Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
File:                     IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json)
Hash identifier:          rxdsWA7WeLOh01G+XHsNZApXr4QQTNh8EZ3yprCDteg=
Subject key identifier:   B1:1B:7A:63:FB:82:6C:F9:82:48:37:76:29:A7:3E:09:09:41:9F:F0
Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
Certificate issuer:       /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
Manifest number:          0114
Signing time:             Sun 19 May 2024 05:22:44 +0000
Manifest this update:     Sun 19 May 2024 05:22:44 +0000
Manifest next update:     Sun 26 May 2024 05:22:44 +0000
Files and hashes:         1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: tihS63UMidlpoHh4MuvAGi2DHlwiboxcGYN+Jp/xpVA=)
                          2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: veSlQf/CtcK+E3cadTSIvp74zNqWmb54QwAsU5TBM6Y=)
                          3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: omJzpgZzOWq0sTMT09fMKlwoBronivENmmhDrr0voFU=)
                          4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: tqO39ucJYdpj09A9EAyx23NdyDy6sspMpuOAB2X2654=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
                          rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
        Validity
            Not Before: May 19 05:22:44 2024 GMT
            Not After : May 26 05:22:44 2024 GMT
        Subject: CN=66498ca4-c44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:6e:36:5d:25:9d:cd:98:70:fd:91:f1:30:
                    f1:3a:76:94:71:f1:ad:33:ba:f2:4f:ad:43:9a:d8:
                    d7:5c:7e:d2:e9:7b:bb:9e:e9:3c:65:f9:c4:f3:af:
                    b8:66:24:97:29:c1:67:80:db:fd:eb:1e:4f:86:01:
                    5b:1f:33:10:cb:3a:a6:12:4c:27:9d:6d:c5:d6:55:
                    ea:03:f6:97:9b:5b:6e:fb:30:72:64:ba:d0:18:01:
                    64:51:4a:2e:21:4c:de:d1:bc:3a:a3:98:1b:0f:67:
                    20:07:77:2a:1a:9d:55:80:e0:67:a4:56:ec:de:1e:
                    74:55:b8:1a:be:7d:47:ec:13:a4:02:bf:d0:45:ce:
                    8a:ea:82:7b:d9:39:42:80:ad:c7:9c:4a:3e:62:e1:
                    90:d2:b6:ca:1f:9e:18:71:21:ae:0d:9d:fe:7a:f7:
                    04:21:cb:37:a7:d4:5f:da:b8:3a:49:f5:ad:57:8a:
                    93:cc:88:f9:5f:6a:25:38:bc:41:e5:e7:01:a3:f8:
                    30:62:74:f1:bf:7b:17:68:e0:27:05:73:23:4f:05:
                    35:66:65:d8:18:d1:2c:45:02:1c:71:8c:9d:15:7f:
                    e6:37:5b:26:10:7f:ec:20:7a:bf:c9:da:18:bb:dc:
                    71:9c:ab:2d:96:d3:08:e1:66:82:2e:42:bf:2e:c8:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1B:7A:63:FB:82:6C:F9:82:48:37:76:29:A7:3E:09:09:41:9F:F0
            X509v3 Authority Key Identifier:
                keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:cd:d9:f6:78:7c:21:87:fb:cd:79:56:a9:c1:3f:b5:74:f8:
         62:db:83:35:53:c3:bf:d4:bf:e5:7d:fd:78:04:f8:1c:78:1e:
         d0:3f:48:9b:58:f9:83:28:11:e0:bd:0f:aa:16:db:f9:f6:96:
         80:f7:d4:63:6d:46:a9:78:e4:6c:df:a8:7d:d4:f1:99:79:e2:
         79:b9:a3:60:41:e6:dc:6f:48:9f:37:19:ab:7b:b3:c2:3f:c5:
         82:f4:e6:12:94:c6:26:f3:28:6e:28:e1:7f:a2:0e:43:a4:91:
         5e:8e:18:f7:ba:52:2a:cc:8b:cf:60:52:bf:44:27:01:55:36:
         1e:57:00:45:26:38:14:35:23:7c:ce:59:6e:dc:14:b5:dc:02:
         81:7e:14:f0:54:69:44:7b:a4:c1:af:61:42:cd:82:0f:66:93:
         dd:20:9d:44:ec:ba:59:b2:b5:74:55:e9:1a:e3:0f:6d:93:19:
         01:b5:52:62:a9:89:91:6b:26:92:4e:cd:43:1b:1b:69:df:2a:
         3f:1e:37:06:79:10:c7:2d:d3:cc:42:84:72:49:d6:84:85:64:
         40:1a:95:f7:d8:0c:75:a4:5c:ed:f3:79:e7:f1:c3:58:89:e4:
         93:f7:c9:d2:41:3e:16:57:45:d9:b2:6f:c5:ca:78:67:3a:52:
         34:cc:51:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1
QjA4RDZCNjMwHhcNMjQwNTE5MDUyMjQ0WhcNMjQwNTI2MDUyMjQ0WjAYMRYwFAYD
VQQDEw02NjQ5OGNhNC1jNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwFuNl0lnc2YcP2R8TDxOnaUcfGtM7ryT61DmtjXXH7S6Xu7nuk8ZfnE86+4
ZiSXKcFngNv96x5PhgFbHzMQyzqmEkwnnW3F1lXqA/aXm1tu+zByZLrQGAFkUUou
IUze0bw6o5gbD2cgB3cqGp1VgOBnpFbs3h50Vbgavn1H7BOkAr/QRc6K6oJ72TlC
gK3HnEo+YuGQ0rbKH54YcSGuDZ3+evcEIcs3p9Rf2rg6SfWtV4qTzIj5X2olOLxB
5ecBo/gwYnTxv3sXaOAnBXMjTwU1ZmXYGNEsRQIccYydFX/mN1smEH/sIHq/ydoY
u9xxnKstltMI4WaCLkK/LshTPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEbemP7
gmz5gkg3dimnPgkJQZ/wMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy
MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h
Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1
Njh6dk9aaDVEajliQ05hMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIzdn2eHwhh/vNeVapwT+1dPhi24M1U8O/1L/lff14BPgceB7QP0ib
WPmDKBHgvQ+qFtv59paA99RjbUapeORs36h91PGZeeJ5uaNgQebcb0ifNxmre7PC
P8WC9OYSlMYm8yhuKOF/og5DpJFejhj3ulIqzIvPYFK/RCcBVTYeVwBFJjgUNSN8
zllu3BS13AKBfhTwVGlEe6TBr2FCzYIPZpPdIJ1E7LpZsrV0Veka4w9tkxkBtVJi
qYmRayaSTs1DGxtp3yo/HjcGeRDHLdPMQoRySdaEhWRAGpX32Ax1pFzt83nn8cNY
ieST98nSQT4WV0XZsm/FynhnOlI0zFEn
-----END CERTIFICATE-----
Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org