Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
File:                     Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json)
Hash identifier:          gqL1kGDgm2GPdgSR0T1pMCjCvdUWg2nDbSk4/TdIqsE=
Subject key identifier:   04:C1:0B:0B:3C:77:DF:30:F3:AE:28:93:28:21:BD:03:05:2A:E1:E8
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Certificate issuer:       /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
Manifest number:          96
Signing time:             Sat 23 Nov 2024 04:26:45 +0000
Manifest this update:     Sat 23 Nov 2024 04:26:45 +0000
Manifest next update:     Sat 30 Nov 2024 04:26:45 +0000
Files and hashes:         1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: KKUqMXwoihv5OnYw3xE10WmBGY3aBauJ3H7YEzgSPXo=)
                          2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: YI2srcnz/6DwUPS7c8IQ+7Hr1uygrottBvqwJQtIlR0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
        Validity
            Not Before: Nov 23 04:26:45 2024 GMT
            Not After : Nov 30 04:26:45 2024 GMT
        Subject: CN=67415985-d453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:b6:1f:db:37:7a:91:33:35:98:2d:d4:cc:
                    6e:04:96:a1:f0:19:5e:dc:42:f3:3d:2a:d2:00:3a:
                    9a:29:82:1c:ec:ca:58:4e:97:28:30:5b:1b:57:4c:
                    7c:24:bc:a7:ad:e9:9e:2a:14:41:6a:35:59:cd:cc:
                    3a:71:50:8e:ad:3d:84:d9:12:4d:cb:74:c4:78:07:
                    63:9c:cb:ea:89:85:ab:03:d2:f3:f8:50:e3:d1:4b:
                    a5:20:32:1a:79:6f:84:21:0e:c0:1f:ff:ee:18:15:
                    24:91:b9:c0:7a:67:87:d6:32:a5:43:bb:e7:67:eb:
                    e7:95:7d:12:ae:f8:39:a4:e1:32:2b:ce:c7:20:1d:
                    73:aa:3d:7a:52:f9:6c:4a:94:bb:be:24:de:30:c9:
                    7a:06:f5:32:4f:12:6e:fe:c7:0d:58:13:81:ac:f8:
                    e9:e3:52:17:36:ca:4b:06:07:7f:d7:a2:f8:bf:ed:
                    9c:ff:63:cf:76:ce:99:f6:0f:80:84:20:7f:51:8a:
                    29:dd:c0:e8:06:6a:86:48:c0:da:d7:90:8b:7e:be:
                    69:90:a9:47:40:0c:d5:a0:48:3a:15:60:92:86:8e:
                    d8:9c:88:f6:46:a2:8e:5a:f1:63:5b:01:d9:bc:75:
                    a3:11:19:06:ef:a4:16:22:ea:ba:3d:f5:cd:d3:33:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C1:0B:0B:3C:77:DF:30:F3:AE:28:93:28:21:BD:03:05:2A:E1:E8
            X509v3 Authority Key Identifier:
                keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:2e:25:6a:28:f7:65:5f:44:a2:1f:b2:13:80:25:d5:c3:2d:
         6d:cc:0b:29:bb:ae:15:e8:6e:ab:13:d0:c4:d6:0e:b3:de:9a:
         6d:c4:fd:74:89:f0:7e:20:27:c1:07:ab:d9:21:d9:52:34:e5:
         97:76:8e:9d:fd:f6:6a:22:8f:4e:6d:02:76:48:1f:54:9d:bd:
         96:d3:59:d9:23:cd:db:12:45:72:bb:ab:fd:47:32:0c:9d:59:
         59:5b:26:e1:7c:53:89:5b:76:b4:46:e1:c8:ef:bf:17:27:73:
         46:87:62:f0:19:60:5b:e9:f6:3b:e1:ca:26:59:81:e4:34:ba:
         c7:98:b2:8e:c2:44:fe:ac:6a:e1:32:a8:9d:bb:28:44:61:bd:
         5b:0a:db:8f:11:ed:f6:a7:33:1f:9e:d3:90:42:9c:d9:26:2a:
         c4:1b:9c:5c:d0:ae:e0:71:8c:bb:79:19:d3:17:9c:1f:44:4c:
         d0:a5:e0:c3:14:7e:2a:b0:eb:3f:52:e0:72:27:29:c2:42:91:
         99:22:e4:2c:62:7a:10:79:ee:0c:5a:1d:3b:5f:10:12:05:75:
         1c:32:20:c5:b6:c8:d8:d5:ec:34:c9:1c:61:b0:32:12:02:4f:
         e3:53:33:6a:6a:6f:f9:20:ad:dd:4b:b9:f8:fe:ab:cc:68:d9:
         79:a5:2f:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5
MjNBQTc1QzcwHhcNMjQxMTIzMDQyNjQ1WhcNMjQxMTMwMDQyNjQ1WjAYMRYwFAYD
VQQDEw02NzQxNTk4NS1kNDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArDC2H9s3epEzNZgt1MxuBJah8Ble3ELzPSrSADqaKYIc7MpYTpcoMFsbV0x8
JLynremeKhRBajVZzcw6cVCOrT2E2RJNy3TEeAdjnMvqiYWrA9Lz+FDj0UulIDIa
eW+EIQ7AH//uGBUkkbnAemeH1jKlQ7vnZ+vnlX0Srvg5pOEyK87HIB1zqj16Uvls
SpS7viTeMMl6BvUyTxJu/scNWBOBrPjp41IXNspLBgd/16L4v+2c/2PPds6Z9g+A
hCB/UYop3cDoBmqGSMDa15CLfr5pkKlHQAzVoEg6FWCSho7YnIj2RqKOWvFjWwHZ
vHWjERkG76QWIuq6PfXN0zOKPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATBCws8
d98w864okyghvQMFKuHoMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1
NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6
ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6LiVqKPdlX0SiH7ITgCXVwy1tzAspu64V6G6rE9DE1g6z3pptxP10
ifB+ICfBB6vZIdlSNOWXdo6d/fZqIo9ObQJ2SB9Unb2W01nZI83bEkVyu6v9RzIM
nVlZWybhfFOJW3a0RuHI778XJ3NGh2LwGWBb6fY74comWYHkNLrHmLKOwkT+rGrh
MqiduyhEYb1bCtuPEe32pzMfntOQQpzZJirEG5xc0K7gcYy7eRnTF5wfREzQpeDD
FH4qsOs/UuByJynCQpGZIuQsYnoQee4MWh07XxASBXUcMiDFtsjY1ew0yRxhsDIS
Ak/jUzNqam/5IK3dS7n4/qvMaNl5pS/u
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org