Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft
File:                     7hyKGwbDa9zEPHECS1LZHGpq9ro.mft (raw, json)
Hash identifier:          Mlg13CkxqzyA6fT+XH/XJkVY22bviAjkTlcAJSQQPjs=
Subject key identifier:   C0:2B:4E:13:89:59:A7:DC:A5:94:E2:08:88:A5:EF:AB:71:CF:CD:2A
Authority key identifier: EE:1C:8A:1B:06:C3:6B:DC:C4:3C:71:02:4B:52:D9:1C:6A:6A:F6:BA
Certificate issuer:       /CN=A911513F/serialNumber=EE1C8A1B06C36BDCC43C71024B52D91C6A6AF6BA
Certificate serial:       061C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7hyKGwbDa9zEPHECS1LZHGpq9ro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft
Manifest number:          0618
Signing time:             Sat 01 Jun 2024 00:40:18 +0000
Manifest this update:     Sat 01 Jun 2024 00:40:17 +0000
Manifest next update:     Sat 08 Jun 2024 00:40:17 +0000
Files and hashes:         1: 7hyKGwbDa9zEPHECS1LZHGpq9ro.crl (hash: vRE1KTUve3VLxPhpmn+fvc5qeX36uzo0oKE5kKM5Oz4=)
                          2: B9F42C72554D11EBA9D33130C4F9AE02.roa (hash: cB3h0BwU7n31UJ46QG5DLAIX4mE+Nr0sDLSdub3xWHw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.crl
                          rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7hyKGwbDa9zEPHECS1LZHGpq9ro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 00:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564 (0x61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911513F/serialNumber=EE1C8A1B06C36BDCC43C71024B52D91C6A6AF6BA
        Validity
            Not Before: Jun  1 00:40:17 2024 GMT
            Not After : Jun  8 00:40:17 2024 GMT
        Subject: CN=665a6df1-e08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:9a:aa:fd:62:20:03:28:f4:b4:19:ac:33:
                    cb:d4:0d:9e:7a:9d:b8:5a:98:83:c9:82:27:78:fe:
                    6a:81:ed:cc:82:d1:45:d9:f4:10:0b:c7:17:6e:e0:
                    32:0e:da:1c:83:ad:2c:6d:de:d8:74:5a:56:7e:b1:
                    c8:3b:4e:c4:c3:0a:85:2c:54:31:94:b8:b7:56:2d:
                    b5:b2:88:0e:3f:15:f2:24:cd:da:72:11:b2:1f:6e:
                    7d:84:a3:0b:d0:97:63:fd:7d:f6:23:1d:96:08:6a:
                    31:fe:df:ff:29:a2:b6:fb:db:bf:c5:14:b2:2c:7f:
                    03:cd:1c:ec:05:00:53:7f:83:89:10:72:b8:f9:39:
                    57:3f:df:ba:89:f1:ce:6f:df:3c:e9:19:52:50:48:
                    74:41:93:89:6d:94:12:e4:4f:8a:d3:a3:25:9b:96:
                    5e:a9:fe:72:36:d3:68:b5:e0:8d:47:f0:77:68:b5:
                    e9:71:db:72:d0:24:f9:35:d8:7f:a1:49:68:b1:1e:
                    e2:28:29:21:4a:90:eb:c3:d5:c4:07:ec:9b:c4:0e:
                    bf:53:d6:3e:33:c7:37:dd:af:ed:10:0a:ed:47:06:
                    56:9f:45:60:80:ad:95:53:7b:73:3a:59:9e:44:0d:
                    52:ea:56:ea:b9:78:c5:87:91:c1:ad:41:79:63:8b:
                    8d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2B:4E:13:89:59:A7:DC:A5:94:E2:08:88:A5:EF:AB:71:CF:CD:2A
            X509v3 Authority Key Identifier:
                keyid:EE:1C:8A:1B:06:C3:6B:DC:C4:3C:71:02:4B:52:D9:1C:6A:6A:F6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7hyKGwbDa9zEPHECS1LZHGpq9ro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8f:6c:f8:c3:d5:36:23:65:b2:d0:a8:3e:e8:8b:98:08:16:
         55:00:29:9a:2c:db:4f:4b:2e:f5:a8:8f:63:31:b6:b4:41:ff:
         c9:e1:5e:fc:c7:7d:34:db:bd:c1:0a:ce:9e:b6:4e:c0:1f:71:
         98:8f:8c:9d:2f:cb:8f:fe:f7:42:d5:27:e6:3b:53:42:b1:50:
         34:8b:d9:1d:7f:0c:4c:01:8f:0b:97:bf:0c:6f:12:bd:ee:fb:
         dd:e0:57:f0:e7:29:1a:80:44:31:44:b0:dc:d0:9b:fa:6d:b9:
         e5:53:72:0e:54:d4:36:09:eb:e8:8e:92:e8:2b:f3:3f:7f:fb:
         b1:3d:8c:63:fa:8b:1c:77:11:bc:17:39:6e:3e:9e:e9:cd:df:
         8d:0a:75:5d:29:f2:b5:8e:38:a3:73:76:60:00:9c:cd:ad:56:
         b1:6b:7b:0c:9c:06:9b:e8:d3:11:25:99:fc:de:a7:b3:21:47:
         b1:5a:71:84:ee:d6:0d:7e:ed:89:73:07:3c:49:61:28:76:19:
         5f:d6:b3:11:09:a7:45:6a:b9:45:a3:b9:ca:c5:40:79:45:5a:
         93:61:65:89:c8:cd:fc:d1:f7:94:e3:ac:49:f6:d2:74:a7:3d:
         06:a5:1c:85:91:7f:34:c2:78:1e:20:0c:d8:ba:16:e6:97:61:
         21:71:92:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTUxM0YxMTAvBgNVBAUTKEVFMUM4QTFCMDZDMzZCRENDNDNDNzEwMjRCNTJEOTFD
NkE2QUY2QkEwHhcNMjQwNjAxMDA0MDE3WhcNMjQwNjA4MDA0MDE3WjAYMRYwFAYD
VQQDEw02NjVhNmRmMS1lMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA02Gaqv1iIAMo9LQZrDPL1A2eep24WpiDyYIneP5qge3MgtFF2fQQC8cXbuAy
Dtocg60sbd7YdFpWfrHIO07EwwqFLFQxlLi3Vi21sogOPxXyJM3achGyH259hKML
0Jdj/X32Ix2WCGox/t//KaK2+9u/xRSyLH8DzRzsBQBTf4OJEHK4+TlXP9+6ifHO
b9886RlSUEh0QZOJbZQS5E+K06Mlm5Zeqf5yNtNoteCNR/B3aLXpcdty0CT5Ndh/
oUlosR7iKCkhSpDrw9XEB+ybxA6/U9Y+M8c33a/tEArtRwZWn0VggK2VU3tzOlme
RA1S6lbquXjFh5HBrUF5Y4uNRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMArThOJ
WafcpZTiCIil76txz80qMB8GA1UdIwQYMBaAFO4cihsGw2vcxDxxAktS2Rxqava6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTEzRi9DQ0Q3RjkzNDU1
M0IxMUVCQjEzREZFNkZDNEY5QUUwMi83aHlLR3diRGE5ekVQSEVDUzFMWkhHcHE5
cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdoeUtHd2JEYTl6RVBIRUNTMUxaSEdwcTlyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTEzRi9DQ0Q3RjkzNDU1M0IxMUVCQjEzREZFNkZDNEY5QUUwMi83aHlLR3diRGE5
ekVQSEVDUzFMWkhHcHE5cm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYj2z4w9U2I2Wy0Kg+6IuYCBZVACmaLNtPSy71qI9jMba0Qf/J4V78
x300273BCs6etk7AH3GYj4ydL8uP/vdC1SfmO1NCsVA0i9kdfwxMAY8Ll78MbxK9
7vvd4Ffw5ykagEQxRLDc0Jv6bbnlU3IOVNQ2CevojpLoK/M/f/uxPYxj+oscdxG8
FzluPp7pzd+NCnVdKfK1jjijc3ZgAJzNrVaxa3sMnAab6NMRJZn83qezIUexWnGE
7tYNfu2Jcwc8SWEodhlf1rMRCadFarlFo7nKxUB5RVqTYWWJyM380feU46xJ9tJ0
pz0GpRyFkX80wngeIAzYuhbml2EhcZIx
-----END CERTIFICATE-----
Generated at Sat Jun 1 01:41:43 2024 by rpki-client on console-fra.rpki-client.org