Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.mft
File:                     8ok6YpD-DtHmksvmZtcYD_hMi84.mft (raw, json)
Hash identifier:          m9IAFlZOqRSTLlu/L4ox6Ne+9+nPPikvEp+GuCN2p8M=
Subject key identifier:   0F:BF:CE:99:B4:71:CD:3B:A6:6E:21:16:48:74:AE:B5:11:E7:A7:97
Authority key identifier: F2:89:3A:62:90:FE:0E:D1:E6:92:CB:E6:66:D7:18:0F:F8:4C:8B:CE
Certificate issuer:       /CN=A912A771/serialNumber=F2893A6290FE0ED1E692CBE666D7180FF84C8BCE
Certificate serial:       030A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ok6YpD-DtHmksvmZtcYD_hMi84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.mft
Manifest number:          0308
Signing time:             Wed 01 May 2024 03:29:47 +0000
Manifest this update:     Wed 01 May 2024 03:29:46 +0000
Manifest next update:     Wed 08 May 2024 03:29:46 +0000
Files and hashes:         1: 8ok6YpD-DtHmksvmZtcYD_hMi84.crl (hash: ZmfnTAzNWmHllVQUYBmFXxq14nPOwaU9jUDSYsbORt8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.crl
                          rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ok6YpD-DtHmksvmZtcYD_hMi84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 03:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A771/serialNumber=F2893A6290FE0ED1E692CBE666D7180FF84C8BCE
        Validity
            Not Before: May  1 03:29:46 2024 GMT
            Not After : May  8 03:29:46 2024 GMT
        Subject: CN=6631b72b-b929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:69:8b:20:80:4f:87:97:7b:c4:af:c3:fd:61:
                    1a:c0:0a:12:d1:85:e2:7c:3d:3e:c8:1e:7a:46:a0:
                    52:0d:fa:0d:a9:c2:fd:1d:1c:c1:48:da:65:4f:d0:
                    bd:94:b9:a8:05:86:2e:fe:37:13:b7:50:13:a2:e9:
                    ef:85:ee:95:da:16:2f:8c:0f:e7:53:b6:5a:d6:3a:
                    c3:15:d3:d4:b5:db:e0:a5:dc:01:20:82:75:5f:ca:
                    f9:51:8a:9a:d4:c7:d2:06:eb:47:ac:28:03:88:f1:
                    4e:9d:82:f6:d9:fb:36:45:03:ab:0c:d0:8a:bd:f0:
                    6d:0c:b6:16:59:56:4d:31:0f:ed:3e:33:b2:fc:29:
                    9b:90:63:d0:b1:af:aa:6f:53:bb:e6:3e:3f:ec:1a:
                    0c:d6:17:cd:64:1b:df:bf:cd:c3:71:cf:97:f5:04:
                    59:8a:13:29:b3:a2:93:8d:e8:9d:3e:4a:1e:44:77:
                    12:0d:a4:9c:7c:09:f4:bd:63:89:25:3a:cd:61:c7:
                    66:fa:9d:b4:c1:1c:ad:6d:71:6c:aa:16:82:14:d0:
                    38:1f:2c:41:f5:6d:f3:0b:60:6a:3b:ad:70:24:0a:
                    54:76:ca:ee:a3:d7:f8:81:81:96:24:99:b9:96:84:
                    77:b4:50:68:b5:17:fb:e5:35:62:6f:cb:79:94:1d:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BF:CE:99:B4:71:CD:3B:A6:6E:21:16:48:74:AE:B5:11:E7:A7:97
            X509v3 Authority Key Identifier:
                keyid:F2:89:3A:62:90:FE:0E:D1:E6:92:CB:E6:66:D7:18:0F:F8:4C:8B:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ok6YpD-DtHmksvmZtcYD_hMi84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:68:f4:b2:83:d3:48:96:32:03:af:7f:8a:1e:ec:aa:2b:e6:
         05:9b:48:85:a8:e5:ba:71:64:e4:cc:dc:d2:20:6f:27:52:a4:
         24:db:74:3b:52:22:3e:35:10:58:a4:7a:aa:2c:51:cb:94:a0:
         99:49:ce:fe:6e:bb:ba:f7:50:3b:1f:d5:69:06:d2:83:22:40:
         97:c8:40:c9:56:43:3f:f0:75:50:62:95:a6:8e:b2:93:36:e5:
         ae:c8:a8:bb:2f:ef:5e:76:42:a9:17:02:41:75:aa:42:78:32:
         f2:55:ec:64:86:4f:4c:8e:e9:11:4d:9c:1d:32:cc:88:c7:3f:
         dd:89:60:b8:f9:d4:9e:35:73:1c:36:d8:74:ac:7b:17:14:95:
         70:28:a8:97:68:17:ee:0f:ee:46:6f:06:e0:3e:e1:e0:c7:a7:
         ab:05:2a:db:9f:9c:92:45:42:e7:d7:ba:38:5d:83:c2:4c:06:
         92:d8:f6:cb:fd:3d:66:67:c2:41:c8:34:ac:16:df:fc:e8:15:
         a2:f9:65:31:e4:60:6a:74:e0:96:ec:53:2e:04:66:c6:55:a5:
         7d:7d:ff:f2:ed:f1:38:b2:2e:3b:c1:f4:a4:9b:6d:d0:59:22:
         3e:ad:5c:e0:70:d0:47:7d:30:39:9a:f5:a9:7d:de:48:e4:71:
         c9:32:1b:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE3NzExMTAvBgNVBAUTKEYyODkzQTYyOTBGRTBFRDFFNjkyQ0JFNjY2RDcxODBG
Rjg0QzhCQ0UwHhcNMjQwNTAxMDMyOTQ2WhcNMjQwNTA4MDMyOTQ2WjAYMRYwFAYD
VQQDEw02NjMxYjcyYi1iOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5mmLIIBPh5d7xK/D/WEawAoS0YXifD0+yB56RqBSDfoNqcL9HRzBSNplT9C9
lLmoBYYu/jcTt1ATounvhe6V2hYvjA/nU7Za1jrDFdPUtdvgpdwBIIJ1X8r5UYqa
1MfSButHrCgDiPFOnYL22fs2RQOrDNCKvfBtDLYWWVZNMQ/tPjOy/CmbkGPQsa+q
b1O75j4/7BoM1hfNZBvfv83Dcc+X9QRZihMps6KTjeidPkoeRHcSDaScfAn0vWOJ
JTrNYcdm+p20wRytbXFsqhaCFNA4HyxB9W3zC2BqO61wJApUdsruo9f4gYGWJJm5
loR3tFBotRf75TVib8t5lB1j/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+/zpm0
cc07pm4hFkh0rrUR56eXMB8GA1UdIwQYMBaAFPKJOmKQ/g7R5pLL5mbXGA/4TIvO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTc3MS82NzJCNDMzMjg4
MzYxMUVDODk2ODNCMzdDNEY5QUUwMi84b2s2WXBELUR0SG1rc3ZtWnRjWURfaE1p
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhvazZZcEQtRHRIbWtzdm1adGNZRF9oTWk4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTc3MS82NzJCNDMzMjg4MzYxMUVDODk2ODNCMzdDNEY5QUUwMi84b2s2WXBELUR0
SG1rc3ZtWnRjWURfaE1pODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCBaPSyg9NIljIDr3+KHuyqK+YFm0iFqOW6cWTkzNzSIG8nUqQk23Q7
UiI+NRBYpHqqLFHLlKCZSc7+bru691A7H9VpBtKDIkCXyEDJVkM/8HVQYpWmjrKT
NuWuyKi7L+9edkKpFwJBdapCeDLyVexkhk9MjukRTZwdMsyIxz/diWC4+dSeNXMc
Nth0rHsXFJVwKKiXaBfuD+5GbwbgPuHgx6erBSrbn5ySRULn17o4XYPCTAaS2PbL
/T1mZ8JByDSsFt/86BWi+WUx5GBqdOCW7FMuBGbGVaV9ff/y7fE4si47wfSkm23Q
WSI+rVzgcNBHfTA5mvWpfd5I5HHJMhvq
-----END CERTIFICATE-----
Generated at Wed May 1 04:49:20 2024 by rpki-client on console-ams.rpki-client.org