Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
File:                     XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json)
Hash identifier:          z+emUcv0wEIEnDj1LG4IRz1VqfSaF15WSv81qPj9J0A=
Subject key identifier:   C4:20:C2:AD:E7:0A:6D:35:99:CB:BE:24:8F:E8:E1:1F:89:66:36:95
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       26C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
Manifest number:          245B
Signing time:             Sat 18 May 2024 16:10:14 +0000
Manifest this update:     Sat 18 May 2024 16:10:13 +0000
Manifest next update:     Sat 25 May 2024 16:10:13 +0000
Files and hashes:         1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: FBSE0gvL7g6m0z1+IX67/onc6N9LgLpP/GAuHl3eFlY=)
                          2: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: 4qI2WUUHm8+dcoyB7U3qYqYYb9g/5slAkhQLxcA06nE=)
                          3: 9B22F928BFE311EE949C2918C4F9AE02.roa (hash: UCVs4XYqNQJC/nfD2RmyD3m/VU3GEKBV0v/33LcSJcs=)
                          4: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: bf1jaGSVQJslfBa+5r4lXb8DSx7SXnGxXRybRrv6RyE=)
                          5: F04860C28C5611E792848B4AC4F9AE02.roa (hash: prYbbDK25Bc1CFA5URm+axMyGXHqHfx/q5USvn4UHzA=)
                          6: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: T5LqovqjFACRGWR8vxXr532Rbx7YNjQyJG4PxgQlQMo=)
                          7: 14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa (hash: 1ThofXwtJDa0er1G9OhUMcBj7ScXSoWzJ/pOejR8jU0=)
                          8: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 76yAF/AKtZv8rbStVVkcFHmGYw1FMk7DIHQy7aN2Zjk=)
                          9: F688FE388C5611E792848B4AC4F9AE02.roa (hash: cte7A2h9jLVlV8SfTGir4YQNSb45IiEg8uru+aQWy7s=)
                          10: F1475E928C5611E792848B4AC4F9AE02.roa (hash: JGj5dfjS19FaPEAJ8kPdZuODptnMExlvE4BaAlPEYVU=)
                          11: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: mrGJzAbW37pPvsvk8/sNvAoE/DrsQDtBp4BLxlB8Gkc=)
                          12: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: qc/yszFnU55fDmuhOitWa9LJKPZEEuEUFsIGs/2d0cA=)
                          13: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: A8cVqh62DLZnoSJe37qhi9qHAi8ZuF04y0Qg3Srhi7w=)
                          14: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: BdiehjDEvV0WKRQjURsPtAE6tjynwD/JIOJhJo1OvBQ=)
                          15: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: qHs+fqBU5YlcSjsUhX8kCEmEa4luPEv25Vk2i2sM2HA=)
                          16: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: P8DR/P8EbPg/wjMIKFCDnr5SO8UMSMfzw3cYR/SN8aM=)
                          17: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: t3XBKJTQSBYqiGHST30gvx8Sv6Y9Vi19doDF/V8I5SA=)
                          18: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: 2oNbSuNtMrRZhuDFKF7wvA8tGJ7a062T3BnrjVnTxgI=)
                          19: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: z0TbP/uJcntbcykS17didMVv1I6kJuivV3YyPDvb5Qk=)
                          20: 5366509AC63511EAAC843455C4F9AE02.roa (hash: sZIeVS4EzNY7xGT9g8wGT7ZJ5Ha157jK1HmygHHXLCQ=)
                          21: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: Rn7Jy0X7+XW4A3zgtQl81Fu2aYAjwpARLeE6XBDTgZA=)
                          22: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: 0O96aUBFnF3g+jtqdQw88vGeNoOwCzLEisDKXvjAw3U=)
                          23: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: Y93y000PyFusN9av2g725nIEbc+v2zkO/Skb0ZY14h0=)
                          24: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: UfYQ+WWf4FFjCPuP2mbYoA7YL9U5XlfHaY09FM1ptoA=)
                          25: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: D78XSgWinPRl6rjut3BmM27VQL+84X13crl9IciHOTE=)
                          26: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: HJwIxd4p8f4eT4e8lMS53Ug2rtvcBgI8YglBxHZrJXM=)
                          27: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: w5phrKsuXRjMj+Oq65+3ElGQHP7VKWZA9pF0ugIRM9g=)
                          28: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: UIz2gPGkTqx3wwDO61C1xAMrlc0SkMhFS3UMTgHXbUo=)
                          29: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: E7J2EE4Iw2nztwDHOazaLxPeQrBXYkfo/CwcOcaXIpo=)
                          30: 543386248C5811E782F42951C4F9AE02.roa (hash: 5EJvxSG52Q0omsSTU0w25Epc1lEmIaeLZWBNDFGGpl0=)
                          31: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: kR9spEW1is0jBJfLnTc/5df7T7vuoq4ZZYVArAg5qFU=)
                          32: 27A84B00A1CC11ED8DDB785DC4F9AE02.roa (hash: hsZwD3Tp7iprkEZyMrEzcTV4AWmWILnDiDx8ZUXHNsQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9924 (0x26c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: May 18 16:10:13 2024 GMT
            Not After : May 25 16:10:13 2024 GMT
        Subject: CN=6648d2e6-8cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:1d:92:58:e4:35:f5:b1:fd:96:4b:62:10:
                    45:be:af:37:bd:03:0e:54:d6:8e:7d:35:ac:67:03:
                    be:07:6a:61:d5:cd:09:80:00:c6:3f:b9:b0:6d:ed:
                    80:b5:88:30:6c:77:5a:d1:8a:3c:c6:e0:0e:d2:b9:
                    ec:23:b7:09:b3:06:a8:bd:6c:a0:01:4d:a6:c3:3a:
                    43:64:c2:b1:f2:f3:b5:b2:98:67:be:aa:d1:7a:36:
                    cf:30:31:22:2f:77:68:68:cb:ba:84:5f:f0:1f:9d:
                    c1:af:d7:2a:cc:3b:90:13:12:8b:34:b5:9e:89:17:
                    1c:91:05:b3:e1:d2:a3:04:86:e2:17:50:14:3a:2f:
                    95:05:ad:b4:59:30:3f:b7:1a:bf:6f:8b:69:8f:ef:
                    c0:53:99:44:f1:08:fa:12:5c:9f:27:89:82:fe:06:
                    51:3b:ba:d2:b3:af:6a:69:e7:be:96:4f:c6:c4:95:
                    b9:f5:1f:e4:16:a2:c6:95:bb:2e:7d:8c:50:4d:e8:
                    b8:db:6c:be:59:c6:39:f2:92:19:09:9b:ad:79:94:
                    7d:f7:1d:28:2c:42:29:6d:8f:f9:86:85:22:34:f0:
                    79:a5:36:a1:c2:2c:e9:04:2d:a6:f6:6b:60:e9:2e:
                    25:12:64:22:11:90:8c:90:24:c4:69:e4:79:8c:6b:
                    88:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:C2:AD:E7:0A:6D:35:99:CB:BE:24:8F:E8:E1:1F:89:66:36:95
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:11:56:22:f0:86:f1:35:fb:f8:7f:7b:c6:2f:48:b8:dc:e4:
         87:cc:76:f4:90:18:c3:b1:2f:d4:78:38:c1:42:08:17:d9:57:
         45:c2:54:dc:d5:4b:66:c6:0f:d4:bb:d8:e3:b7:2a:10:51:df:
         02:64:13:4a:c5:13:e1:41:19:c4:58:92:f6:a7:8e:16:6d:5a:
         2d:4a:10:eb:a8:f3:a9:75:15:48:11:32:b8:7f:76:73:eb:99:
         f6:7f:7f:71:e9:d5:c3:c9:8b:58:5c:e6:34:41:45:2a:07:fb:
         9b:08:f3:e1:08:3c:bc:ee:46:57:94:51:21:32:33:f5:48:35:
         12:b4:3f:2f:3f:e1:92:fa:3d:33:6a:76:65:6a:d7:41:5d:c5:
         ee:9f:bb:0b:09:a7:f2:21:cb:76:53:9c:7c:61:0a:16:e9:1d:
         44:6c:e8:11:75:75:44:22:49:e0:3e:48:d3:e8:eb:ce:84:bb:
         af:13:f1:df:4e:c0:68:e5:e5:a5:97:d4:c6:58:bf:1a:e1:9b:
         1d:f3:ae:7c:f8:a9:aa:c7:80:4f:8e:84:de:e0:5d:ea:5d:69:
         51:b5:88:04:25:2b:16:6d:63:c0:9d:e6:32:7d:3c:9f:f0:fd:
         54:17:41:00:15:12:fb:a8:bf:b0:2a:c9:11:e6:8d:ff:c1:24:
         e3:19:1f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----