Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
File:                     feYHxGFdegH73UqGrVRZQBp1mSE.mft (raw, json)
Hash identifier:          Mhz6IsSB/G+FcNRkRGl3gaJEM3fU+SGu14hDfi/CxoQ=
Subject key identifier:   B1:B1:83:3D:4F:82:37:85:08:D4:FF:1E:11:C5:13:93:AB:B2:5D:D6
Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
Certificate issuer:       /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
Manifest number:          7B
Signing time:             Thu 21 Nov 2024 01:12:41 +0000
Manifest this update:     Thu 21 Nov 2024 01:12:41 +0000
Manifest next update:     Thu 28 Nov 2024 01:12:41 +0000
Files and hashes:         1: feYHxGFdegH73UqGrVRZQBp1mSE.crl (hash: ceFqFLVolIXCJV90frQu9fUYB8dO2+VoVrdBTACX+DM=)
                          2: DF1CE5761E4811EF83D08212C4F9AE02.roa (hash: jgecWbihF8ahjtBCmUUhtFZDnp6nWSkLqUD+t32BDuo=)
                          3: 986E1360F8AB11EE92CA8530C4F9AE02.roa (hash: ueA1YfbSxnfQ8JNNUd0Wz1lP6df45/s3ydQBg7G+unQ=)
                          4: B374CCF4764F11EFA343104DC4F9AE02.roa (hash: JamDzk8ma6Y5sRRvTEiptFXI/raRuD5l7hFVTlSgzVM=)
                          5: 806FBC08757111EFBBABC075C4F9AE02.roa (hash: +vtl9Th8GuR+iQUOY2z3grD0q8RrcQPTvcgo6LdHGM8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
        Validity
            Not Before: Nov 21 01:12:41 2024 GMT
            Not After : Nov 28 01:12:41 2024 GMT
        Subject: CN=673e8909-e079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ea:5b:86:3f:3e:33:c8:a3:65:9b:8c:de:0f:
                    e0:84:bb:00:3e:1e:67:98:8f:0d:76:b9:96:98:a2:
                    da:e9:cd:03:e8:91:12:24:b4:29:4a:90:e1:20:ce:
                    fb:ef:c3:3d:f8:6f:5a:a2:0a:2f:30:0d:a0:ec:bb:
                    19:32:4a:49:50:95:79:ca:5c:4b:65:ca:f3:05:88:
                    f4:e1:b9:2d:f6:a1:eb:16:9c:5b:26:24:eb:80:01:
                    f3:fa:ea:88:78:03:db:19:91:b3:eb:4d:8c:cc:3a:
                    71:d5:06:38:c1:81:cc:f3:77:fa:ec:ec:40:b8:01:
                    37:d5:f7:fb:12:74:c3:34:68:b6:92:ce:c4:b7:81:
                    6e:c5:8f:c2:c3:15:fb:9a:d5:ad:65:41:64:9e:53:
                    f5:e7:c4:a4:55:36:8c:81:99:d7:00:f2:48:5f:35:
                    c7:ad:a0:cd:a0:ab:ac:46:7a:f8:f0:0e:7e:c9:49:
                    b0:8e:1f:73:e9:21:14:8e:47:f9:3b:e7:7c:16:d9:
                    b3:fa:8c:0b:85:85:be:fb:0b:6a:6f:19:60:ff:f3:
                    4b:05:30:de:bf:94:e8:48:44:27:e9:2d:7b:8a:67:
                    dc:b5:c6:54:45:75:e9:97:dd:86:9f:38:a0:7f:99:
                    54:66:2d:dc:ad:68:78:4b:2b:d9:6e:0b:c8:0b:ac:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B1:83:3D:4F:82:37:85:08:D4:FF:1E:11:C5:13:93:AB:B2:5D:D6
            X509v3 Authority Key Identifier:
                keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0c:15:b3:29:6e:b5:05:89:d8:f7:6b:c7:96:2a:1f:07:5c:
         98:f6:73:84:c1:12:5c:60:a2:72:be:11:c8:2b:db:49:3c:58:
         e9:e8:52:45:d8:fd:51:79:60:60:94:58:07:83:b5:ae:be:55:
         4f:73:e6:38:27:ce:f8:1a:ee:1b:48:62:30:7d:e6:d0:60:c9:
         11:98:27:97:f8:78:6b:93:f5:be:ee:dd:de:72:42:26:a9:eb:
         6e:c8:8e:92:0e:a6:f7:38:21:81:f2:6b:a8:c8:6a:35:6f:e9:
         7a:8e:ac:10:93:43:80:4c:d6:01:e3:dd:73:80:c8:27:ac:38:
         eb:c2:1e:f4:a5:86:68:b5:ae:5d:ae:7d:be:98:f2:99:14:d5:
         bd:dc:45:0e:d7:1f:18:4b:cd:f8:d2:0d:fa:6b:21:a1:51:58:
         0a:30:55:d6:78:2d:5a:7c:96:b0:cc:19:71:8b:38:51:76:ed:
         68:1e:90:bf:7f:b9:e7:64:dd:9b:66:e7:a0:dc:0e:78:67:f2:
         75:17:cd:66:dc:50:c8:e2:43:7d:bd:d1:e7:62:b0:fc:94:95:
         de:a1:71:97:48:13:9b:e7:fc:cd:dd:ab:0d:3f:78:44:ce:d9:
         e7:d5:e9:37:44:ed:3c:a1:49:ab:ea:60:4f:88:95:6d:b6:0c:
         91:a4:32:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDdERTYwN0M0NjE1RDdBMDFGQkRENEE4NkFENTQ1OTQw
MUE3NTk5MjEwHhcNMjQxMTIxMDExMjQxWhcNMjQxMTI4MDExMjQxWjAYMRYwFAYD
VQQDEw02NzNlODkwOS1lMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoepbhj8+M8ijZZuM3g/ghLsAPh5nmI8NdrmWmKLa6c0D6JESJLQpSpDhIM77
78M9+G9aogovMA2g7LsZMkpJUJV5ylxLZcrzBYj04bkt9qHrFpxbJiTrgAHz+uqI
eAPbGZGz602MzDpx1QY4wYHM83f67OxAuAE31ff7EnTDNGi2ks7Et4FuxY/CwxX7
mtWtZUFknlP158SkVTaMgZnXAPJIXzXHraDNoKusRnr48A5+yUmwjh9z6SEUjkf5
O+d8Ftmz+owLhYW++wtqbxlg//NLBTDev5ToSEQn6S17imfctcZURXXpl92Gnzig
f5lUZi3crWh4SyvZbgvIC6yRFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGxgz1P
gjeFCNT/HhHFE5Orsl3WMB8GA1UdIwQYMBaAFH3mB8RhXXoB+91Khq1UWUAadZkh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS9FN0M0RjlERUY2
MjUxMUVFOERBRDhFMzVDNEY5QUUwMi9mZVlIeEdGZGVnSDczVXFHclZSWlFCcDFt
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2ZlWUh4R0ZkZWdINzNVcUdyVlJaUUJwMW1TRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS9FN0M0RjlERUY2MjUxMUVFOERBRDhFMzVDNEY5QUUwMi9mZVlIeEdGZGVn
SDczVXFHclZSWlFCcDFtU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCIDBWzKW61BYnY92vHliofB1yY9nOEwRJcYKJyvhHIK9tJPFjp6FJF
2P1ReWBglFgHg7WuvlVPc+Y4J874Gu4bSGIwfebQYMkRmCeX+Hhrk/W+7t3eckIm
qetuyI6SDqb3OCGB8muoyGo1b+l6jqwQk0OATNYB491zgMgnrDjrwh70pYZota5d
rn2+mPKZFNW93EUO1x8YS8340g36ayGhUVgKMFXWeC1afJawzBlxizhRdu1oHpC/
f7nnZN2bZueg3A54Z/J1F81m3FDI4kN9vdHnYrD8lJXeoXGXSBOb5/zN3asNP3hE
ztnn1ek3RO08oUmr6mBPiJVttgyRpDLj
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:32 2024 by rpki-client on console-ams.rpki-client.org