Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
File:                     scWMB4UVntc2lq-zEtI1z0DzxEE.mft (raw, json)
Hash identifier:          hbjSI9Wu8GvzDg+04x3N/Lac9+lzf6ooEu3vsBOA3Ls=
Subject key identifier:   41:2C:F4:A0:40:3A:68:C1:6D:6C:64:C3:E9:FA:ED:44:21:0F:7F:CB
Authority key identifier: B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41
Certificate issuer:       /CN=A91D6DBD/serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
Manifest number:          C9
Signing time:             Sat 23 Nov 2024 03:53:21 +0000
Manifest this update:     Sat 23 Nov 2024 03:53:20 +0000
Manifest next update:     Sat 30 Nov 2024 03:53:20 +0000
Files and hashes:         1: scWMB4UVntc2lq-zEtI1z0DzxEE.crl (hash: A9VmCglkxskmru1luhcaV8pypLUuwEorPi9Xz0h5fNY=)
                          2: FA39CA70790E11EE86665E43C4F9AE02.roa (hash: xsuXssQOBAE3nj0lpLNVKszjiNPCs90eXxis5UuNvjA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6DBD/serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441
        Validity
            Not Before: Nov 23 03:53:20 2024 GMT
            Not After : Nov 30 03:53:20 2024 GMT
        Subject: CN=674151b1-9f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:aa:ff:f9:01:3a:b6:b3:14:cb:37:4f:4c:
                    2c:cd:9f:55:4e:e0:36:cf:08:2a:ec:32:03:b4:13:
                    d8:d3:9b:c4:af:fa:99:8f:fb:a7:50:b6:5e:a5:f7:
                    a3:f7:ff:a0:75:b4:80:ab:bf:f5:dc:ab:ec:eb:4c:
                    32:f0:ea:9f:85:a3:08:8f:b1:d3:00:18:c1:4f:6f:
                    e7:34:7f:aa:49:61:b5:5f:ba:5d:4b:f8:c9:6c:ec:
                    de:1e:67:5e:64:a4:22:e1:c6:dd:be:1d:e9:b1:b4:
                    47:11:48:70:12:4c:c9:59:73:a7:29:3a:e3:fa:47:
                    d1:54:16:c4:38:9e:7d:6b:de:2f:c2:ca:46:4f:1e:
                    0d:e8:13:29:78:a5:ce:7f:04:57:b6:70:91:70:27:
                    b9:f3:50:64:23:a7:61:21:5a:6a:c5:d6:a8:06:e3:
                    87:78:0b:68:08:40:c0:58:76:dd:02:be:a0:1b:9c:
                    6e:81:42:d6:5e:57:52:9e:c6:20:e4:c3:5c:6f:a6:
                    9d:1c:a8:24:72:b8:88:36:26:ab:ed:0d:44:c8:0a:
                    19:e8:63:5c:b1:1c:d6:5b:57:a7:37:a8:49:0e:4d:
                    eb:b7:69:2d:9b:9c:0f:df:8b:bc:51:91:8b:ed:c4:
                    64:3b:00:bc:58:aa:3d:40:e0:8a:1c:77:fe:8c:ac:
                    d5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2C:F4:A0:40:3A:68:C1:6D:6C:64:C3:E9:FA:ED:44:21:0F:7F:CB
            X509v3 Authority Key Identifier:
                keyid:B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b5:c5:94:48:dd:4f:b3:bd:30:03:f2:ea:9f:78:62:61:ff:
         bb:4b:2a:ca:a1:35:b7:1f:8d:30:ea:b4:67:75:1f:23:c8:db:
         76:6a:07:cf:3b:83:bd:e3:16:d9:ae:ec:b6:70:14:e3:7b:b1:
         6b:bc:3e:66:85:c4:42:e1:f1:8d:3f:bb:7f:4e:29:19:1f:cc:
         37:0f:d1:3e:3e:3a:c4:e5:49:7f:c7:0d:55:f1:42:95:c9:63:
         86:05:b0:14:f3:a4:c1:35:d9:aa:35:9b:1e:1e:02:31:06:18:
         e6:ba:35:6b:bb:34:17:0a:ef:f9:a9:ba:72:57:78:25:cd:31:
         1f:52:de:e9:ad:9e:74:eb:ac:ac:50:85:6c:69:1b:cd:f6:d1:
         19:b5:03:e6:bb:02:24:13:bc:f8:1d:7f:cc:47:55:6e:45:ea:
         be:bb:39:a5:6b:22:bd:7a:1d:73:7b:18:76:eb:3c:6a:2d:55:
         f1:b3:26:9a:b4:f4:c2:1c:20:25:77:20:ac:f4:a3:10:f0:c1:
         c9:51:4d:74:e8:5d:5b:ce:3c:7d:1f:f8:39:54:e2:cb:f1:3c:
         44:5d:06:9c:fc:5d:e0:c8:76:a0:89:1e:86:98:be:52:37:77:
         54:85:7a:ec:25:90:11:f0:b9:61:28:31:82:da:fd:09:8a:27:
         2e:5e:22:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDZEQkQxMTAvBgNVBAUTKEIxQzU4QzA3ODUxNTlFRDczNjk2QUZCMzEyRDIzNUNG
NDBGM0M0NDEwHhcNMjQxMTIzMDM1MzIwWhcNMjQxMTMwMDM1MzIwWjAYMRYwFAYD
VQQDEw02NzQxNTFiMS05ZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttyq//kBOrazFMs3T0wszZ9VTuA2zwgq7DIDtBPY05vEr/qZj/unULZepfej
9/+gdbSAq7/13Kvs60wy8OqfhaMIj7HTABjBT2/nNH+qSWG1X7pdS/jJbOzeHmde
ZKQi4cbdvh3psbRHEUhwEkzJWXOnKTrj+kfRVBbEOJ59a94vwspGTx4N6BMpeKXO
fwRXtnCRcCe581BkI6dhIVpqxdaoBuOHeAtoCEDAWHbdAr6gG5xugULWXldSnsYg
5MNcb6adHKgkcriINiar7Q1EyAoZ6GNcsRzWW1enN6hJDk3rt2ktm5wP34u8UZGL
7cRkOwC8WKo9QOCKHHf+jKzVHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEs9KBA
OmjBbWxkw+n67UQhD3/LMB8GA1UdIwQYMBaAFLHFjAeFFZ7XNpavsxLSNc9A88RB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC8wMkFBNDk1MDc5
MEExMUVFOTlFREQxMUZDNEY5QUUwMi9zY1dNQjRVVm50YzJscS16RXRJMXowRHp4
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NjV01CNFVWbnRjMmxxLXpFdEkxejBEenhFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NkRCRC8wMkFBNDk1MDc5MEExMUVFOTlFREQxMUZDNEY5QUUwMi9zY1dNQjRVVm50
YzJscS16RXRJMXowRHp4RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3tcWUSN1Ps70wA/Lqn3hiYf+7SyrKoTW3H40w6rRndR8jyNt2agfP
O4O94xbZruy2cBTje7FrvD5mhcRC4fGNP7t/TikZH8w3D9E+PjrE5Ul/xw1V8UKV
yWOGBbAU86TBNdmqNZseHgIxBhjmujVruzQXCu/5qbpyV3glzTEfUt7prZ5066ys
UIVsaRvN9tEZtQPmuwIkE7z4HX/MR1VuReq+uzmlayK9eh1zexh26zxqLVXxsyaa
tPTCHCAldyCs9KMQ8MHJUU106F1bzjx9H/g5VOLL8TxEXQac/F3gyHagiR6GmL5S
N3dUhXrsJZAR8LlhKDGC2v0JiicuXiKs
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org