:d6:c8:e8:de:20:37:aa:
                    56:c6:79:26:b7:d5:4e:b2:2c:05:90:78:76:00:50:
                    0a:60:bb:7c:80:5b:ce:ad:6c:66:95:87:26:cc:ca:
                    44:ae:76:dd:08:b2:9e:dd:66:f0:5e:8b:3e:ea:69:
                    02:72:68:7e:14:b0:6d:db:c1:85:bd:f5:cf:a9:3d:
                    b2:bb:1b:80:1e:2e:93:6e:36:1b:81:3e:0d:68:fe:
                    88:fe:af:34:0f:04:b0:96:36:4b:52:f6:b2:2b:93:
                    61:3e:cc:d7:7e:45:f2:f4:e9:e5:3a:1b:98:f7:f3:
                    d2:ed:bd:82:e1:2a:25:ca:69:b5:01:37:ea:b2:19:
                    dc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:23:8B:19:F8:42:A6:53:D1:EC:A3:9B:9E:91:3F:68:ED:CA:D1:DF
            X509v3 Authority Key Identifier:
                keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:11:ad:52:65:35:99:50:f0:40:b1:43:62:59:72:00:a7:20:
         9b:a2:da:f2:11:09:18:ad:c8:f4:7b:7a:68:70:32:55:f0:69:
         44:d5:4c:a6:26:d8:2b:0e:67:a2:ad:68:80:d1:97:a5:43:62:
         39:24:8c:49:14:30:a7:9e:90:fe:3e:11:cb:df:1f:1c:52:18:
         85:81:8c:5e:5c:b2:e8:6d:5a:3b:b4:7e:08:8d:93:21:61:4c:
         8c:17:c0:10:7b:31:f5:27:07:84:f1:7a:f2:a3:8f:9f:89:f4:
         85:0a:17:d2:c1:6b:42:4e:52:13:64:1d:87:ad:07:26:25:f3:
         f9:e7:62:f5:c0:f9:a9:6a:31:8e:54:6c:e6:05:9d:78:79:7b:
         96:be:a3:ee:4b:d8:97:5b:a1:92:a0:14:a4:74:c0:2c:24:03:
         24:4f:73:7e:c5:de:f6:7e:b9:2f:52:22:d4:e7:ea:c1:45:b4:
         63:58:fd:08:51:18:35:ee:88:af:ca:4e:24:76:a3:4e:06:43:
         46:e3:15:c1:dc:8b:c4:12:0c:39:e3:ef:57:75:e0:2a:b3:c9:
         2d:1a:af:8b:d6:98:77:63:81:1d:fe:a2:c5:14:10:99:57:98:
         06:d1:5f:b0:84:08:49:da:57:73:0b:01:a4:b4:11:22:fb:a8:
         79:ab:b9:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZCQkExMTAvBgNVBAUTKDNFRDk5RDJBQTY4MDg2MUQwQTdCNTlDNkQxQkIyQTVC
RjRDQjJFNkUwHhcNMjQxMTIyMjIyNjI3WhcNMjQxMTI5MjIyNjI3WjAYMRYwFAYD
VQQDEw02NzQxMDUxNC0xYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuABL0teOhUh3Opn9NmO+R/4waHEj0/u5o/sJHGL53kOLEr0aZx1Cz7VkVbjA
4fG/UrL8uT+nImBB1uoXYk+wOJIrWHCWiapmOFG+OBprMkO6ZzhM3c9tyjC/PkdB
F6pNM8kxerQN64il1O/ecr6dA6L3CqO3Y7j+wE0Wqo/+NdbI6N4gN6pWxnkmt9VO
siwFkHh2AFAKYLt8gFvOrWxmlYcmzMpErnbdCLKe3WbwXos+6mkCcmh+FLBt28GF
vfXPqT2yuxuAHi6TbjYbgT4NaP6I/q80DwSwljZLUvayK5NhPszXfkXy9OnlOhuY
9/PS7b2C4Solymm1ATfqshncVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwjixn4
QqZT0eyjm56RP2jtytHfMB8GA1UdIwQYMBaAFD7ZnSqmgIYdCntZxtG7Klv0yy5u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJCQS9CREZFQ0RDMjhE
NzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWhoMEtlMW5HMGJzcVdfVExM
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B0bWRLcWFBaGgwS2UxbkcwYnNxV19UTExtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkJCQS9CREZFQ0RDMjhENzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWho
MEtlMW5HMGJzcVdfVExMbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXEa1SZTWZUPBAsUNiWXIApyCbotryEQkYrcj0e3pocDJV8GlE1Uym
JtgrDmeirWiA0ZelQ2I5JIxJFDCnnpD+PhHL3x8cUhiFgYxeXLLobVo7tH4IjZMh
YUyMF8AQezH1JweE8Xryo4+fifSFChfSwWtCTlITZB2HrQcmJfP552L1wPmpajGO
VGzmBZ14eXuWvqPuS9iXW6GSoBSkdMAsJAMkT3N+xd72frkvUiLU5+rBRbRjWP0I
URg17oivyk4kdqNOBkNG4xXB3IvEEgw54+9XdeAqs8ktGq+L1ph3Y4Ed/qLFFBCZ
V5gG0V+whAhJ2ldzCwGktBEi+6h5q7kB
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org