Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File:                     hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier:          y1UhkqjvYJooR9l+nBeQdbxL4NYJzD+zKk4fOKVdoyY=
Subject key identifier:   19:8E:29:3E:EF:6E:AF:B5:CC:26:02:94:E4:F4:9B:B4:3D:65:D0:68
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       02D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number:          029C
Signing time:             Thu 21 Nov 2024 01:12:39 +0000
Manifest this update:     Thu 21 Nov 2024 01:12:38 +0000
Manifest next update:     Thu 28 Nov 2024 01:12:38 +0000
Files and hashes:         1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: aeAyRy/BGNLWhG5tOb5PCnsWhFxa86D10oB1rLxrvVQ=)
                          2: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: EqoKaFe/87HyN55cS8ajKAt9sghrHZq2lzsUTdHDvaA=)
                          3: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: Zv2v0cwqLf6wafX8JRT75DidHtQmWLeZRynLhc5qwIQ=)
                          4: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: JXv0KsPEBlsaTg6m+fhjESsABKsvt+ocPT7yyfrtdAY=)
                          5: 72D237AEEBA011EC87608210C4F9AE02.roa (hash: WUTcAygCDffAr9iKMcmKnoP2d7WKFtnQwjenMar3g40=)
                          6: BE4B3228691411EFB573C120C4F9AE02.roa (hash: OxIcyIjk9Gk2KhW91nK/PytcA5/iC82ufXWQaqLwD7c=)
                          7: 19EC493AE32111ED9B98B683C4F9AE02.roa (hash: bynWdDU9Sed6MZJCOoaOU3KoHF3+MKioYHnz85MnfoE=)
                          8: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: jAlP8P7kw3AxRnbKS+vw8rsRAMvtB/8nbNImX/e+/TQ=)
                          9: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: zeHxyQA50tc2hFac17HMecTkUKh3Q4yOGibcKFE8XlA=)
                          10: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: V9Aes6rcJ6GoKtngSxJTDoQN6mEyvZuvUAnDC9EU3hM=)
                          11: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: 2itygBnA8UlXf6E6fQxxoMNJ1Dpn4lvk4Av278wLGiE=)
                          12: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: hbaU1j+PGuaaZo0uKyGxl+cvGzOFoKX/vpKmVeS8sSs=)
                          13: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: 0nur8ko5yVIl1etGJgHWnBWnxgOmXoPIsvFKQdNEUD0=)
                          14: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: nu7nqxx8h8tBmIRkVcM7Q/pH66Rq3kPjGTA2vDSZiYY=)
                          15: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: B0ErVmkvfLMd0BG9enlSUSH9ewWmp/gL2umFwPI8bNI=)
                          16: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: PwHeC5ltmG9V4AsHfpA7j8F4h70QgYXDX48SxKdGKVI=)
                          17: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: fHr+Hdqe5n2z3PBiGiBy+F89BRzxVSUn/DsFXetzj+M=)
                          18: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: jm6wvVZTPS4Ylu1IOIJjjFteaZ3jIetgqAXu9aSx79c=)
                          19: EA792108690E11EF9396CC48C4F9AE02.roa (hash: 7GwG95kf+AnZih7NAxB1pbKBYxXG5Q5KYq5uReuq4e4=)
                          20: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: yLTEILyozA1y2ihrzejMKasIpRPmXGeo8Nhd9FuypKg=)
                          21: B35D540E68F611EFB785D145C4F9AE02.roa (hash: OZi7Y8+FN7f04rDksISO0W5B0F1vk5xZPpGExAT8kRI=)
                          22: 218211CA68F911EF986C8281C4F9AE02.roa (hash: 5ru9BxoSrfDTdYvffZ4oECaTGalTrPI9K0mOCDCpP04=)
                          23: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: 5FyekhanKOBzIO3xOANeuQCYPA72qdWmC2q5ETO03hU=)
                          24: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: 0KgbJFyblRFwfwyAgMvtizqpJw5L7N4PN8PbwGbB8HY=)
                          25: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: i64E/Cj93LqfKyS/6efZNVFBMvw7oMFHcsbDUqhF3ZQ=)
                          26: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: 8qdJjnzMitN/61zVC3gYxxbmzhQ6EvMU6wWnUE+k9bc=)
                          27: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: cqxk3X8L5mAx7X2j55V3D1cafjAOzvr+QtJxSyQL+GQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Nov 21 01:12:38 2024 GMT
            Not After : Nov 28 01:12:38 2024 GMT
        Subject: CN=673e8906-f758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:86:47:0d:79:5c:72:b0:ea:c1:71:f9:9d:c0:
                    cd:91:58:67:2e:e4:6f:2c:43:ae:1d:66:43:0f:fd:
                    df:e9:cf:ce:1d:fc:f8:5f:af:cc:b7:b6:6a:5c:88:
                    3c:0d:9e:9f:f7:b3:15:6b:66:e3:b0:55:89:dd:66:
                    3a:c6:64:aa:69:ac:b4:67:11:de:7f:06:16:7c:d0:
                    96:6a:34:82:18:de:fd:d7:dd:70:2a:cf:ce:28:85:
                    6a:c3:b1:67:91:65:57:44:7e:ac:95:26:cb:db:15:
                    9a:80:ce:f7:6e:57:b1:9a:5a:f8:30:12:e2:a1:7b:
                    cb:bb:8a:0e:b9:ae:9e:65:22:e3:09:41:0d:a9:f1:
                    90:c3:d1:27:92:cc:0f:36:46:30:22:3a:b3:c5:d2:
                    3d:ef:c2:e1:8f:63:8c:2c:3e:5c:24:58:32:16:89:
                    b4:00:f6:e1:a3:5c:d4:ef:4a:08:01:54:2a:a3:3d:
                    d1:57:83:4b:42:da:a4:3f:62:43:d8:4e:af:7a:1a:
                    73:0a:0d:1f:74:e5:84:bf:ad:43:f7:67:1e:98:9b:
                    28:b3:75:9e:29:a8:98:16:0c:40:a9:80:97:e8:7c:
                    5f:dd:c6:a4:04:a3:b2:d7:9e:54:fb:02:ae:f2:82:
                    12:ca:6e:58:70:66:71:1b:91:00:8d:7c:3f:77:d7:
                    13:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8E:29:3E:EF:6E:AF:B5:CC:26:02:94:E4:F4:9B:B4:3D:65:D0:68
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:38:8b:fe:8a:94:33:51:5d:64:04:64:fa:06:1d:d0:cf:0d:
         52:ad:49:de:9b:2e:39:50:04:d1:df:32:6f:4f:90:4b:3b:49:
         bf:c6:ec:3c:84:0b:d9:18:78:8f:5f:f1:a7:18:3a:6f:42:aa:
         6c:b3:16:7f:45:fa:41:a6:f6:c5:49:97:fb:1b:9c:f2:b3:15:
         71:8f:13:73:72:35:3b:d1:76:d7:3d:ab:a2:47:cc:d7:f4:3a:
         fd:3c:34:40:e0:0c:0c:f2:5e:dc:53:7d:d5:e4:cc:30:96:4d:
         d6:ec:90:54:ef:48:c8:01:cc:9b:38:ef:67:45:86:cb:e1:82:
         4d:14:cd:b6:92:10:4e:12:d0:6b:5e:43:54:65:6b:13:b5:65:
         ce:ff:e3:d2:b4:f3:22:92:89:97:58:e7:70:ba:d1:ee:81:a8:
         59:99:88:f1:96:a4:96:fb:7e:11:76:06:78:88:b2:c1:ce:8a:
         c8:7b:14:e7:11:8d:69:1f:fa:1f:63:8d:bd:c7:40:b1:59:89:
         67:e0:f0:2d:c6:2f:90:09:5e:d7:f8:3d:cb:64:92:21:24:43:
         bb:6a:18:f5:72:0d:85:b6:47:77:55:f1:8d:73:0f:77:0c:0a:
         02:09:9a:1f:d2:f5:38:c8:b1:72:3d:70:9a:58:42:a4:9a:74:
         33:2e:f5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:32 2024 by rpki-client on console-ams.rpki-client.org