Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
File:                     lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json)
Hash identifier:          8TrS+v5arGN0O9dVk+h2HoNVSIF9ru8WTKSQCE7eLdA=
Subject key identifier:   F6:18:46:24:AF:63:6D:BE:79:55:51:7B:80:01:37:99:62:16:C7:A7
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Certificate issuer:       /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial:       0A52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
Manifest number:          0A48
Signing time:             Sat 18 May 2024 20:25:09 +0000
Manifest this update:     Sat 18 May 2024 20:25:09 +0000
Manifest next update:     Sat 25 May 2024 20:25:09 +0000
Files and hashes:         1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: 7UCp/aJtJeOSx4p5Y/q+eLb1dGHj6nQK3IVFa6mLR+o=)
                          2: 20E6F554419F11EA8B12587CC4F9AE02.roa (hash: 8FQorrwuxwF2eygC7qO63/pm3u484VEiKF+vz5iOBv0=)
                          3: 1FF145B4419F11EA8B12587CC4F9AE02.roa (hash: YYRZccfDeXuQXXuLT7sfmIy2XVYNm8yW1UQMFyY/kVY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2642 (0xa52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
        Validity
            Not Before: May 18 20:25:09 2024 GMT
            Not After : May 25 20:25:09 2024 GMT
        Subject: CN=66490ea5-294e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:70:95:b9:4d:61:3f:56:6b:70:7e:55:ac:
                    37:05:05:50:d3:bc:a6:05:03:e8:54:ff:a7:8c:4b:
                    8b:98:74:0b:95:b1:68:62:15:8b:f8:25:cf:42:f3:
                    c1:4d:df:8e:87:16:3b:f2:dd:81:88:53:91:8d:f7:
                    64:31:f9:21:38:56:16:7b:ba:b4:f5:89:62:94:c3:
                    b1:e2:15:71:02:0d:d5:39:0a:6e:36:9c:13:f9:3c:
                    e9:27:1c:7b:37:1e:30:5e:b1:ac:5d:7b:4d:24:ed:
                    76:69:a1:ec:e5:75:38:52:17:4f:98:da:b9:d1:fe:
                    d4:94:a2:fd:2f:c7:da:01:6b:16:97:7b:7e:ef:56:
                    fc:bf:00:92:be:53:f8:4e:31:58:c3:7b:2c:4f:6f:
                    ba:28:be:78:ee:da:36:52:86:a6:a6:97:ec:e6:f0:
                    13:5a:78:04:8b:08:cc:14:79:b4:d6:71:41:78:f4:
                    18:3e:e0:16:5c:18:ba:a9:20:96:ef:7f:69:5d:6b:
                    3d:93:97:38:53:35:53:17:96:7e:9e:f5:50:ff:95:
                    22:60:65:b9:57:09:0d:ac:44:ed:db:be:58:8a:76:
                    90:75:8e:f9:7a:90:c6:90:f2:e2:29:f1:2c:02:a4:
                    cf:b9:e3:9b:5a:8a:e7:05:02:ba:e3:4a:10:9f:e3:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:18:46:24:AF:63:6D:BE:79:55:51:7B:80:01:37:99:62:16:C7:A7
            X509v3 Authority Key Identifier:
                keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e2:0f:2b:b7:58:8a:75:7b:85:97:d2:99:ee:80:75:ad:0a:
         bc:6e:c1:c9:12:16:9f:17:c4:98:79:23:9f:a6:73:5d:c5:b1:
         25:a9:c4:86:9d:cf:b4:1d:26:bc:51:89:34:9e:ff:71:5b:9b:
         26:39:36:d3:a0:a1:d2:bd:73:9f:d3:3f:1c:3a:95:1d:ef:ca:
         0f:fd:8a:27:fd:32:7f:97:21:b3:2f:09:da:e0:18:4f:df:d6:
         63:e3:a6:24:07:19:e0:5c:2e:b4:3e:1b:dd:6b:f3:10:99:ad:
         45:c7:14:42:89:f3:08:5c:a9:79:43:da:b3:eb:6e:c3:0a:ce:
         0a:76:b9:76:1d:55:b6:f3:31:31:6e:a9:af:8d:9a:82:9d:54:
         79:e0:01:af:46:35:18:c6:2a:56:d7:34:bb:98:09:ed:42:d0:
         f6:df:32:4b:9f:12:7c:b5:a4:4b:94:28:c5:7a:de:fb:07:21:
         7e:b5:22:eb:cf:93:f2:88:5e:9d:f5:64:e1:0f:92:cb:c9:ef:
         5b:b3:4a:3d:0e:49:0e:6a:e5:5b:da:4d:5b:38:4d:a5:1f:31:
         d1:ff:33:d9:6a:ec:62:6b:06:50:29:cc:7a:9d:3d:32:e3:03:
         29:f1:dd:4b:7f:c2:e2:9c:dd:62:43:3a:b4:1d:2b:a0:82:3f:
         33:21:f9:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICClIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw
REZERjYyRTQwHhcNMjQwNTE4MjAyNTA5WhcNMjQwNTI1MjAyNTA5WjAYMRYwFAYD
VQQDEw02NjQ5MGVhNS0yOTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnlBwlblNYT9Wa3B+Vaw3BQVQ07ymBQPoVP+njEuLmHQLlbFoYhWL+CXPQvPB
Td+OhxY78t2BiFORjfdkMfkhOFYWe7q09YlilMOx4hVxAg3VOQpuNpwT+TzpJxx7
Nx4wXrGsXXtNJO12aaHs5XU4UhdPmNq50f7UlKL9L8faAWsWl3t+71b8vwCSvlP4
TjFYw3ssT2+6KL547to2Uoamppfs5vATWngEiwjMFHm01nFBePQYPuAWXBi6qSCW
739pXWs9k5c4UzVTF5Z+nvVQ/5UiYGW5VwkNrETt275YinaQdY75epDGkPLiKfEs
AqTPueObWornBQK640oQn+OF0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYYRiSv
Y22+eVVRe4ABN5liFsenMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx
OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ
dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3
dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBL4g8rt1iKdXuFl9KZ7oB1rQq8bsHJEhafF8SYeSOfpnNdxbElqcSG
nc+0HSa8UYk0nv9xW5smOTbToKHSvXOf0z8cOpUd78oP/Yon/TJ/lyGzLwna4BhP
39Zj46YkBxngXC60Phvda/MQma1FxxRCifMIXKl5Q9qz627DCs4Kdrl2HVW28zEx
bqmvjZqCnVR54AGvRjUYxipW1zS7mAntQtD23zJLnxJ8taRLlCjFet77ByF+tSLr
z5PyiF6d9WThD5LLye9bs0o9DkkOauVb2k1bOE2lHzHR/zPZauxiawZQKcx6nT0y
4wMp8d1Lf8LinN1iQzq0HSuggj8zIfmR
-----END CERTIFICATE-----
Generated at Sat May 18 21:31:32 2024 by rpki-client on console-ams.rpki-client.org