Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File:                     dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier:          81zGg0x/n21gVlRvsm/CcSdaRpJj8pTVVGQSQ8/TWfA=
Subject key identifier:   90:8D:74:33:34:6D:B2:F2:58:FF:9E:57:69:25:71:A8:87:3D:AD:D8
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number:          98
Signing time:             Fri 17 May 2024 07:02:00 +0000
Manifest this update:     Fri 17 May 2024 07:02:00 +0000
Manifest next update:     Fri 24 May 2024 07:02:00 +0000
Files and hashes:         1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: rsLmP2/3GjckgdTtvJUcmcKlLl3t3lsm/TidmWQzT14=)
                          2: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 6x2mPRr8tFBujOQtjeq5IPE1uq8HvCy9BoUj1YCgyMk=)
                          3: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: vZyDruUuGk4hx5G1OpTn2aVtFxEyPcTfQBZ971Jhif8=)
                          4: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: Elvwrb+lnz51/voO2VptmUh2haZZEQ24Voi0xDDY46w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 07:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: May 17 07:02:00 2024 GMT
            Not After : May 24 07:02:00 2024 GMT
        Subject: CN=664700e8-8008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:25:43:f1:a2:a7:4d:22:3d:7a:33:2a:e9:
                    9b:02:ec:1c:51:22:92:17:4f:f2:bf:45:59:3f:d3:
                    01:ea:a8:06:8c:2e:90:12:f8:81:3f:c9:84:82:3c:
                    06:f2:ed:31:95:ab:5b:6d:5d:e4:ce:42:ef:ff:cb:
                    df:05:b0:bb:86:13:43:12:bf:e6:5e:d2:b7:71:90:
                    ed:97:50:7c:95:69:de:d2:27:de:99:15:b4:b8:54:
                    ba:17:b0:fe:90:83:97:3b:41:8e:8a:49:5a:b1:a2:
                    e3:54:f5:75:18:6b:0a:80:5b:7a:88:49:47:6b:7e:
                    f4:16:7f:8e:5e:63:52:1e:09:43:4f:f7:6e:53:c4:
                    d5:fe:b1:fd:92:27:2f:88:b9:18:88:7f:ae:34:7c:
                    f5:a3:f0:ac:d3:a5:fa:d4:e9:ee:71:ce:2c:fe:e1:
                    29:86:59:27:8f:32:d7:67:9b:e6:53:a2:c2:09:89:
                    e7:bd:f3:89:8d:5d:01:a0:56:7e:9d:ca:75:4c:1e:
                    e8:c4:2b:be:3a:c3:83:2c:5e:85:71:48:78:f4:f2:
                    12:71:4f:e7:bd:7e:7e:83:f9:82:7b:08:53:f9:da:
                    4e:cf:2f:70:97:dd:06:55:e2:bb:20:2c:db:a1:eb:
                    5a:57:53:7c:68:26:02:4b:03:b7:fc:41:0d:45:f9:
                    68:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8D:74:33:34:6D:B2:F2:58:FF:9E:57:69:25:71:A8:87:3D:AD:D8
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:64:fd:7e:41:2a:07:13:11:d8:3e:e0:24:f0:8e:1d:30:9b:
         00:8e:95:a7:d5:83:49:e9:7b:62:27:bc:16:c2:71:18:a0:3d:
         0f:5e:f0:e8:66:61:55:93:87:0d:b9:de:87:82:15:e4:dc:b5:
         33:b1:f4:42:da:18:bf:17:9e:05:03:1a:3c:2e:98:28:5b:93:
         e4:95:19:37:55:f6:ce:1d:76:97:91:49:cd:c3:22:82:c7:b1:
         26:76:91:15:84:fc:0c:80:af:dd:bd:ad:55:96:25:6b:10:ba:
         ac:52:2c:39:1a:f9:2d:ac:9e:e0:1b:5a:6a:be:63:21:88:32:
         a7:06:07:32:ff:c7:40:57:3a:f3:4b:21:f7:a1:65:de:40:62:
         a4:de:b3:19:6c:de:37:76:47:6f:30:78:3c:83:8f:20:79:90:
         bb:d4:08:6a:5f:22:60:b4:b7:94:04:a3:98:4b:5f:57:63:8e:
         8c:02:8a:73:be:6b:ae:f1:94:78:0c:b7:5d:57:3b:fb:51:5f:
         07:73:a0:df:ac:b9:bb:80:51:71:e9:e0:44:72:ab:27:09:83:
         fe:cb:09:7a:17:d9:f7:c7:a3:90:91:95:45:e5:35:b9:8e:05:
         29:20:1d:fa:68:1b:70:84:f5:be:8d:7e:55:04:9c:1a:d4:71:
         a4:06:9d:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhBQzAxMTAvBgNVBAUTKDc2Njg1N0JBM0Y3QzcyOEI2ODA1MjVBQzQxRkE3Q0Uy
QTFGMDA5MkQwHhcNMjQwNTE3MDcwMjAwWhcNMjQwNTI0MDcwMjAwWjAYMRYwFAYD
VQQDEw02NjQ3MDBlOC04MDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzu0lQ/Gip00iPXozKumbAuwcUSKSF0/yv0VZP9MB6qgGjC6QEviBP8mEgjwG
8u0xlatbbV3kzkLv/8vfBbC7hhNDEr/mXtK3cZDtl1B8lWne0ifemRW0uFS6F7D+
kIOXO0GOiklasaLjVPV1GGsKgFt6iElHa370Fn+OXmNSHglDT/duU8TV/rH9kicv
iLkYiH+uNHz1o/Cs06X61Onucc4s/uEphlknjzLXZ5vmU6LCCYnnvfOJjV0BoFZ+
ncp1TB7oxCu+OsODLF6FcUh49PIScU/nvX5+g/mCewhT+dpOzy9wl90GVeK7ICzb
oetaV1N8aCYCSwO3/EENRfloDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCNdDM0
bbLyWP+eV2klcaiHPa3YMB8GA1UdIwQYMBaAFHZoV7o/fHKLaAUlrEH6fOKh8Akt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDMC9FNEVENTM5NDMx
RDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNvdG9CU1dzUWZwODRxSHdD
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RtaFh1ajk4Y290b0JTV3NRZnA4NHFId0NTMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEFDMC9FNEVENTM5NDMxRDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNv
dG9CU1dzUWZwODRxSHdDUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBzZP1+QSoHExHYPuAk8I4dMJsAjpWn1YNJ6XtiJ7wWwnEYoD0PXvDo
ZmFVk4cNud6HghXk3LUzsfRC2hi/F54FAxo8LpgoW5PklRk3VfbOHXaXkUnNwyKC
x7EmdpEVhPwMgK/dva1VliVrELqsUiw5GvktrJ7gG1pqvmMhiDKnBgcy/8dAVzrz
SyH3oWXeQGKk3rMZbN43dkdvMHg8g48geZC71AhqXyJgtLeUBKOYS19XY46MAopz
vmuu8ZR4DLddVzv7UV8Hc6DfrLm7gFFx6eBEcqsnCYP+ywl6F9n3x6OQkZVF5TW5
jgUpIB36aBtwhPW+jX5VBJwa1HGkBp11
-----END CERTIFICATE-----
Generated at Fri May 17 08:52:47 2024 by rpki-client on console-ams.rpki-client.org