Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File:                     vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier:          nuDVZ//kDbRakCWKyhmfwZ94mKphT/P3b/ThJ7db9Cc=
Subject key identifier:   81:92:71:64:CB:CB:97:EA:A2:70:28:77:B2:A1:B5:1E:9A:39:F6:64
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer:       /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial:       0310
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number:          0EA5
Signing time:             Tue 14 May 2024 19:21:48 +0000
Manifest this update:     Tue 14 May 2024 19:21:47 +0000
Manifest next update:     Tue 21 May 2024 19:21:47 +0000
Files and hashes:         1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: qa/XLZxX3UIn3KZbPQgXSeEkt3W1/rJ0E9XaEiFp7v8=)
                          2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: cGTSuKtJhnByKGYRvNLBXJ9CqrEGrqfMcD431+h8vUg=)
                          3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: FTimyw/5VCeKevG6KYvQHGRaEHwwVHJJgIXnVyCHGyw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 19:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 784 (0x310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
        Validity
            Not Before: May 14 19:21:47 2024 GMT
            Not After : May 21 19:21:47 2024 GMT
        Subject: CN=6643b9cb-11ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:e2:77:f0:13:37:d6:73:a7:bb:47:49:22:
                    8f:61:0a:e2:fd:6c:9a:75:e6:2f:36:98:a2:98:92:
                    63:aa:d8:00:cc:4c:43:00:df:ce:17:f2:ab:15:fd:
                    46:55:52:c9:7e:c3:55:d0:9f:5f:53:55:5b:a2:4c:
                    43:89:8e:a3:3f:40:bf:50:24:ff:20:97:9c:24:68:
                    c9:d0:7e:2c:77:40:ee:91:11:49:da:ac:fe:5a:19:
                    29:69:ba:ad:05:e8:0d:da:fe:f0:4a:92:f6:44:7a:
                    48:77:35:08:91:b9:b9:35:df:bb:b1:f9:14:ac:f0:
                    0c:0b:32:b1:61:aa:40:a5:7a:2a:98:93:40:a8:47:
                    54:f4:98:26:10:01:65:33:ee:4a:c3:2c:5b:04:a0:
                    48:b7:0d:75:bc:71:8b:64:83:8e:ff:07:3b:dd:3b:
                    b6:32:1f:00:92:ab:ff:51:9d:76:c2:fc:5b:0f:20:
                    0b:20:54:f4:81:f1:46:fa:5f:4b:e6:15:32:85:24:
                    41:ea:51:d5:a0:c1:d3:86:69:5e:29:d3:63:c7:9b:
                    1f:f1:c2:13:9b:e6:8f:cd:13:0e:63:19:c2:5e:d6:
                    53:9f:41:40:64:78:8a:3f:96:cd:41:2b:19:74:73:
                    5d:2f:9d:84:c7:67:60:12:16:e6:f5:6e:35:a6:4b:
                    bb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:92:71:64:CB:CB:97:EA:A2:70:28:77:B2:A1:B5:1E:9A:39:F6:64
            X509v3 Authority Key Identifier:
                keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c3:51:15:cf:92:05:d4:7c:04:26:64:9b:20:7b:02:8c:99:
         71:70:ce:c1:eb:0b:ec:f7:ae:22:13:69:00:02:d7:a0:59:f6:
         1e:5d:d2:f2:2a:66:54:bb:4c:f6:83:ea:a5:0f:83:8d:67:89:
         fb:35:97:0b:13:b0:38:97:fc:46:6c:73:2e:33:2d:c5:b0:bc:
         df:81:33:91:e5:fb:e0:05:20:94:eb:77:2f:7c:b9:69:d7:8d:
         84:00:6d:5b:cd:8f:7a:ea:aa:96:a0:9d:33:23:7f:05:46:fd:
         f8:39:94:f5:c4:72:44:86:9f:c7:f0:3b:10:33:6c:f8:41:62:
         21:9d:71:6c:dc:70:9c:de:79:06:2c:5c:6c:9d:29:1d:b9:df:
         fc:8f:1d:fd:fd:33:ad:7f:b2:5b:99:f1:cb:b8:30:a2:5f:8e:
         3c:20:bd:43:09:0f:0f:c7:a2:0b:fa:69:c6:0c:ed:7b:8c:e7:
         4f:dc:26:4e:54:2d:43:85:49:a3:59:3c:00:20:e1:3b:33:03:
         52:4b:27:2f:95:96:e0:8c:89:83:a7:aa:b7:cb:78:ef:3e:8e:
         2d:08:aa:4e:5b:95:a2:2e:55:7e:34:c3:28:c0:21:b8:d4:e4:
         8c:54:99:51:2f:3a:a8:34:9a:fd:a8:cb:f6:c4:92:0a:50:70:
         d6:d9:16:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlBNDAxMTAvBgNVBAUTKEJEMTRDRjFBOUYwOEY2ODEzN0ZFODExNkNENzc2QURC
REIyRkVGQjQwHhcNMjQwNTE0MTkyMTQ3WhcNMjQwNTIxMTkyMTQ3WjAYMRYwFAYD
VQQDEw02NjQzYjljYi0xMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxzDid/ATN9Zzp7tHSSKPYQri/WyadeYvNpiimJJjqtgAzExDAN/OF/KrFf1G
VVLJfsNV0J9fU1VbokxDiY6jP0C/UCT/IJecJGjJ0H4sd0DukRFJ2qz+Whkpabqt
BegN2v7wSpL2RHpIdzUIkbm5Nd+7sfkUrPAMCzKxYapApXoqmJNAqEdU9JgmEAFl
M+5KwyxbBKBItw11vHGLZIOO/wc73Tu2Mh8Akqv/UZ12wvxbDyALIFT0gfFG+l9L
5hUyhSRB6lHVoMHThmleKdNjx5sf8cITm+aPzRMOYxnCXtZTn0FAZHiKP5bNQSsZ
dHNdL52Ex2dgEhbm9W41pku7MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGScWTL
y5fqonAod7KhtR6aOfZkMB8GA1UdIwQYMBaAFL0UzxqfCPaBN/6BFs13atvbL++0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw
N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlvRTNfb0VXelhkcTI5c3Y3
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZSVFBHcDhJOW9FM19vRVd6WGRxMjlzdjc3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OUE0MC8wQkQ0NTYyMjAwN0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlv
RTNfb0VXelhkcTI5c3Y3N1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBIw1EVz5IF1HwEJmSbIHsCjJlxcM7B6wvs964iE2kAAtegWfYeXdLy
KmZUu0z2g+qlD4ONZ4n7NZcLE7A4l/xGbHMuMy3FsLzfgTOR5fvgBSCU63cvfLlp
142EAG1bzY966qqWoJ0zI38FRv34OZT1xHJEhp/H8DsQM2z4QWIhnXFs3HCc3nkG
LFxsnSkdud/8jx39/TOtf7JbmfHLuDCiX448IL1DCQ8Px6IL+mnGDO17jOdP3CZO
VC1DhUmjWTwAIOE7MwNSSycvlZbgjImDp6q3y3jvPo4tCKpOW5WiLlV+NMMowCG4
1OSMVJlRLzqoNJr9qMv2xJIKUHDW2RbK
-----END CERTIFICATE-----
Generated at Tue May 14 21:48:27 2024 by rpki-client on console-ams.rpki-client.org