Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
File:                     eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json)
Hash identifier:          PRrlSNOuZHa4rJlXT2IwLyKGBMBrAnlTXVYxJRsC94s=
Subject key identifier:   7A:C8:09:84:19:E4:07:DA:1A:5E:88:57:75:62:0D:3C:52:F4:C8:B9
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Certificate issuer:       /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
Manifest number:          0C
Signing time:             Thu 21 Nov 2024 06:11:40 +0000
Manifest this update:     Thu 21 Nov 2024 06:11:39 +0000
Manifest next update:     Thu 28 Nov 2024 06:11:39 +0000
Files and hashes:         1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: yTY2bGC1lAH4rAIXzluYRP/fKklet/3xkuYlduUFP0s=)
                          2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
                          rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
        Validity
            Not Before: Nov 21 06:11:39 2024 GMT
            Not After : Nov 28 06:11:39 2024 GMT
        Subject: CN=673ecf1c-2d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:37:1a:be:13:64:cc:27:3c:8c:cf:23:f3:
                    53:6c:fe:9a:d0:d2:b0:b8:08:f4:f6:cd:e4:33:36:
                    ef:c3:b8:05:d6:b4:19:b7:1c:fa:8e:fa:32:c2:d9:
                    20:d1:55:da:cd:6f:94:7b:39:60:e6:79:b1:4b:86:
                    e1:25:77:ac:2b:93:2a:4a:97:09:74:cd:c0:17:65:
                    33:94:a4:9a:6a:06:93:06:a2:0e:53:9e:dc:77:a3:
                    24:44:c6:29:b8:ef:75:f7:56:55:c6:7b:ae:b9:1a:
                    b3:5f:c5:ff:41:eb:7b:8a:67:60:e4:70:bf:13:46:
                    6c:88:c5:ef:ad:ad:c6:e5:57:16:9c:11:27:2b:18:
                    e3:8a:24:e4:d9:e9:34:be:3b:87:a0:99:7a:f4:0f:
                    c1:63:60:5a:72:53:49:48:a9:33:7a:77:35:9b:85:
                    8e:7a:64:c2:25:2e:7c:7c:2e:03:76:4d:63:7e:b2:
                    b4:43:78:33:32:c8:85:e5:ec:e5:39:01:9d:69:d2:
                    9c:d1:b9:23:26:54:9d:24:e1:bd:18:19:77:f9:1c:
                    be:84:e9:a0:d5:2a:bb:14:36:37:47:9c:81:55:26:
                    e8:85:1d:56:3a:d6:f7:eb:43:51:e7:c3:1b:b9:32:
                    62:48:af:e6:13:7f:76:99:66:0f:c3:91:9f:f0:37:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C8:09:84:19:E4:07:DA:1A:5E:88:57:75:62:0D:3C:52:F4:C8:B9
            X509v3 Authority Key Identifier:
                keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:6e:52:5a:15:3a:d6:dc:3c:8e:91:59:3a:6f:70:23:c6:ab:
         a9:3b:79:bf:c7:3a:d2:f8:39:64:51:6e:9f:1d:4e:4f:65:85:
         d6:0e:50:6c:b7:36:46:45:4f:97:55:72:fb:68:3f:b8:4e:3a:
         8f:3b:ef:8c:8c:b7:02:65:55:3e:ce:68:ac:11:17:07:6d:c2:
         c7:b4:a8:52:ad:9e:19:e1:70:20:33:61:0f:e1:c4:32:db:53:
         8a:13:94:06:39:83:78:0a:b0:64:8c:78:43:26:3b:5d:16:7b:
         83:12:b9:4c:87:8e:80:e8:d6:54:d1:b2:b3:99:8e:e7:60:13:
         0d:67:4b:a8:28:c0:cc:05:1b:39:41:e9:c4:86:a6:13:61:43:
         5d:34:13:e6:70:44:2a:03:4d:80:92:b0:1f:cc:1f:e8:2c:4d:
         e0:45:7c:fa:04:ff:e6:71:4b:15:2b:48:66:22:d8:94:0e:9d:
         07:f2:f9:89:f3:48:90:37:81:cd:2a:c3:f5:dc:df:74:a0:a4:
         0c:f8:fb:7a:12:c4:2e:ed:fa:a0:b6:f8:f7:ff:79:d5:3b:f6:
         90:d1:80:dd:98:3f:ad:83:94:b4:0a:f3:38:71:50:33:34:bb:
         48:05:79:98:6c:ad:f0:08:54:c9:95:64:bf:b1:51:96:a7:e8:
         a8:c3:c7:b2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MjQ4OTExMC8GA1UEBRMoN0FFQTc3N0M2QjE5MTUxMzUzM0IwRTJFREYwRjBEODRD
QjcwQkExMTAeFw0yNDExMjEwNjExMzlaFw0yNDExMjgwNjExMzlaMBgxFjAUBgNV
BAMTDTY3M2VjZjFjLTJkODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8JDcavhNkzCc8jM8j81Ns/prQ0rC4CPT2zeQzNu/DuAXWtBm3HPqO+jLC2SDR
VdrNb5R7OWDmebFLhuEld6wrkypKlwl0zcAXZTOUpJpqBpMGog5Tntx3oyRExim4
73X3VlXGe665GrNfxf9B63uKZ2DkcL8TRmyIxe+trcblVxacEScrGOOKJOTZ6TS+
O4egmXr0D8FjYFpyU0lIqTN6dzWbhY56ZMIlLnx8LgN2TWN+srRDeDMyyIXl7OU5
AZ1p0pzRuSMmVJ0k4b0YGXf5HL6E6aDVKrsUNjdHnIFVJuiFHVY61vfrQ1Hnwxu5
MmJIr+YTf3aZZg/DkZ/wN0MtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUesgJhBnk
B9oaXohXdWINPFL0yLkwHwYDVR0jBBgwFoAUeup3fGsZFRNTOw4u3w8NhMtwuhEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDg5LzMyODlBOTBFOUJG
QTExRUZCRUI5ODQ2RUM0RjlBRTAyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3Vo
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZXVwM2ZHc1pGUk5UT3c0dTN3OE5oTXR3dWhFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy
NDg5LzMyODlBOTBFOUJGQTExRUZCRUI5ODQ2RUM0RjlBRTAyL2V1cDNmR3NaRlJO
VE93NHUzdzhOaE10d3VoRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMRuUloVOtbcPI6RWTpvcCPGq6k7eb/HOtL4OWRRbp8dTk9lhdYOUGy3
NkZFT5dVcvtoP7hOOo8774yMtwJlVT7OaKwRFwdtwse0qFKtnhnhcCAzYQ/hxDLb
U4oTlAY5g3gKsGSMeEMmO10We4MSuUyHjoDo1lTRsrOZjudgEw1nS6gowMwFGzlB
6cSGphNhQ100E+ZwRCoDTYCSsB/MH+gsTeBFfPoE/+ZxSxUrSGYi2JQOnQfy+Ynz
SJA3gc0qw/Xc33SgpAz4+3oSxC7t+qC2+Pf/edU79pDRgN2YP62DlLQK8zhxUDM0
u0gFeZhsrfAIVMmVZL+xUZan6KjDx7I=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:01 2024 by rpki-client on console-ams.rpki-client.org