Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
File:                     1f9FyAWBJcJy3wRtwLjgb6owT88.mft (raw, json)
Hash identifier:          gsiILPLWjhieq9/bX0b4GY8bBWrWiSV0AYGL4esrbsA=
Subject key identifier:   DF:8A:EB:60:35:3E:1D:8D:94:3E:25:1F:6C:DB:01:43:E6:CD:25:1E
Authority key identifier: D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF
Certificate issuer:       /CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
Certificate serial:       031D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
Manifest number:          0316
Signing time:             Sun 19 May 2024 03:09:21 +0000
Manifest this update:     Sun 19 May 2024 03:09:21 +0000
Manifest next update:     Sun 26 May 2024 03:09:21 +0000
Files and hashes:         1: 1f9FyAWBJcJy3wRtwLjgb6owT88.crl (hash: 93YL4C9UVE45onG/3+SO2esxTuyeZEX5I9MQ0QFf1oI=)
                          2: 99F51284A1E911EDAD7CE929C4F9AE02.roa (hash: wDWnW7J8ezhy3VihBeAZy2ArJw25sanXXdEHkPtept4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl
                          rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797 (0x31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
        Validity
            Not Before: May 19 03:09:21 2024 GMT
            Not After : May 26 03:09:21 2024 GMT
        Subject: CN=66496d61-5ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:47:03:99:5f:58:87:57:61:39:de:37:04:2d:
                    78:41:14:10:49:43:ed:50:ce:7f:5f:27:f0:ce:f0:
                    d9:80:5e:ea:23:05:54:d5:e8:5b:a6:20:9b:08:61:
                    ee:a0:6d:79:5c:7d:72:bc:05:31:9c:24:64:75:e6:
                    fd:53:ee:99:18:eb:12:f7:2d:a5:87:8c:a9:0a:3d:
                    c3:5d:8d:de:19:14:d4:08:15:41:0f:f1:55:03:09:
                    16:b1:65:c5:01:fd:37:80:db:25:55:33:f7:3c:59:
                    cd:e5:78:9c:12:5a:80:4c:a6:a2:bf:df:04:8b:58:
                    09:2c:cd:f4:79:ab:4a:e6:ae:51:97:41:0f:75:df:
                    fe:36:1a:6c:36:16:28:61:e5:72:f7:28:f9:b4:03:
                    14:70:cf:e1:ca:b7:e3:22:8b:3a:44:d9:3a:e9:f4:
                    3a:99:df:30:c2:9f:e3:d9:4f:6a:9d:a8:f7:f1:02:
                    98:02:e2:73:7b:c1:0e:55:69:25:79:dc:4d:44:ed:
                    7f:8f:09:ec:84:60:2b:8f:6b:f9:d5:23:0a:49:d5:
                    07:28:68:22:d1:db:2e:9f:ba:d8:99:9e:39:17:f1:
                    8d:7b:34:f8:9d:ca:d8:3a:84:7a:24:11:91:bf:72:
                    15:79:58:9c:6b:85:6e:36:60:fb:3d:ca:6e:a1:de:
                    a9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8A:EB:60:35:3E:1D:8D:94:3E:25:1F:6C:DB:01:43:E6:CD:25:1E
            X509v3 Authority Key Identifier:
                keyid:D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:be:6d:ad:18:f7:c5:7a:de:95:83:eb:69:91:9c:3f:11:cd:
         f0:13:ba:89:5e:c0:19:99:09:a3:92:f7:2c:87:fe:6b:6a:3e:
         98:76:86:4b:61:07:1b:ce:43:27:41:43:26:4b:04:9a:7c:8c:
         d0:fd:10:ab:2f:b0:e7:c9:1e:88:89:40:a0:26:a7:a8:e7:cd:
         57:48:bd:99:70:73:1e:e0:98:fa:10:f6:af:6a:2c:ed:bb:9a:
         35:4a:ad:f2:ba:94:c4:a9:57:6c:6a:18:78:2e:b2:40:d5:9a:
         e6:d3:27:f8:3c:ee:ef:89:b9:f7:92:65:4f:10:fb:d8:e2:b2:
         4e:d3:f0:ec:3d:60:71:2e:dc:37:07:8b:12:82:e2:cd:bc:ec:
         21:af:18:77:46:f8:fe:6b:17:e4:e1:36:e5:50:99:8e:6e:b1:
         55:44:21:c9:34:d3:c7:0f:31:8f:49:1a:2f:da:44:3e:68:47:
         c7:61:2e:ab:55:12:f6:0a:bd:bb:71:93:83:95:62:0c:21:c1:
         66:c4:7a:e3:6e:15:a4:f7:2d:90:33:3d:06:a9:42:81:84:cc:
         6b:ba:14:8a:95:eb:7f:b5:f2:fb:25:a7:cf:ff:63:de:3d:71:
         cb:0c:67:81:3b:9c:1a:b6:d7:78:68:b8:f3:db:eb:8a:af:c1:
         ad:87:2e:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdFMjkxMTAvBgNVBAUTKEQ1RkY0NUM4MDU4MTI1QzI3MkRGMDQ2REMwQjhFMDZG
QUEzMDRGQ0YwHhcNMjQwNTE5MDMwOTIxWhcNMjQwNTI2MDMwOTIxWjAYMRYwFAYD
VQQDEw02NjQ5NmQ2MS01YWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3kcDmV9Yh1dhOd43BC14QRQQSUPtUM5/XyfwzvDZgF7qIwVU1ehbpiCbCGHu
oG15XH1yvAUxnCRkdeb9U+6ZGOsS9y2lh4ypCj3DXY3eGRTUCBVBD/FVAwkWsWXF
Af03gNslVTP3PFnN5XicElqATKaiv98Ei1gJLM30eatK5q5Rl0EPdd/+NhpsNhYo
YeVy9yj5tAMUcM/hyrfjIos6RNk66fQ6md8wwp/j2U9qnaj38QKYAuJze8EOVWkl
edxNRO1/jwnshGArj2v51SMKSdUHKGgi0dsun7rYmZ45F/GNezT4ncrYOoR6JBGR
v3IVeVica4VuNmD7Pcpuod6pZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+K62A1
Ph2NlD4lH2zbAUPmzSUeMB8GA1UdIwQYMBaAFNX/RcgFgSXCct8EbcC44G+qME/P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0UyOS81NkYxQzUzMjg3
OTAxMUVDODZEMDQ0MUVDNEY5QUUwMi8xZjlGeUFXQkpjSnkzd1J0d0xqZ2I2b3dU
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFmOUZ5QVdCSmNKeTN3UnR3TGpnYjZvd1Q4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0UyOS81NkYxQzUzMjg3OTAxMUVDODZEMDQ0MUVDNEY5QUUwMi8xZjlGeUFXQkpj
Snkzd1J0d0xqZ2I2b3dUODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPvm2tGPfFet6Vg+tpkZw/Ec3wE7qJXsAZmQmjkvcsh/5raj6YdoZL
YQcbzkMnQUMmSwSafIzQ/RCrL7DnyR6IiUCgJqeo581XSL2ZcHMe4Jj6EPavaizt
u5o1Sq3yupTEqVdsahh4LrJA1Zrm0yf4PO7vibn3kmVPEPvY4rJO0/DsPWBxLtw3
B4sSguLNvOwhrxh3Rvj+axfk4TblUJmObrFVRCHJNNPHDzGPSRov2kQ+aEfHYS6r
VRL2Cr27cZODlWIMIcFmxHrjbhWk9y2QMz0GqUKBhMxruhSKlet/tfL7JafP/2Pe
PXHLDGeBO5wattd4aLjz2+uKr8Gthy7h
-----END CERTIFICATE-----
Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org