Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft
File:                     xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json)
Hash identifier:          kYar56WN2wT/vSuAckWQV60vrhlZ4Wki9ZFPwGXjuBw=
Subject key identifier:   9E:36:FF:17:AB:05:53:67:88:6A:90:CE:0F:9B:47:A4:09:3A:4A:10
Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2
Certificate issuer:       /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2
Certificate serial:       046C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft
Manifest number:          0466
Signing time:             Wed 20 Nov 2024 23:40:02 +0000
Manifest this update:     Wed 20 Nov 2024 23:40:01 +0000
Manifest next update:     Wed 27 Nov 2024 23:40:01 +0000
Files and hashes:         1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: bNXfWr30NjDmuaJ7lA3oW0F62BEhs6KI6TEAMBwoMOw=)
                          2: 82D6580C6D1111EFA2579E40C4F9AE02.roa (hash: jCU/v9ZAMlR1XjR5DVX1sYYEuiobU1ATrCOeYr/SwtU=)
                          3: 823E55DE6D1111EFA2579E40C4F9AE02.roa (hash: 4Y1CJYnccsljljYTRuihSH5rf63INRuP39Y2H4f++BA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl
                          rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1132 (0x46c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2
        Validity
            Not Before: Nov 20 23:40:01 2024 GMT
            Not After : Nov 27 23:40:01 2024 GMT
        Subject: CN=673e7351-b49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9d:0c:43:ac:d1:08:0d:b4:6b:bf:0e:fc:02:
                    a3:1e:bf:33:d6:06:2a:23:9b:4d:ac:cf:65:d8:e7:
                    47:86:13:e1:ac:70:65:42:58:e0:25:8d:8c:21:04:
                    93:ba:3f:4d:14:8f:fe:84:b9:be:25:d4:be:be:b5:
                    f9:7b:10:88:1c:1a:02:69:7e:3b:5a:aa:32:6a:ff:
                    54:93:83:18:17:26:4b:b2:4c:2e:1f:1a:ee:be:40:
                    61:70:fa:ad:3d:d2:45:b7:84:4c:9c:0c:2d:40:80:
                    22:43:29:7d:af:57:05:71:3a:30:b3:be:7e:5c:66:
                    1f:cd:0b:06:f2:b4:38:1d:1d:74:57:09:2b:87:e1:
                    92:fe:dd:85:98:45:1b:4f:08:1e:40:43:d3:14:af:
                    1e:14:6a:3c:90:ca:95:40:15:db:1d:18:73:ff:1a:
                    ac:4e:de:3b:d8:64:99:80:34:2a:c7:56:3c:d9:df:
                    90:ea:6e:fd:e9:3f:cf:2e:90:8d:5a:df:e5:78:b4:
                    e2:c9:6d:7d:79:18:90:c1:5c:62:7a:80:37:27:8c:
                    2a:13:15:59:88:5f:f0:e8:83:45:ef:2b:d4:a7:9d:
                    c1:ce:ed:13:56:a6:d1:73:a0:c5:6e:9a:ea:35:cb:
                    43:8a:05:1a:53:4b:1b:0e:34:9f:08:92:7b:bd:ca:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:36:FF:17:AB:05:53:67:88:6A:90:CE:0F:9B:47:A4:09:3A:4A:10
            X509v3 Authority Key Identifier:
                keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ba:4f:df:2c:36:e0:bc:33:0b:52:97:5a:68:d8:3f:09:11:
         52:2a:5c:f4:93:0e:a8:53:8b:7a:08:2b:c9:35:25:6e:75:fc:
         70:8c:2c:50:8f:8b:0a:2e:15:d7:95:b9:31:ed:de:e7:4f:12:
         1a:99:8c:2a:c1:91:5c:e6:da:16:4b:6d:cf:b9:49:ad:83:86:
         21:5f:a0:9c:51:53:a8:36:73:b5:9a:94:86:8f:47:c8:3c:fe:
         bb:5a:f7:a3:d5:c7:2a:c6:49:31:fc:1f:6b:dd:dc:ef:a5:be:
         e5:74:42:4d:01:06:96:8c:11:3e:73:bf:13:5d:04:99:e8:fd:
         04:9b:34:0b:8f:a0:22:9d:a4:18:af:77:0d:45:d2:bf:6d:57:
         39:60:36:0e:a2:80:ee:92:31:cf:5c:21:eb:c6:45:93:01:d2:
         94:04:f1:6e:a5:c1:ed:7e:71:e0:d1:3f:b4:52:03:b3:b7:b8:
         5d:cb:9d:9f:03:2a:66:e7:16:ef:b0:60:37:28:82:01:49:01:
         65:21:aa:67:58:1d:40:9a:94:4f:81:45:97:ea:91:f9:c9:fe:
         e1:03:61:8b:d2:fa:c2:f6:d4:d9:9d:ee:ca:f3:9b:c7:de:c4:
         9f:0d:c7:35:b3:cb:a4:e1:8a:27:93:c4:ef:de:cf:32:35:d3:
         e9:0b:7a:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw
MDBERThCQjIwHhcNMjQxMTIwMjM0MDAxWhcNMjQxMTI3MjM0MDAxWjAYMRYwFAYD
VQQDEw02NzNlNzM1MS1iNDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA350MQ6zRCA20a78O/AKjHr8z1gYqI5tNrM9l2OdHhhPhrHBlQljgJY2MIQST
uj9NFI/+hLm+JdS+vrX5exCIHBoCaX47Wqoyav9Uk4MYFyZLskwuHxruvkBhcPqt
PdJFt4RMnAwtQIAiQyl9r1cFcTows75+XGYfzQsG8rQ4HR10Vwkrh+GS/t2FmEUb
TwgeQEPTFK8eFGo8kMqVQBXbHRhz/xqsTt472GSZgDQqx1Y82d+Q6m796T/PLpCN
Wt/leLTiyW19eRiQwVxieoA3J4wqExVZiF/w6INF7yvUp53Bzu0TVqbRc6DFbprq
NctDigUaU0sbDjSfCJJ7vcoPnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ42/xer
BVNniGqQzg+bR6QJOkoQMB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1
REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx
bnFndTd1T3Z1S1FBRGVpN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGuk/fLDbgvDMLUpdaaNg/CRFSKlz0kw6oU4t6CCvJNSVudfxwjCxQ
j4sKLhXXlbkx7d7nTxIamYwqwZFc5toWS23PuUmtg4YhX6CcUVOoNnO1mpSGj0fI
PP67Wvej1ccqxkkx/B9r3dzvpb7ldEJNAQaWjBE+c78TXQSZ6P0EmzQLj6AinaQY
r3cNRdK/bVc5YDYOooDukjHPXCHrxkWTAdKUBPFupcHtfnHg0T+0UgOzt7hdy52f
Aypm5xbvsGA3KIIBSQFlIapnWB1AmpRPgUWX6pH5yf7hA2GL0vrC9tTZne7K85vH
3sSfDcc1s8uk4Yonk8Tv3s8yNdPpC3o/
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:19 2024 by rpki-client on console-fra.rpki-client.org