Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
File:                     dS97SFPDqcnwf9naxduWq37y398.mft (raw, json)
Hash identifier:          v+mXvARj7a+mjGUY4SDNuKLV687W4pSQhpprk0IKgKA=
Subject key identifier:   96:9E:E4:96:5A:4C:51:54:94:E5:55:C9:72:C4:5D:70:37:E7:E6:A1
Authority key identifier: 75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF
Certificate issuer:       /CN=A913979C/serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF
Certificate serial:       02D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
Manifest number:          02CD
Signing time:             Wed 15 May 2024 03:31:42 +0000
Manifest this update:     Wed 15 May 2024 03:31:42 +0000
Manifest next update:     Wed 22 May 2024 03:31:42 +0000
Files and hashes:         1: dS97SFPDqcnwf9naxduWq37y398.crl (hash: eEk8r1/aygNOYKqGyyR8JRuuIlB48M4AVGaAlR99Dyg=)
                          2: 6A4842A69F8611ECBE806D30C4F9AE02.roa (hash: H/1cwDaEHE11fCD8qKCsRtyT9enDyusjOKBljw+UDXo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl
                          rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913979C/serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF
        Validity
            Not Before: May 15 03:31:42 2024 GMT
            Not After : May 22 03:31:42 2024 GMT
        Subject: CN=66442c9e-b46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:9e:a8:6d:8e:9c:77:74:2e:b5:a2:b5:d1:
                    a0:ea:5b:53:bc:1f:9a:61:f7:0b:7f:9d:9c:af:36:
                    3e:67:1b:e8:93:e8:b5:da:c5:a4:25:ac:d2:6d:15:
                    00:ab:97:c4:a6:79:63:cf:52:14:c4:38:c6:12:67:
                    46:61:ea:73:a0:77:c4:fb:8d:c8:ea:1e:11:6d:5d:
                    c6:47:a0:b5:ca:f5:b2:21:13:56:30:ca:d8:af:df:
                    40:9c:d9:e9:91:40:8b:f1:33:e3:0d:a5:32:c2:63:
                    c2:0b:09:31:c4:b4:7f:10:67:59:c8:16:48:bc:7f:
                    f5:4d:6a:75:ca:5a:e1:e2:e2:e4:3b:ab:3c:41:12:
                    58:83:bc:24:5c:f3:8f:c5:d2:fd:ff:82:af:68:68:
                    00:8d:b6:45:65:f0:3b:36:24:b0:14:d9:d1:5f:4d:
                    71:f2:73:88:80:88:9e:c8:c1:19:c3:7a:94:1d:b5:
                    2e:fa:e8:d8:b6:f5:76:e7:83:13:da:d7:16:bc:ce:
                    fa:09:ba:53:bc:b7:7c:3e:fa:77:b8:77:71:98:7a:
                    aa:cb:25:55:d0:8d:91:16:2d:70:10:0e:e8:b1:cc:
                    8b:cf:b4:08:7a:5d:5b:69:51:1d:c3:a5:82:4e:10:
                    7f:77:28:55:43:f2:35:74:55:d5:9c:49:93:7f:77:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9E:E4:96:5A:4C:51:54:94:E5:55:C9:72:C4:5D:70:37:E7:E6:A1
            X509v3 Authority Key Identifier:
                keyid:75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:de:44:0d:5b:fa:39:fe:ba:11:a3:bc:2e:57:67:d2:d3:77:
         2b:9d:e3:ad:36:8e:ff:2c:11:7e:0e:86:e0:b2:93:b8:93:4f:
         30:a8:a7:f2:99:c8:f2:ee:13:ec:a0:96:fd:ea:90:4f:5d:63:
         8b:e6:3d:e9:3a:3d:16:00:19:58:67:e2:3b:2b:0d:76:dd:e4:
         5f:8b:8f:61:8a:c5:ad:b9:80:d6:b1:fe:71:c2:46:1f:43:a2:
         de:6c:73:85:73:89:b0:00:01:fa:6b:d3:54:2c:0b:fe:ae:df:
         fb:5e:0c:1a:ce:59:d6:f3:3c:a5:23:f1:9b:ed:fd:c8:95:07:
         70:b6:d0:10:fc:c3:e9:5f:65:3c:ac:56:07:56:5d:ba:eb:7a:
         6b:9f:de:24:bc:92:41:d9:8d:07:de:40:e3:2e:94:26:e7:78:
         6d:47:3b:4c:26:45:e5:ed:2c:6b:fa:1c:12:07:ed:e7:87:0b:
         64:41:be:fb:ce:2b:33:e4:40:0c:3a:84:4b:aa:6a:ca:e7:15:
         f5:6d:65:dc:c5:c7:e6:81:19:8f:65:e2:e9:b7:c1:95:2d:e8:
         dc:3a:8d:dc:2d:88:5e:44:d3:33:fe:bb:26:93:cb:9a:ed:fb:
         f8:07:53:92:1b:83:ce:9b:74:ff:78:a1:62:96:57:47:30:07:
         ff:6d:0a:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzk3OUMxMTAvBgNVBAUTKDc1MkY3QjQ4NTNDM0E5QzlGMDdGRDlEQUM1REI5NkFC
N0VGMkRGREYwHhcNMjQwNTE1MDMzMTQyWhcNMjQwNTIyMDMzMTQyWjAYMRYwFAYD
VQQDEw02NjQ0MmM5ZS1iNDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7SeqG2OnHd0LrWitdGg6ltTvB+aYfcLf52crzY+Zxvok+i12sWkJazSbRUA
q5fEpnljz1IUxDjGEmdGYepzoHfE+43I6h4RbV3GR6C1yvWyIRNWMMrYr99AnNnp
kUCL8TPjDaUywmPCCwkxxLR/EGdZyBZIvH/1TWp1ylrh4uLkO6s8QRJYg7wkXPOP
xdL9/4KvaGgAjbZFZfA7NiSwFNnRX01x8nOIgIieyMEZw3qUHbUu+ujYtvV254MT
2tcWvM76CbpTvLd8Pvp3uHdxmHqqyyVV0I2RFi1wEA7oscyLz7QIel1baVEdw6WC
ThB/dyhVQ/I1dFXVnEmTf3fa1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJae5JZa
TFFUlOVVyXLEXXA35+ahMB8GA1UdIwQYMBaAFHUve0hTw6nJ8H/Z2sXblqt+8t/f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTc5Qy9COUM5NThCODlG
ODMxMUVDODNGNzYyMjlDNEY5QUUwMi9kUzk3U0ZQRHFjbndmOW5heGR1V3EzN3kz
OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RTOTdTRlBEcWNud2Y5bmF4ZHVXcTM3eTM5OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTc5Qy9COUM5NThCODlGODMxMUVDODNGNzYyMjlDNEY5QUUwMi9kUzk3U0ZQRHFj
bndmOW5heGR1V3EzN3kzOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAr3kQNW/o5/roRo7wuV2fS03crneOtNo7/LBF+DobgspO4k08wqKfy
mcjy7hPsoJb96pBPXWOL5j3pOj0WABlYZ+I7Kw123eRfi49hisWtuYDWsf5xwkYf
Q6LebHOFc4mwAAH6a9NULAv+rt/7XgwazlnW8zylI/Gb7f3IlQdwttAQ/MPpX2U8
rFYHVl2663prn94kvJJB2Y0H3kDjLpQm53htRztMJkXl7Sxr+hwSB+3nhwtkQb77
zisz5EAMOoRLqmrK5xX1bWXcxcfmgRmPZeLpt8GVLejcOo3cLYheRNMz/rsmk8ua
7fv4B1OSG4POm3T/eKFilldHMAf/bQo5
-----END CERTIFICATE-----
Generated at Wed May 15 04:37:58 2024 by rpki-client on console-fra.rpki-client.org