Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
File:                     TvlHO1VK4acroJgf_v4Tji1IDsw.mft (raw, json)
Hash identifier:          a79VYViBVJ/k2j3fAptTzX6vHxxlTRNFuSFcMSOSBIo=
Subject key identifier:   27:4D:5F:D0:50:9C:F9:25:29:5A:6E:35:83:66:10:5F:FA:2D:2B:18
Authority key identifier: 4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC
Certificate issuer:       /CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
Certificate serial:       0890
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
Manifest number:          0889
Signing time:             Sat 18 May 2024 21:34:16 +0000
Manifest this update:     Sat 18 May 2024 21:34:16 +0000
Manifest next update:     Sat 25 May 2024 21:34:16 +0000
Files and hashes:         1: TvlHO1VK4acroJgf_v4Tji1IDsw.crl (hash: qUloQbdUI2hSanoIH+IlEwZRzyqOys+fFZ7wS6uUlgo=)
                          2: E32E2F000EE811EE90BBC818C4F9AE02.roa (hash: gxpFG7t6kT/yIlHM4OctfK8MbQdR8WSkYcKsmjNONgY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl
                          rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192 (0x890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
        Validity
            Not Before: May 18 21:34:16 2024 GMT
            Not After : May 25 21:34:16 2024 GMT
        Subject: CN=66491ed8-26f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:c0:7d:56:79:ee:41:24:e8:69:a8:2c:83:
                    c3:c4:4c:f2:5f:17:8d:d0:44:cf:85:06:38:0e:bb:
                    bc:0f:e8:8c:f3:d5:69:be:41:9f:b6:26:4f:a8:2f:
                    c3:6e:26:cd:0d:36:d2:e8:0a:0c:4d:e1:12:1a:f9:
                    aa:6a:13:43:8b:d5:15:69:40:e9:3e:1e:4e:80:20:
                    9d:b8:c9:3e:74:bb:37:0a:69:98:60:d5:77:f9:a5:
                    65:a8:23:63:d4:62:5e:aa:8e:37:74:91:ff:41:ba:
                    8a:df:36:dc:a1:af:2b:f7:2c:58:96:03:41:dc:39:
                    05:bc:bb:74:13:c7:a2:13:f6:7d:d3:c4:46:bf:85:
                    fd:82:32:a1:fa:98:81:f0:f4:39:e4:9b:87:14:36:
                    96:39:67:95:35:c7:56:1e:ad:5c:0e:5e:98:11:4d:
                    8e:ab:a5:37:fe:53:89:e4:d9:41:27:bd:39:79:e6:
                    1d:4a:d8:66:ee:98:0e:29:40:72:9d:2f:f3:18:60:
                    8b:42:b5:0c:a0:29:5f:42:c8:f0:3e:e5:38:f3:3c:
                    96:90:ad:82:c2:bc:95:87:e6:90:80:68:2c:27:8f:
                    4b:e8:1a:1d:03:de:48:e9:44:bf:95:db:bf:34:a8:
                    02:2d:45:61:74:75:5c:2e:ee:cb:54:95:01:50:fe:
                    13:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:5F:D0:50:9C:F9:25:29:5A:6E:35:83:66:10:5F:FA:2D:2B:18
            X509v3 Authority Key Identifier:
                keyid:4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:60:94:a6:b3:50:38:5f:68:52:44:bb:2a:3e:79:93:dd:4d:
         c7:11:c9:32:f9:d6:11:90:1e:97:8b:bf:a3:a4:8e:39:8c:7a:
         64:6a:85:75:8d:44:c0:0a:06:f8:8a:7f:92:d4:9e:43:bb:a5:
         3e:e4:df:c8:8b:4f:81:ba:21:19:b3:9d:8e:d0:71:ff:e3:1c:
         f7:34:99:d2:9b:d3:3e:fb:c3:df:96:55:97:93:cd:da:36:a1:
         28:12:8d:49:6f:38:ed:cc:ea:da:25:06:3a:3f:d9:dd:5f:8b:
         b7:c0:e0:f2:c2:7f:5a:f0:0b:fc:c1:a8:f8:0e:80:8b:5a:13:
         97:23:84:39:cd:a3:6e:48:c2:95:06:6d:1f:03:86:e7:07:5b:
         40:17:29:29:ed:dd:17:f2:51:93:fa:47:a9:66:ad:ad:ff:d6:
         09:d8:07:56:70:bd:88:6f:15:2f:88:ce:dc:3c:49:0e:cb:eb:
         01:71:56:a3:8d:c5:ce:46:68:be:51:46:14:63:d5:0a:5c:d4:
         b9:66:19:39:ef:26:2a:2e:c7:79:a1:32:8a:e3:4e:af:02:66:
         47:84:5d:0b:ac:bb:10:d9:9e:83:24:94:e3:e8:88:4e:57:7f:
         ef:ac:3b:2d:91:94:b5:3d:6b:24:4a:28:ad:79:b1:95:80:59:
         9c:a2:f1:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI0QzMxMTAvBgNVBAUTKDRFRjk0NzNCNTU0QUUxQTcyQkEwOTgxRkZFRkUxMzhF
MkQ0ODBFQ0MwHhcNMjQwNTE4MjEzNDE2WhcNMjQwNTI1MjEzNDE2WjAYMRYwFAYD
VQQDEw02NjQ5MWVkOC0yNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz2LAfVZ57kEk6GmoLIPDxEzyXxeN0ETPhQY4Dru8D+iM89VpvkGftiZPqC/D
bibNDTbS6AoMTeESGvmqahNDi9UVaUDpPh5OgCCduMk+dLs3CmmYYNV3+aVlqCNj
1GJeqo43dJH/QbqK3zbcoa8r9yxYlgNB3DkFvLt0E8eiE/Z908RGv4X9gjKh+piB
8PQ55JuHFDaWOWeVNcdWHq1cDl6YEU2Oq6U3/lOJ5NlBJ705eeYdSthm7pgOKUBy
nS/zGGCLQrUMoClfQsjwPuU48zyWkK2CwryVh+aQgGgsJ49L6BodA95I6US/ldu/
NKgCLUVhdHVcLu7LVJUBUP4TYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdNX9BQ
nPklKVpuNYNmEF/6LSsYMB8GA1UdIwQYMBaAFE75RztVSuGnK6CYH/7+E44tSA7M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRDMy9DMjNGNzY3Qzk5
ODAxMUVBQjMzNzNFNkZDNEY5QUUwMi9UdmxITzFWSzRhY3JvSmdmX3Y0VGppMUlE
c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R2bEhPMVZLNGFjcm9KZ2ZfdjRUamkxSURzdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjRDMy9DMjNGNzY3Qzk5ODAxMUVBQjMzNzNFNkZDNEY5QUUwMi9UdmxITzFWSzRh
Y3JvSmdmX3Y0VGppMUlEc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfYJSms1A4X2hSRLsqPnmT3U3HEcky+dYRkB6Xi7+jpI45jHpkaoV1
jUTACgb4in+S1J5Du6U+5N/Ii0+BuiEZs52O0HH/4xz3NJnSm9M++8PfllWXk83a
NqEoEo1JbzjtzOraJQY6P9ndX4u3wODywn9a8Av8waj4DoCLWhOXI4Q5zaNuSMKV
Bm0fA4bnB1tAFykp7d0X8lGT+kepZq2t/9YJ2AdWcL2IbxUviM7cPEkOy+sBcVaj
jcXORmi+UUYUY9UKXNS5Zhk57yYqLsd5oTKK406vAmZHhF0LrLsQ2Z6DJJTj6IhO
V3/vrDstkZS1PWskSiitebGVgFmcovEX
-----END CERTIFICATE-----
Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org