Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
File:                     aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json)
Hash identifier:          SCEka3Wduvv3A6iLYoBXE8UW/4ls4jnWHReqoXDaPY8=
Subject key identifier:   46:50:90:22:E7:C9:54:FA:07:94:CD:23:1E:9F:15:40:C6:FF:DE:30
Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
Certificate issuer:       /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Certificate serial:       059D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
Manifest number:          0597
Signing time:             Sun 19 May 2024 00:27:36 +0000
Manifest this update:     Sun 19 May 2024 00:27:36 +0000
Manifest next update:     Sun 26 May 2024 00:27:36 +0000
Files and hashes:         1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: L0PQNnZWQNCB3jjk1KgOOXaJCBv97WApwA/7MkYtbIk=)
                          2: 75AB03A2870B11EB88E44876C4F9AE02.roa (hash: uirqfM+RGPPZteJ1j7tgrnzrbjuEEz8zx/KNvhvRAFk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
                          rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
        Validity
            Not Before: May 19 00:27:36 2024 GMT
            Not After : May 26 00:27:36 2024 GMT
        Subject: CN=66494778-65a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:33:da:84:04:eb:3c:6b:ab:a8:e7:c3:6c:
                    84:96:48:73:67:e4:ea:b9:e8:81:c4:ad:c0:46:fc:
                    9e:3e:50:92:fa:f7:26:e6:1f:8a:d7:2f:42:88:13:
                    db:0d:20:3b:5a:89:80:7d:df:85:87:77:29:44:f8:
                    53:6d:7d:14:a6:7d:79:1d:f4:f1:68:f3:28:2e:b0:
                    2d:de:22:15:14:d1:e5:27:f3:46:fc:c6:00:3a:16:
                    7d:a1:c9:44:c5:dd:c6:57:ff:6a:62:38:c3:7a:84:
                    10:06:9c:d2:1e:67:b8:70:f9:d0:6d:b5:9d:ae:a6:
                    c3:e2:5e:65:de:95:4a:f4:c2:6f:55:f6:c6:24:02:
                    d9:43:c5:8f:d4:35:b9:6e:c7:e6:48:bf:a8:cd:96:
                    9a:a1:a5:40:29:2f:4d:d5:81:88:39:14:4b:af:ca:
                    05:e0:22:e8:c3:46:dc:d2:dc:fb:33:63:f8:02:9b:
                    10:73:e2:7b:69:c7:03:9d:1c:e1:f7:57:7a:22:f9:
                    f7:40:e5:60:c9:ab:56:43:df:c6:d2:d5:8d:d3:20:
                    55:a3:e0:18:d1:c8:1b:61:6d:e7:fa:f5:fa:40:bd:
                    b7:ec:af:c1:59:05:b3:3c:60:89:a9:cc:40:6d:91:
                    28:11:ba:12:84:ee:ec:b2:5a:66:d5:53:2a:21:d0:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:50:90:22:E7:C9:54:FA:07:94:CD:23:1E:9F:15:40:C6:FF:DE:30
            X509v3 Authority Key Identifier:
                keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:74:ee:c3:94:7a:98:a9:84:0b:00:9a:85:0a:11:18:58:
         10:10:a9:55:d7:1f:01:18:de:02:85:71:b0:e2:77:bf:f1:90:
         c3:56:a9:bf:6f:b7:07:dd:a4:4b:9a:4d:0e:63:6b:b1:3f:ed:
         c4:31:ff:69:7f:a6:ff:8e:39:0d:7f:44:06:bb:46:6e:bc:03:
         71:58:a4:c7:29:92:ce:c7:ed:00:4e:78:c2:a2:ae:06:1a:d4:
         24:fe:d2:2e:19:ca:8b:9c:cd:e9:25:7f:6e:19:44:5c:eb:76:
         e7:61:a2:60:c0:49:91:12:8a:06:92:19:8b:41:20:7f:96:ae:
         4a:b6:30:75:83:57:eb:ca:cd:96:80:31:2d:69:1b:44:2d:48:
         cf:92:45:00:a1:ed:e4:ac:2a:c1:2a:4d:26:59:0d:72:3c:8c:
         c7:86:c9:b9:02:f8:ea:e5:10:6e:a5:77:23:18:f1:81:20:6f:
         28:a1:55:bd:29:33:9c:ca:42:db:cb:dd:34:0b:64:66:40:58:
         d8:a6:d6:a2:f1:e4:6c:b7:50:23:5c:6f:ff:9e:25:b5:80:d3:
         08:c5:cf:75:de:1c:17:25:0a:c7:5a:b1:aa:f3:26:14:ce:c0:
         5c:28:9a:de:8a:e6:1a:7b:5b:ed:7e:7a:12:4e:f7:3c:dd:af:
         c8:03:16:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjk2MDUxMTAvBgNVBAUTKDY4MTg4NEMwQzc1NTdFNTI2RUYyQkM0RDFFNUFCQzMz
NkFFMjdGOUUwHhcNMjQwNTE5MDAyNzM2WhcNMjQwNTI2MDAyNzM2WjAYMRYwFAYD
VQQDEw02NjQ5NDc3OC02NWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbYz2oQE6zxrq6jnw2yElkhzZ+TqueiBxK3ARvyePlCS+vcm5h+K1y9CiBPb
DSA7WomAfd+Fh3cpRPhTbX0Upn15HfTxaPMoLrAt3iIVFNHlJ/NG/MYAOhZ9oclE
xd3GV/9qYjjDeoQQBpzSHme4cPnQbbWdrqbD4l5l3pVK9MJvVfbGJALZQ8WP1DW5
bsfmSL+ozZaaoaVAKS9N1YGIORRLr8oF4CLow0bc0tz7M2P4ApsQc+J7accDnRzh
91d6Ivn3QOVgyatWQ9/G0tWN0yBVo+AY0cgbYW3n+vX6QL237K/BWQWzPGCJqcxA
bZEoEboShO7sslpm1VMqIdB+9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZQkCLn
yVT6B5TNIx6fFUDG/94wMB8GA1UdIwQYMBaAFGgYhMDHVX5SbvK8TR5avDNq4n+e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTYwNS8zNjY2NkQ2RTg3
MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZsSnU4cnhOSGxxOE0ycmlm
NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FCaUV3TWRWZmxKdThyeE5IbHE4TTJyaWY1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OTYwNS8zNjY2NkQ2RTg3MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZs
SnU4cnhOSGxxOE0ycmlmNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAu1XTuw5R6mKmECwCahQoRGFgQEKlV1x8BGN4ChXGw4ne/8ZDDVqm/
b7cH3aRLmk0OY2uxP+3EMf9pf6b/jjkNf0QGu0ZuvANxWKTHKZLOx+0ATnjCoq4G
GtQk/tIuGcqLnM3pJX9uGURc63bnYaJgwEmREooGkhmLQSB/lq5KtjB1g1frys2W
gDEtaRtELUjPkkUAoe3krCrBKk0mWQ1yPIzHhsm5Avjq5RBupXcjGPGBIG8ooVW9
KTOcykLby900C2RmQFjYptai8eRst1AjXG//niW1gNMIxc913hwXJQrHWrGq8yYU
zsBcKJreiuYae1vtfnoSTvc83a/IAxYH
-----END CERTIFICATE-----
Generated at Sun May 19 01:47:19 2024 by rpki-client on console-ams.rpki-client.org