Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
File:                     EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json)
Hash identifier:          ovfMpmBD50/V+YjxuWtR6RFf2iVz0sHJxEnYdli//0c=
Subject key identifier:   8B:12:9E:74:29:2F:F7:60:FA:65:BD:21:A4:21:18:DB:02:FC:EA:F4
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Certificate issuer:       /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
Manifest number:          010C
Signing time:             Thu 21 Nov 2024 03:13:45 +0000
Manifest this update:     Thu 21 Nov 2024 03:13:44 +0000
Manifest next update:     Thu 28 Nov 2024 03:13:44 +0000
Files and hashes:         1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: Zcn3r7rGEq5Yec/ZiBdQJSfhReiYoMvm5eppyeMsT8Q=)
                          2: E96CDD7A614611EE9C2B1380C4F9AE02.roa (hash: XdXCF2Xi5uxog6z5KJooofR84p3s7vuCyigfGvk5wSA=)
                          3: 32D39C06224511EE81776175C4F9AE02.roa (hash: 1b01HrQ984mzb/02NyzWUFZzcTsdrWy3Ymvx1U4TcOM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
        Validity
            Not Before: Nov 21 03:13:44 2024 GMT
            Not After : Nov 28 03:13:44 2024 GMT
        Subject: CN=673ea569-1c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:f8:99:bd:6e:95:4b:4f:5b:b3:a3:27:9c:
                    7c:eb:e5:a3:90:d5:fc:39:51:ed:e4:c7:c8:d0:1a:
                    5d:10:72:30:03:6b:29:64:6a:08:43:3f:eb:0a:71:
                    26:82:79:e4:98:43:28:fb:72:e6:46:75:f3:e6:87:
                    a0:45:ac:9f:c6:11:8c:52:fa:a6:7f:63:ca:b9:0d:
                    92:0f:93:77:33:a1:ae:6b:88:09:6b:29:d6:20:01:
                    7b:13:7c:1a:31:d8:31:6c:82:08:bb:5b:e9:49:70:
                    72:be:65:ab:94:ca:fd:fc:e9:df:cb:da:28:b9:40:
                    ba:a1:93:0c:20:8e:a6:9a:2a:ea:69:ff:48:da:b1:
                    c5:0c:27:9d:75:9a:b9:8e:01:ea:ea:69:54:c8:78:
                    11:95:96:b2:a8:09:0f:79:ae:5a:b6:d2:26:ed:72:
                    40:1d:f0:64:a1:a4:c5:14:a6:ca:8d:dd:73:96:45:
                    e6:90:fc:3d:00:e9:0f:5e:3c:03:65:bd:79:7c:31:
                    22:15:f1:bb:f1:19:fb:9c:c3:36:af:21:3a:55:e6:
                    18:61:45:ab:da:44:fd:83:18:b2:7f:df:77:c2:78:
                    70:d9:e4:11:a9:74:8d:28:02:73:91:36:71:8c:cb:
                    33:11:30:94:f9:3e:d3:ec:e6:66:fe:97:43:91:eb:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:12:9E:74:29:2F:F7:60:FA:65:BD:21:A4:21:18:DB:02:FC:EA:F4
            X509v3 Authority Key Identifier:
                keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2d:e3:1c:9c:0f:0f:e4:47:24:32:01:ae:b8:48:09:d0:54:
         c8:f1:ae:67:1a:37:c1:a6:23:22:79:f7:4a:7c:2d:85:95:f6:
         28:ee:bf:6e:1b:01:96:53:9f:e5:9d:9a:6e:8f:3d:8f:75:25:
         ec:5e:fd:90:d7:c7:cb:ba:7e:db:e9:ce:65:a4:d1:be:51:62:
         f6:22:ea:4b:47:6f:c9:4d:7f:82:48:12:d6:1b:61:95:06:3a:
         09:8b:74:0b:25:5b:9a:ef:f6:a2:5c:da:5e:65:f8:6e:fe:e7:
         39:f3:92:bc:cb:0e:15:84:f0:6c:ec:92:19:0b:59:45:47:29:
         41:c3:f3:6b:88:88:0e:21:23:ca:fe:05:5e:ee:37:4c:61:41:
         93:5a:81:dd:73:c6:51:34:e3:ca:f7:6b:a2:95:71:0d:68:98:
         c0:13:4b:cc:10:00:4c:5a:e8:b7:39:2f:61:95:5a:12:79:e4:
         3d:eb:8e:d5:28:42:b2:72:86:f5:97:70:ea:45:4f:03:74:02:
         50:3c:86:7d:b4:b5:36:f3:20:3b:fa:4f:77:d5:5a:e2:8e:f0:
         51:bc:74:54:82:19:08:23:59:51:f0:3d:fa:ad:57:86:c6:76:
         f6:43:8a:19:03:98:91:fd:08:f0:a7:fc:b5:01:54:0d:33:ab:
         28:70:db:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQ4NDQxMTAvBgNVBAUTKDExNjREQTYwNDM0REVFNUVCMTRCQjUzRDRCNTk0RTY2
NURGMjZGRjYwHhcNMjQxMTIxMDMxMzQ0WhcNMjQxMTI4MDMxMzQ0WjAYMRYwFAYD
VQQDEw02NzNlYTU2OS0xYzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAucH4mb1ulUtPW7OjJ5x86+WjkNX8OVHt5MfI0BpdEHIwA2spZGoIQz/rCnEm
gnnkmEMo+3LmRnXz5oegRayfxhGMUvqmf2PKuQ2SD5N3M6Gua4gJaynWIAF7E3wa
MdgxbIIIu1vpSXByvmWrlMr9/Onfy9oouUC6oZMMII6mmirqaf9I2rHFDCeddZq5
jgHq6mlUyHgRlZayqAkPea5attIm7XJAHfBkoaTFFKbKjd1zlkXmkPw9AOkPXjwD
Zb15fDEiFfG78Rn7nMM2ryE6VeYYYUWr2kT9gxiyf993wnhw2eQRqXSNKAJzkTZx
jMszETCU+T7T7OZm/pdDkesgLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsSnnQp
L/dg+mW9IaQhGNsC/Or0MB8GA1UdIwQYMBaAFBFk2mBDTe5esUu1PUtZTmZd8m/2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDg0NC83ODc2OTQ3NDE2
NTIxMUVFOTE0QjdCNTZDNEY5QUUwMi9FV1RhWUVOTjdsNnhTN1U5UzFsT1psM3li
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VXVGFZRU5ON2w2eFM3VTlTMWxPWmwzeWJfWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDg0NC83ODc2OTQ3NDE2NTIxMUVFOTE0QjdCNTZDNEY5QUUwMi9FV1RhWUVOTjds
NnhTN1U5UzFsT1psM3liX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADLeMcnA8P5EckMgGuuEgJ0FTI8a5nGjfBpiMiefdKfC2FlfYo7r9u
GwGWU5/lnZpujz2PdSXsXv2Q18fLun7b6c5lpNG+UWL2IupLR2/JTX+CSBLWG2GV
BjoJi3QLJVua7/aiXNpeZfhu/uc585K8yw4VhPBs7JIZC1lFRylBw/NriIgOISPK
/gVe7jdMYUGTWoHdc8ZRNOPK92uilXENaJjAE0vMEABMWui3OS9hlVoSeeQ9647V
KEKycob1l3DqRU8DdAJQPIZ9tLU28yA7+k931VrijvBRvHRUghkII1lR8D36rVeG
xnb2Q4oZA5iR/Qjwp/y1AVQNM6socNv/
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:16 2024 by rpki-client on console-ams.rpki-client.org