Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
File:                     yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json)
Hash identifier:          KyQQdMzasJ9eNjCn48bTRNzLdwHRam9DUgHT/Kqagfg=
Subject key identifier:   42:BB:22:D6:F2:E1:3F:71:A1:A5:C6:D0:DC:06:9A:E3:6D:6B:FB:46
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Certificate issuer:       /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
Manifest number:          0117
Signing time:             Sun 05 May 2024 05:19:36 +0000
Manifest this update:     Sun 05 May 2024 05:19:35 +0000
Manifest next update:     Sun 12 May 2024 05:19:35 +0000
Files and hashes:         1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: V6xOa8d8CQYBCralaaX/FeY/UOoc3RSQOxvzpGCmYTg=)
                          2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: +DHv0TsS0BTgWMTGKL7AqwoeixABhUbNIevclE5IwxI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
                          rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 02:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
        Validity
            Not Before: May  5 05:19:35 2024 GMT
            Not After : May 12 05:19:35 2024 GMT
        Subject: CN=663716e7-66a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:a1:14:54:0f:45:2d:52:b2:7d:a3:df:e1:
                    dc:63:a3:9c:03:00:0b:1c:91:3d:ba:00:46:dc:c4:
                    77:27:94:df:08:c2:be:ae:da:3b:cc:d4:1a:e5:29:
                    7d:1c:48:b6:86:16:03:51:68:52:c6:bf:b2:77:17:
                    c6:50:70:a8:85:52:e7:34:d3:33:d5:81:53:f1:e9:
                    43:96:cf:81:1d:cb:0f:a4:28:08:f9:d4:00:00:fe:
                    8c:7c:a5:b1:f0:9d:ca:24:7e:97:14:b9:87:4f:ee:
                    1c:c2:6d:57:5a:d8:00:26:0c:5d:00:63:91:71:fe:
                    db:2e:98:ec:f1:de:84:82:56:1e:fc:ce:85:93:65:
                    1a:08:a8:71:a8:40:bc:f9:9a:be:0a:92:78:01:71:
                    fc:5e:f0:a6:2f:6d:0e:f0:74:3d:0e:d6:ef:14:64:
                    42:1f:7f:c9:25:e7:3a:01:92:cf:0f:a7:86:d3:e8:
                    c9:3c:3d:5a:61:70:0d:bc:d0:af:af:0f:4f:63:97:
                    09:2f:9b:29:02:27:a3:b2:93:49:6d:71:7f:08:be:
                    91:43:0b:a9:22:e0:5d:65:04:3e:fa:b8:16:e0:6f:
                    c8:10:14:6b:b1:9f:f1:81:f9:49:0c:07:27:af:30:
                    48:a2:e3:42:38:5d:0e:13:70:10:a8:1f:32:f4:37:
                    fc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BB:22:D6:F2:E1:3F:71:A1:A5:C6:D0:DC:06:9A:E3:6D:6B:FB:46
            X509v3 Authority Key Identifier:
                keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a8:20:c9:1b:c1:80:22:79:37:74:6a:32:63:f9:21:68:5d:
         63:ec:7c:64:35:21:dc:83:c8:4a:19:49:58:fe:9d:1d:a6:6c:
         0c:7a:2e:a6:91:24:9c:32:06:0b:4e:9e:1e:ce:99:69:3d:5b:
         b2:c1:e6:7a:10:9b:c1:32:df:ff:3e:4d:c1:21:f3:4d:e4:47:
         14:22:fc:9e:01:ba:1e:d5:b9:f3:59:d2:4c:f6:f2:70:80:17:
         f9:0b:a7:76:6f:43:c0:41:86:3c:38:0d:a0:75:cb:a2:5d:d8:
         00:0e:1e:6e:84:82:b7:49:aa:3d:74:d0:3a:73:09:5f:ff:ff:
         c5:c3:23:09:11:a4:1a:af:f3:54:f4:c1:6d:5f:59:1a:41:e2:
         1e:6f:97:46:fb:d5:e5:93:3e:bc:58:3a:db:a4:e5:38:25:99:
         60:9e:bc:f9:98:6c:a1:c7:c4:08:e3:7d:98:8c:05:66:5f:43:
         1b:42:53:15:8f:0c:3f:0b:8f:89:ca:30:d6:b0:d6:e3:9f:b4:
         86:a2:e0:99:92:c4:5c:17:d0:7a:05:2a:03:5f:1b:8e:2f:f1:
         9d:0a:16:2f:4b:3c:12:44:7d:ad:36:c9:c8:09:81:54:fa:88:
         3c:39:67:1f:8b:b9:a2:42:e9:06:71:0f:f9:62:0a:93:37:0e:
         bd:3b:85:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgxNEUxMTAvBgNVBAUTKENBMzgwMzY5OUFENUIwOTA2QzAwNzk3QTNBMUU5Q0Q5
NUI2NTkxQjEwHhcNMjQwNTA1MDUxOTM1WhcNMjQwNTEyMDUxOTM1WjAYMRYwFAYD
VQQDEw02NjM3MTZlNy02NmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz4mhFFQPRS1Ssn2j3+HcY6OcAwALHJE9ugBG3MR3J5TfCMK+rto7zNQa5Sl9
HEi2hhYDUWhSxr+ydxfGUHCohVLnNNMz1YFT8elDls+BHcsPpCgI+dQAAP6MfKWx
8J3KJH6XFLmHT+4cwm1XWtgAJgxdAGORcf7bLpjs8d6EglYe/M6Fk2UaCKhxqEC8
+Zq+CpJ4AXH8XvCmL20O8HQ9DtbvFGRCH3/JJec6AZLPD6eG0+jJPD1aYXANvNCv
rw9PY5cJL5spAiejspNJbXF/CL6RQwupIuBdZQQ++rgW4G/IEBRrsZ/xgflJDAcn
rzBIouNCOF0OE3AQqB8y9Df8kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEK7Itby
4T9xoaXG0NwGmuNta/tGMB8GA1UdIwQYMBaAFMo4A2ma1bCQbAB5ejoenNlbZZGx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE0RS84MEM5NUFBRTVG
MjcxMUVEQjFENUZBM0RDNEY5QUUwMi95amdEYVpyVnNKQnNBSGw2T2g2YzJWdGxr
YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lqZ0RhWnJWc0pCc0FIbDZPaDZjMlZ0bGtiRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODE0RS84MEM5NUFBRTVGMjcxMUVEQjFENUZBM0RDNEY5QUUwMi95amdEYVpyVnNK
QnNBSGw2T2g2YzJWdGxrYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDqCDJG8GAInk3dGoyY/khaF1j7HxkNSHcg8hKGUlY/p0dpmwMei6m
kSScMgYLTp4ezplpPVuyweZ6EJvBMt//Pk3BIfNN5EcUIvyeAboe1bnzWdJM9vJw
gBf5C6d2b0PAQYY8OA2gdcuiXdgADh5uhIK3Sao9dNA6cwlf///FwyMJEaQar/NU
9MFtX1kaQeIeb5dG+9Xlkz68WDrbpOU4JZlgnrz5mGyhx8QI432YjAVmX0MbQlMV
jww/C4+JyjDWsNbjn7SGouCZksRcF9B6BSoDXxuOL/GdChYvSzwSRH2tNsnICYFU
+og8OWcfi7miQukGcQ/5YgqTNw69O4Wi
-----END CERTIFICATE-----
Generated at Sun May 5 06:13:35 2024 by rpki-client on console-ams.rpki-client.org