Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
File:                     t6ep_77HE_hOC1GAr3besW5ykik.mft (raw, json)
Hash identifier:          Il+iQBqkqUncdSLcSAK81QygR61A5UT//inU1FjJEVs=
Subject key identifier:   AD:94:A6:A8:C6:BF:25:C0:6A:D8:A7:29:F2:9F:F5:2D:52:0D:E3:71
Authority key identifier: B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
Certificate issuer:       /CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Certificate serial:       0525
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
Manifest number:          050F
Signing time:             Fri 22 Nov 2024 23:13:24 +0000
Manifest this update:     Fri 22 Nov 2024 23:13:24 +0000
Manifest next update:     Fri 29 Nov 2024 23:13:23 +0000
Files and hashes:         1: t6ep_77HE_hOC1GAr3besW5ykik.crl (hash: DOsh33T5C89nyD8NQXSifuZ89mCMDctJmmOkqgmPLUQ=)
                          2: 42DB2A2A4E6511ECA2CED527C4F9AE02.roa (hash: V6GGgopQM/9MURG7ZCjHLUUN1Fak1PfMVntGosPl4Vo=)
                          3: F68AC4D84D9B11EC9CF19624C4F9AE02.roa (hash: DYCid3LLEniTmBG1cDjym9t3s6fpWuAE5JDaOW/kSN8=)
                          4: B63ACB8CCB8411EC98BF6718C4F9AE02.roa (hash: YAUteCmPsOym2G6bKX0x3ZydCIKVsenbUJgAGliknoE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
        Validity
            Not Before: Nov 22 23:13:24 2024 GMT
            Not After : Nov 29 23:13:23 2024 GMT
        Subject: CN=67411014-3c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:48:b6:9a:1a:83:11:e5:e6:22:58:73:43:e3:
                    de:e0:5a:93:47:22:2b:37:55:a8:77:f9:4d:a0:8f:
                    4e:9d:f4:46:cb:96:fd:6a:13:11:2f:5d:c1:a3:8f:
                    21:89:12:50:09:b7:fa:12:c5:be:33:78:f2:e4:d1:
                    6d:76:c9:92:40:e1:c7:b1:06:aa:d2:4d:93:32:f3:
                    d5:68:47:94:ba:d1:f6:5f:f0:f0:db:31:a7:b7:1f:
                    ae:be:b3:f3:f1:af:72:ed:31:ba:7d:db:ea:fe:5f:
                    69:8e:4c:51:9d:73:54:fc:14:be:45:42:7c:e8:b0:
                    34:35:1d:1d:7a:5f:d0:1c:cd:eb:64:07:ec:37:ed:
                    db:69:fa:06:11:31:ea:da:7d:82:65:28:f8:2c:05:
                    2b:13:c3:83:ff:a7:4b:d1:12:22:d6:d0:a1:79:25:
                    3b:0c:cf:24:53:a8:75:de:42:ec:c4:be:0c:b9:50:
                    fe:4e:a8:60:2d:fc:39:d9:a9:ee:3d:07:29:b8:54:
                    4b:68:32:13:50:ea:9e:46:11:84:a9:4f:f7:54:a6:
                    1f:3e:b7:fe:d1:82:75:63:a0:65:c0:22:0d:2a:61:
                    e4:1b:70:9e:88:d7:52:12:94:ff:d7:b4:00:f2:f3:
                    87:de:fc:11:80:1c:ed:7f:16:bc:44:fb:b6:3a:29:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:94:A6:A8:C6:BF:25:C0:6A:D8:A7:29:F2:9F:F5:2D:52:0D:E3:71
            X509v3 Authority Key Identifier:
                keyid:B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c0:ce:5f:77:fc:ba:f5:25:85:87:db:7b:68:bc:e3:e8:9e:
         f7:bb:b6:47:9d:96:56:d8:30:b0:c0:d9:3d:d6:40:be:21:ff:
         98:1c:81:5b:0c:f6:f9:4a:74:06:2b:e9:56:f6:ae:12:ff:bc:
         20:13:16:d3:6c:a5:55:77:68:28:84:8b:ca:a1:a2:c2:07:a2:
         d8:f9:98:c5:48:bd:c9:f1:7a:87:69:bc:80:0c:10:b7:a6:c0:
         bf:be:72:28:6c:48:9e:7a:cb:f9:24:60:2e:87:0c:7d:71:84:
         81:13:68:75:e5:48:d6:87:88:0b:b3:32:7c:fd:2f:59:04:06:
         50:1e:b0:e7:6c:5e:c5:c3:43:88:b1:8d:2e:cb:db:50:be:7c:
         44:1b:e3:63:cc:b3:d1:8e:65:25:a3:94:7f:6e:70:52:8c:e8:
         3c:b9:fd:45:d7:40:bb:27:d3:0a:34:b8:29:7a:86:3a:c0:9e:
         9a:8b:12:cd:9d:8a:e2:22:3c:62:e5:ac:75:c5:4d:35:a0:b9:
         2e:89:cf:ab:a7:42:34:e2:e1:f6:bf:a6:47:12:74:f6:39:03:
         89:f1:f5:69:e7:c9:f3:16:1d:97:c1:e6:50:08:de:cc:04:6a:
         fe:b2:d4:d0:91:75:22:fc:c2:5c:58:61:21:4d:20:2f:10:3d:
         c4:88:17:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZDNzIxMTAvBgNVBAUTKEI3QTdBOUZGQkVDNzEzRjg0RTBCNTE4MEFGNzZERUIx
NkU3MjkyMjkwHhcNMjQxMTIyMjMxMzI0WhcNMjQxMTI5MjMxMzIzWjAYMRYwFAYD
VQQDEw02NzQxMTAxNC0zYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Ei2mhqDEeXmIlhzQ+Pe4FqTRyIrN1Wod/lNoI9OnfRGy5b9ahMRL13Bo48h
iRJQCbf6EsW+M3jy5NFtdsmSQOHHsQaq0k2TMvPVaEeUutH2X/Dw2zGntx+uvrPz
8a9y7TG6fdvq/l9pjkxRnXNU/BS+RUJ86LA0NR0del/QHM3rZAfsN+3bafoGETHq
2n2CZSj4LAUrE8OD/6dL0RIi1tCheSU7DM8kU6h13kLsxL4MuVD+TqhgLfw52anu
PQcpuFRLaDITUOqeRhGEqU/3VKYfPrf+0YJ1Y6BlwCINKmHkG3CeiNdSEpT/17QA
8vOH3vwRgBztfxa8RPu2OiloAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2UpqjG
vyXAatinKfKf9S1SDeNxMB8GA1UdIwQYMBaAFLenqf++xxP4TgtRgK923rFucpIp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM3Mi8wNzVGNjk2OEU2
MEQxMUVCQjA5RjZBNjFDNEY5QUUwMi90NmVwXzc3SEVfaE9DMUdBcjNiZXNXNXlr
aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q2ZXBfNzdIRV9oT0MxR0FyM2Jlc1c1eWtpay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkM3Mi8wNzVGNjk2OEU2MEQxMUVCQjA5RjZBNjFDNEY5QUUwMi90NmVwXzc3SEVf
aE9DMUdBcjNiZXNXNXlraWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCkwM5fd/y69SWFh9t7aLzj6J73u7ZHnZZW2DCwwNk91kC+If+YHIFb
DPb5SnQGK+lW9q4S/7wgExbTbKVVd2gohIvKoaLCB6LY+ZjFSL3J8XqHabyADBC3
psC/vnIobEieesv5JGAuhwx9cYSBE2h15UjWh4gLszJ8/S9ZBAZQHrDnbF7Fw0OI
sY0uy9tQvnxEG+NjzLPRjmUlo5R/bnBSjOg8uf1F10C7J9MKNLgpeoY6wJ6aixLN
nYriIjxi5ax1xU01oLkuic+rp0I04uH2v6ZHEnT2OQOJ8fVp58nzFh2XweZQCN7M
BGr+stTQkXUi/MJcWGEhTSAvED3EiBf2
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:53 2024 by rpki-client on console-ams.rpki-client.org