Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
File:                     yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json)
Hash identifier:          gyYGCqTzryn/2zgDF/T4MJdGuGtwD5rv3pVutsdZgXI=
Subject key identifier:   3C:6F:9D:2A:E2:3F:89:BD:1F:85:04:0C:DB:BE:D7:93:9D:0A:B0:EA
Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
Certificate issuer:       /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Certificate serial:       03B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
Manifest number:          03AA
Signing time:             Sat 23 Nov 2024 00:18:11 +0000
Manifest this update:     Sat 23 Nov 2024 00:18:11 +0000
Manifest next update:     Sat 30 Nov 2024 00:18:11 +0000
Files and hashes:         1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: aRMp4Y0dsIpYiSgyl/4D4BWqHB4OZO5ydO1n8ynjZdk=)
                          2: E4804004737211EC866EAC24C4F9AE02.roa (hash: NdcrODMvzPxbGahsHjIC859CSUu00GxcxQ7bS9fv+uc=)
                          3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: Gfvw/vl1mymWE2Hz3blrobSO5Bvy6xdNCRghpmsy0TE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
                          rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
        Validity
            Not Before: Nov 23 00:18:11 2024 GMT
            Not After : Nov 30 00:18:11 2024 GMT
        Subject: CN=67411f43-6d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:5b:ab:70:97:6f:20:d0:10:90:06:24:5e:
                    f0:1a:5a:5b:30:79:5f:a6:48:66:3c:87:c1:ea:7b:
                    58:43:dd:c9:2b:ed:d8:1a:6b:10:8d:78:bf:be:0b:
                    31:c5:7b:77:fb:87:c6:10:a3:c9:d6:5b:2d:e7:30:
                    32:1c:e8:83:8a:7b:44:b2:81:5a:e3:6b:d9:30:80:
                    60:88:4d:8f:cd:c6:b1:87:6a:de:c6:da:43:79:f4:
                    59:20:a9:3c:b9:04:d7:fb:bb:45:a7:da:d9:c1:de:
                    4a:db:fd:bc:31:20:23:3a:cc:cd:24:fe:23:e6:e2:
                    07:d3:1c:a5:64:87:b3:5a:7d:32:39:c6:22:9e:de:
                    22:ef:bf:e0:89:3b:95:c7:f8:ce:c9:2d:24:d6:d1:
                    ce:82:11:42:b1:01:8c:7c:d0:14:ac:5b:08:a3:f9:
                    ec:87:e5:88:25:17:ab:d9:58:2f:d9:75:82:d3:ce:
                    ec:59:28:c5:f5:b9:72:10:5f:3b:8b:eb:91:59:dc:
                    51:f5:96:5a:a1:36:5c:b1:f9:6c:9b:c8:dd:bf:42:
                    6d:45:82:aa:d4:11:cd:03:16:9a:16:42:43:1f:97:
                    59:92:ad:d6:04:4d:61:ed:3d:f5:0f:0d:d5:69:e6:
                    2e:54:3a:e0:61:6c:a7:a4:79:18:3a:71:71:cf:fc:
                    bb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6F:9D:2A:E2:3F:89:BD:1F:85:04:0C:DB:BE:D7:93:9D:0A:B0:EA
            X509v3 Authority Key Identifier:
                keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:64:99:73:d6:fb:59:4f:86:3f:07:2c:69:09:64:26:a1:0f:
         4e:7b:03:f2:b5:b7:9d:c5:0f:55:63:55:62:77:45:5d:70:2c:
         50:af:12:2a:c9:61:16:0e:32:6a:53:e8:5f:7c:9d:66:c2:0f:
         67:4d:36:13:e6:c8:ab:a1:6c:aa:2e:0b:38:b6:80:80:d2:f2:
         ed:04:a4:71:a7:ff:f2:5d:ad:be:07:a7:89:fc:cf:57:da:09:
         f2:01:92:26:f8:2a:06:d9:5d:19:19:0b:24:ef:4d:1a:d8:cc:
         cf:6a:7a:bb:c9:45:69:aa:6d:5e:c5:60:93:a5:99:59:a6:8b:
         7f:92:37:59:81:f0:20:52:ad:98:5c:e5:26:5b:b4:1f:8e:77:
         6f:d0:9e:42:03:77:7a:f5:28:cd:3e:27:19:26:d8:60:b7:bc:
         b0:ae:f1:8a:dd:e4:4d:4f:64:68:ee:77:45:82:d1:34:f4:8a:
         3b:4d:50:93:76:da:a2:2b:f2:b1:6b:c0:62:1d:cf:de:78:53:
         ae:e2:b6:e1:45:53:83:1d:03:24:16:f7:f7:1d:c1:e6:ec:08:
         c8:85:7a:17:cc:fb:52:da:47:3a:6d:f2:c5:30:a1:4e:e2:01:
         7a:71:e4:d7:2f:d5:5e:ff:e6:60:7e:02:5d:d3:ad:26:55:2f:
         b6:01:97:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG
REZBNzI2MzQwHhcNMjQxMTIzMDAxODExWhcNMjQxMTMwMDAxODExWjAYMRYwFAYD
VQQDEw02NzQxMWY0My02ZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu05bq3CXbyDQEJAGJF7wGlpbMHlfpkhmPIfB6ntYQ93JK+3YGmsQjXi/vgsx
xXt3+4fGEKPJ1lst5zAyHOiDintEsoFa42vZMIBgiE2Pzcaxh2rextpDefRZIKk8
uQTX+7tFp9rZwd5K2/28MSAjOszNJP4j5uIH0xylZIezWn0yOcYint4i77/giTuV
x/jOyS0k1tHOghFCsQGMfNAUrFsIo/nsh+WIJRer2Vgv2XWC087sWSjF9blyEF87
i+uRWdxR9ZZaoTZcsflsm8jdv0JtRYKq1BHNAxaaFkJDH5dZkq3WBE1h7T31Dw3V
aeYuVDrgYWynpHkYOnFxz/y7QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxvnSri
P4m9H4UEDNu+15OdCrDqMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy
QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUMzMy8wNEIzMzQ4ODcyQkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJ
SEFKZFJxT2haX3o5LW5KalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlZJlz1vtZT4Y/ByxpCWQmoQ9OewPytbedxQ9VY1Vid0VdcCxQrxIq
yWEWDjJqU+hffJ1mwg9nTTYT5siroWyqLgs4toCA0vLtBKRxp//yXa2+B6eJ/M9X
2gnyAZIm+CoG2V0ZGQsk700a2MzPanq7yUVpqm1exWCTpZlZpot/kjdZgfAgUq2Y
XOUmW7Qfjndv0J5CA3d69SjNPicZJthgt7ywrvGK3eRNT2Ro7ndFgtE09Io7TVCT
dtqiK/Kxa8BiHc/eeFOu4rbhRVODHQMkFvf3HcHm7AjIhXoXzPtS2kc6bfLFMKFO
4gF6ceTXL9Ve/+ZgfgJd060mVS+2AZe8
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:32 2024 by rpki-client on console-fra.rpki-client.org