Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
File:                     6zifszmzkI1UmmU5DJLhX533xUs.mft (raw, json)
Hash identifier:          hDkP8LOZPxRezvTFfDe/6XWYVq6oAuXnHVIE0IjCC3g=
Subject key identifier:   92:60:8D:EC:C2:34:C3:B1:04:BE:70:CB:FA:DB:53:D4:40:72:CF:E9
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       358B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
Manifest number:          34F3
Signing time:             Wed 08 May 2024 14:23:31 +0000
Manifest this update:     Wed 08 May 2024 14:23:30 +0000
Manifest next update:     Wed 15 May 2024 14:23:30 +0000
Files and hashes:         1: 6zifszmzkI1UmmU5DJLhX533xUs.crl (hash: Nrw0WaejgXV1L0NBILMZfy3qgAdsHlAQ1pNnJPOYLno=)
                          2: AF84D20EF23F11EE9CC9C846C4F9AE02.roa (hash: 0xI5gL3jIxGMq2UvCaNN/Cl0K0waEpwysipvLE53HEE=)
                          3: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (hash: e4xc2DLMq62834i4X3W5n1/G6cQqJsCi+PG239z+PgY=)
                          4: FAF6D732CD3811EDBD37B674C4F9AE02.roa (hash: 2lstfvkdbirtpx32Ne6yPfQ/bA8CgvJ4JDf+5oHKtEA=)
                          5: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (hash: we93FrU41ilQVifSpk7RSN4XUbpm8hOan1YZqsaKAsA=)
                          6: 2622AA12010511EE8C750D39C4F9AE02.roa (hash: ZafbXQw/KeLgwoRG3otAl32IvKF0VAStsoj9l5ag9jM=)
                          7: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (hash: z70dBdS9kIJlFC1osrUz56TwNaqNCALx0wTKkKuQOzQ=)
                          8: 26C39BB6010511EE8C750D39C4F9AE02.roa (hash: DjvQLdiIzOY0nVw9IlD1GUoeV8ePxWoZz2SsmCMWqkI=)
                          9: CAD5365E090C11EBA5412411C4F9AE02.roa (hash: TmPkOodhEZ/Y8YXZ7uegwsvEeL5kCpK7yN5l90nhBoc=)
                          10: 4D4EE370408A11EE91A09746C4F9AE02.roa (hash: UTYjHSz5SE59HBE6AfuL7f7eaZUIfrBMXMIusaSKFx0=)
                          11: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (hash: 0kKC02hN97eSgBftINbPMU1wDENB6WM/Mjua6yq88jE=)
                          12: 4E211A5C408A11EE91A09746C4F9AE02.roa (hash: j0ZJiNEdhad5gcAQx0kFDN85kG9IdmI9c0llM8kl948=)
                          13: 02414522C98A11EBAF4F9280C4F9AE02.roa (hash: FQZpx5gb+jZtMXBdIkYb+15Q0ogDwrJuLsoipey0EDQ=)
                          14: 75B648D801D411EFB2DE3D3EC4F9AE02.roa (hash: 1aPoLo+2OwxehEUkL1IGiPtZfAh5XCicv9eCtrdXdiA=)
                          15: 862D18003A1011EDB5225E73C4F9AE02.roa (hash: bKNpA+6RQ0GT2A+sq3T0s0Oiepx9w2ya8TScMPEFe9I=)
                          16: D34236BE7D0511EEB381D02CC4F9AE02.roa (hash: NZHysE8nVCbq7fbvHXB0K2e7+2zAZI6Mnwfdz06Ko40=)
                          17: 46186F4EC6E711EDA2FCBA34C4F9AE02.roa (hash: FjtuCaE+m8d6Jz7C5JWJgYPZl4/UQZZvDNJFxwt0oyY=)
                          18: A59A5B6641F611ECB1465157C4F9AE02.roa (hash: MTbReXx3jRGZ4W965+WGXV3vut0negAVm5usDafmUUo=)
                          19: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (hash: Afzfu7RMonv5lZts2gX3BGISubiNL2unW/sXbDGedTs=)
                          20: BF6649687AC811EDAE44E656C4F9AE02.roa (hash: dByQ8g0jFG1D2M/qi7F7t4/rrCn3xAzdE2/PRavCCQ8=)
                          21: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (hash: XGFULdG/oDt3pkxbthyADyYskJpcdg8ccGyTK9Ua2Ac=)
                          22: 76FA132A8B0511EC993E2B20C4F9AE02.roa (hash: Qbs6NE0IQDt/w5FmgTv8sF019vojieajZ5lVwx08UnA=)
                          23: 000724C6F7D511EE8C03CA65C4F9AE02.roa (hash: qRm7sLi+ft5KW8Py8mk5/RGIGmgNqW682TRZrJCWKEU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13707 (0x358b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: May  8 14:23:30 2024 GMT
            Not After : May 15 14:23:30 2024 GMT
        Subject: CN=663b8ae3-5fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:99:46:90:c0:d9:57:57:a8:24:f4:eb:7f:
                    8e:16:eb:62:8f:62:66:0f:3c:9c:7f:de:10:1d:40:
                    be:9d:7d:3c:8c:a4:2b:f0:d4:a1:b7:ad:da:ec:cd:
                    53:24:15:12:c7:ed:98:df:83:1e:f9:bc:8f:dd:7f:
                    5f:ae:2d:b8:69:d7:aa:c4:cf:62:47:e7:e2:4a:c4:
                    08:69:4f:7a:5c:4d:38:7c:5a:4e:58:73:07:e7:73:
                    f1:3d:36:93:0b:14:92:34:ff:22:7c:55:40:36:42:
                    37:96:6b:b6:3d:e9:61:4f:b2:75:74:ce:57:a5:8a:
                    43:96:77:e7:78:7a:21:88:82:94:7e:af:c7:a4:eb:
                    40:ce:1f:4b:e6:c3:28:bd:de:4c:57:63:75:54:a0:
                    13:3d:82:d2:79:0b:dc:72:c1:68:b0:51:d9:54:2f:
                    55:d3:7d:19:0b:af:8f:82:06:a6:8a:b8:a0:86:b3:
                    97:44:2d:20:d5:94:84:eb:81:86:43:6e:f2:5b:36:
                    1c:ba:aa:66:e3:f8:e6:0d:ae:a4:a0:b4:16:e7:a0:
                    80:fa:9d:97:d3:b7:d4:d7:5c:21:78:66:c7:26:c5:
                    2d:62:2a:52:40:0d:47:4c:d9:3e:b1:ca:2b:c2:c9:
                    56:97:0a:eb:fc:d0:e8:f3:39:e9:33:12:84:46:c1:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:60:8D:EC:C2:34:C3:B1:04:BE:70:CB:FA:DB:53:D4:40:72:CF:E9
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:97:72:be:a9:df:3a:1f:9b:56:67:cd:14:e6:2e:76:29:64:
         47:7d:15:f6:6e:64:3d:65:60:0c:11:c9:6d:a5:00:3b:48:e7:
         43:3c:4f:28:16:1e:79:df:b8:55:24:46:47:94:61:85:62:db:
         9c:48:5c:68:3c:fb:ea:17:07:50:18:4c:0a:70:fb:8c:c3:08:
         88:ff:6b:fa:26:35:03:b9:65:4f:3d:2f:90:b1:10:1e:ec:a6:
         92:49:cc:7b:c5:dc:72:46:26:81:fb:5c:e4:35:94:a2:e5:b7:
         9f:99:ba:d9:a1:2b:b1:d6:a2:1e:af:50:b1:f2:9d:19:5d:fd:
         af:ab:7f:b9:9e:50:7c:97:87:9b:6f:2b:75:f4:0f:bf:07:23:
         6d:5f:22:88:41:be:4a:6e:da:c0:2b:4a:9c:f4:db:7a:74:c8:
         56:38:5d:fc:d6:1a:0c:a5:81:69:97:d9:03:99:e6:4d:b5:22:
         4a:46:ca:ce:3f:99:26:fb:6a:60:23:8d:1a:c5:65:41:c6:14:
         ea:94:2b:8f:b7:5b:fa:c4:ac:a7:5f:1f:f6:dc:5a:f7:d9:63:
         b6:42:e2:37:75:2d:cf:10:8d:fa:0e:0d:8a:fd:31:59:52:12:
         a6:50:e8:20:fb:76:f2:4b:9f:1f:dc:17:c0:9c:41:3e:2f:c7:
         26:a6:3b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:19:07 2024 by rpki-client on console-fra.rpki-client.org