Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
File:                     7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft (raw, json)
Hash identifier:          JwX4IZ3joyUOgGIYM4K+4dmxYPtn1ZIXfAGei7ZVGDw=
Subject key identifier:   A8:70:D2:93:6A:53:6D:FC:0D:D6:AE:E7:9D:F0:E8:24:2A:F6:4E:7A
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       0693
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
Manifest number:          059D
Signing time:             Wed 20 Nov 2024 23:18:57 +0000
Manifest this update:     Wed 20 Nov 2024 23:18:56 +0000
Manifest next update:     Wed 27 Nov 2024 23:18:56 +0000
Files and hashes:         1: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl (hash: aZXP44xFrzWFE5u5pR4evSFEKogAUBvRNH5eXezmOn8=)
                          2: 5E8F2C98FA5311EE9E6A8150C4F9AE02.roa (hash: jDK3rjU2bRZFaIfu3sKLZ4tFwr6Zd5H8aDrQGRa1n+Y=)
                          3: 217830E8779A11EE903E3E53C4F9AE02.roa (hash: Oo2zi/EhRzrqSn7zolKGlTcLvnJSb95h9fMiilyRJ1I=)
                          4: 8FA95EF2E52811ED863E8C34C4F9AE02.roa (hash: hwXZ4x1ri2Ou6C07i1b+lYsBLNvtNkvAv3I1gcMsZsU=)
                          5: 06FAE294924F11EF80B1115DC4F9AE02.roa (hash: wMMRS1JViaq+eV+0w4JQp61QJ0KALAvEktrddj79/AQ=)
                          6: 87CF4198A65111EEABE0B079C4F9AE02.roa (hash: pitRHAqLkQmUogZxDE8E1GxQICLDXV7ucXUG2kEKInU=)
                          7: 3F3E4D0426F711EE81AD9A45C4F9AE02.roa (hash: uxYOnF3d63rIS8oNPOqAfailLlmmUvubJ8OVRGowk6c=)
                          8: E20B36B8D7BA11EEA17F0E83C4F9AE02.roa (hash: 79JSkXVIKOjqvvxYPCuapgw/VjcRIymGOOFJLOS70p0=)
                          9: CED6A59A032B11EFAC30281BC4F9AE02.roa (hash: KV9EsH/6ydbVoA8GLbzM6wTi6I3o6HJnv8d8mygGAR0=)
                          10: F3E5A660E69E11ED841AC682C4F9AE02.roa (hash: VfvmI0FjW1ey2lLJifvpSJkDuW60zS8WURvHj/vHV0g=)
                          11: 53B4B36E8ABE11EFBEE72D47C4F9AE02.roa (hash: WIhr40MPPxMj1IUblIARKyL56Z9ag0TiF4WNQadeBIc=)
                          12: 2FCAEB4AE15311EEBE7C925BC4F9AE02.roa (hash: vRf1NZykh+ineSOtW66kwwiiGz6ZiMQZ7UaMTI/4uZQ=)
                          13: 8E6DB97451C111EE9E564B29C4F9AE02.roa (hash: Q55QocLIlctTLBOj+usdwg0kwa2pJ3fgOJxquQPk9+Q=)
                          14: 1EA2E8FA819811EFBCB7403CC4F9AE02.roa (hash: A6ldS07Hm7AQ/at7ePXVzcAj0Kggqlh1Mm4K0u1Dm8U=)
                          15: A06BA6868ABE11EFA0AEF447C4F9AE02.roa (hash: y9vtiRdJm/4e5wBCr0ITZMu71aGNFWb4wjktfV93mGQ=)
                          16: 53C13F547EBA11EF807BF64EC4F9AE02.roa (hash: Zeaxtp0UoFvgyI0HxM/gXSLX2Stj9ybtay4DLBey98g=)
                          17: 9EE451A08ABE11EFA0AEF447C4F9AE02.roa (hash: d2+7r39Eg9rjdbItDMc03X9V+mH89DguSdjx3CwlpWg=)
                          18: 919E2B20E52811ED863E8C34C4F9AE02.roa (hash: 4MLRq0YL6v9paTmHRTZWxjeku/RvHYQuxfXh3kK5soA=)
                          19: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (hash: aAT/94R8V8a6H3ASbqGyXee0COP067Ce/xVNeahwCBY=)
                          20: 6904305CA65111EEAAF77C79C4F9AE02.roa (hash: ur7qihZtIhvtBQTlWZmGrFYPbQjlVO+hgQ6kWnGMVbE=)
                          21: 9FA2A3588ABE11EFA0AEF447C4F9AE02.roa (hash: zuHY12P7XQtiC4QFmx7mr2cUPD02esdm9dT5uRSuL5E=)
                          22: ED1F311669F211EE80D21411C4F9AE02.roa (hash: W6lI8/Zg/LZowUOVNTBJAfGISvKfbKLxWwUWdC8LjAs=)
                          23: 20FF74DEC9D211EE8AEDE469C4F9AE02.roa (hash: IifixTA6Otc2fatf528z+FJwgFi234GZraMzsgqS6Nc=)
                          24: A2ACC95C8ABE11EFA0AEF447C4F9AE02.roa (hash: ysSHyrMBOoC42Za2BGe4ulc7tvAHutDH874+WMlbUXY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Nov 20 23:18:56 2024 GMT
            Not After : Nov 27 23:18:56 2024 GMT
        Subject: CN=673e6e61-ac5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d4:06:85:56:49:c1:c2:05:4d:b2:6b:a4:74:
                    08:3b:02:ec:67:91:2d:be:71:5c:08:7b:32:ab:bf:
                    68:a9:19:fe:98:cc:03:9a:45:c6:4f:9e:82:4a:d3:
                    57:7e:ac:19:91:9c:f9:dd:6b:64:50:67:fd:0d:31:
                    10:e5:15:6c:1d:59:b2:31:63:a6:c5:9d:25:ec:c5:
                    25:20:31:8b:b2:0a:66:57:39:4d:a0:a2:16:9c:06:
                    40:07:49:37:ba:2c:a2:1b:eb:78:2d:6b:8b:4d:da:
                    0c:28:be:ba:8e:62:3c:27:c2:4e:fe:18:7c:ed:72:
                    bb:96:ae:2f:34:60:55:57:4b:c1:5a:43:97:19:11:
                    2c:1c:c5:65:b8:96:79:f8:bb:0f:d4:08:3c:c8:8d:
                    c1:ba:7a:ab:b5:cf:ed:d3:e9:27:ab:78:56:fb:41:
                    13:04:68:5e:66:26:2b:fb:28:38:21:98:e1:bf:69:
                    5f:36:b2:ef:6c:39:68:3b:23:a1:5b:80:e4:63:ca:
                    dc:d6:86:ef:00:dc:9e:a1:8c:5a:f9:63:ba:fe:4a:
                    8a:6c:0d:5e:98:9d:31:0c:3e:65:f5:2d:ea:34:ef:
                    54:26:b3:8c:f8:70:f4:0d:5a:48:dc:d2:a1:8f:df:
                    25:07:77:ce:ba:30:39:b0:63:7f:d7:8e:d1:9c:9b:
                    5a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:70:D2:93:6A:53:6D:FC:0D:D6:AE:E7:9D:F0:E8:24:2A:F6:4E:7A
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:29:87:5e:9a:85:62:38:dd:d3:0e:39:34:52:d4:c0:ee:
         ff:ea:1d:55:d9:51:3e:56:e2:57:86:dd:37:e3:c8:e3:3d:d5:
         f6:3f:be:b9:22:d5:af:54:8b:75:51:57:be:9f:dc:c0:30:a5:
         1f:b1:21:cb:65:15:c4:d4:21:3a:3d:9f:c9:0d:f8:cb:25:eb:
         7a:0d:ae:4a:ba:4f:de:8f:4b:ec:d5:a6:89:cb:a4:ed:4a:e4:
         ea:fb:e0:f0:94:87:b8:bb:39:fd:92:9b:63:5f:84:c2:ee:e3:
         6a:73:a7:6c:d8:28:2b:21:2b:e9:e3:70:da:4f:c5:68:65:c9:
         66:be:4e:d4:dc:c7:db:b1:38:a4:bf:2b:c4:37:24:22:18:d5:
         d8:6d:f4:6a:73:99:5a:fd:09:dd:63:8c:0e:55:5e:a3:9d:7c:
         42:bc:d1:29:19:f2:73:64:3f:f5:e7:85:fd:8b:0d:04:ec:6e:
         7c:e2:39:27:7e:fb:78:25:3a:ea:da:17:c1:dc:40:d9:e1:50:
         62:98:64:89:57:47:42:a0:40:5c:ac:93:34:20:83:42:a7:95:
         43:46:f0:5d:1f:80:20:c4:8c:a0:22:25:55:f8:54:02:f9:64:
         34:38:8f:ea:68:a0:85:74:48:e1:1b:47:dc:87:eb:1a:4a:ad:
         a7:65:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:56 2024 by rpki-client on console-ams.rpki-client.org