Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
File:                     eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json)
Hash identifier:          As58y6zmo1ga3T9qWj8igNeFyq09Pd/aUHlCPdjN2Qk=
Subject key identifier:   C4:D8:44:85:4F:1B:B0:4D:65:C2:C8:CE:EC:A6:7C:07:06:AB:01:69
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Certificate issuer:       /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
Manifest number:          14
Signing time:             Thu 21 Nov 2024 06:08:51 +0000
Manifest this update:     Thu 21 Nov 2024 06:08:50 +0000
Manifest next update:     Thu 28 Nov 2024 06:08:50 +0000
Files and hashes:         1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: PRV8Wyl/5tu2Fxqu3gBeElgIvA6JlkQzjzlCxuWbl7g=)
                          2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: X4btbpCoiYoIXbuMOSmCOyUWCj9oTbrBupewiVqB8lU=)
                          3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: aPfjmDHXujlDq60sfxkeUX3+9b02nUsv2TYNf5bZEBw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
                          rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
        Validity
            Not Before: Nov 21 06:08:50 2024 GMT
            Not After : Nov 28 06:08:50 2024 GMT
        Subject: CN=673ece73-d5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:d8:a3:cc:12:81:cc:85:eb:96:3f:3e:f2:
                    e4:d6:89:59:76:b0:5c:1e:66:f8:59:4a:65:98:25:
                    25:8a:46:91:42:a7:5e:a4:79:0f:fa:46:75:18:25:
                    b8:bd:23:16:39:c9:ed:8b:1a:76:8d:46:99:3d:d3:
                    e0:c9:2e:40:b9:3d:82:d3:36:30:53:1c:37:89:38:
                    aa:fd:69:b7:26:c2:7c:cb:e0:ac:1f:8e:c4:e8:9b:
                    b0:48:64:0f:43:bd:6a:49:6f:aa:e5:60:eb:58:87:
                    e0:d6:74:e9:11:54:25:9b:cd:08:89:4f:b1:c9:54:
                    94:15:87:cd:c1:f9:51:af:69:44:f3:f6:bf:8f:6e:
                    d2:33:f9:05:df:eb:5a:61:c7:86:da:13:af:de:97:
                    9d:f5:a5:b9:71:f5:c0:47:b6:89:ec:09:93:98:1f:
                    6b:98:71:7f:04:3d:59:68:04:5a:63:0c:86:9f:72:
                    e7:5f:53:d3:66:ec:b3:a0:79:25:26:10:de:a5:74:
                    e9:7c:75:97:2d:17:b8:00:83:8b:cd:8b:5c:8b:0a:
                    a0:0a:85:77:7b:2b:44:9b:3f:b0:4c:6d:1f:5d:db:
                    ef:b0:29:d1:54:de:48:54:34:21:f8:0c:18:9f:1d:
                    94:95:f3:52:27:7a:3e:eb:8f:1f:a8:cc:1a:82:ef:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D8:44:85:4F:1B:B0:4D:65:C2:C8:CE:EC:A6:7C:07:06:AB:01:69
            X509v3 Authority Key Identifier:
                keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:b6:73:57:89:d8:a1:b7:4f:6a:ff:0c:4d:1c:50:d1:d1:
         4c:da:27:f0:61:c0:6f:9c:bf:c8:1a:f6:da:29:8b:e3:cf:25:
         53:b4:3c:d3:48:21:cb:d4:dd:3e:8c:d7:8f:df:4e:a2:4f:4b:
         63:a6:91:b5:7d:82:3f:cf:64:d6:d4:20:d8:29:77:5e:c5:cb:
         ed:af:45:f2:28:7d:2b:95:01:8e:6b:2b:56:50:29:e3:6b:0b:
         87:82:ae:84:e5:60:6a:1e:4d:e1:7f:66:a2:ca:ad:3d:e3:0a:
         4e:12:bd:e5:73:f1:2b:a8:a8:fe:3c:a7:b9:4a:c9:bc:e3:fc:
         d1:9b:32:b4:82:0d:e3:4a:df:b6:5c:08:8b:88:54:71:4a:f8:
         0f:eb:e4:6b:9f:97:0f:ae:dd:f3:5a:70:d7:09:84:58:56:07:
         88:e8:38:87:ce:95:ab:21:21:d1:c2:a9:31:0f:f7:14:a1:f0:
         a4:d3:0f:7e:a3:82:ec:d2:7b:af:14:67:10:35:1b:76:21:ee:
         e3:c3:1a:1d:c5:3f:2c:e0:a6:2f:6b:7a:0e:d3:d7:fa:24:2b:
         e1:61:34:5a:0e:f5:b9:b6:fb:50:12:95:b4:ed:8a:b6:d1:37:
         82:d6:65:50:9c:05:56:4a:fe:82:03:b4:86:9d:b2:9c:32:d1:
         e6:42:5f:9c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QTU1NDExMC8GA1UEBRMoNzkyMEY4Q0E4NEVDOTEzQzY5QTk4RDU0MzcxMjA5QjQz
NEMzMzE5MTAeFw0yNDExMjEwNjA4NTBaFw0yNDExMjgwNjA4NTBaMBgxFjAUBgNV
BAMTDTY3M2VjZTczLWQ1ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5XNijzBKBzIXrlj8+8uTWiVl2sFweZvhZSmWYJSWKRpFCp16keQ/6RnUYJbi9
IxY5ye2LGnaNRpk90+DJLkC5PYLTNjBTHDeJOKr9abcmwnzL4KwfjsTom7BIZA9D
vWpJb6rlYOtYh+DWdOkRVCWbzQiJT7HJVJQVh83B+VGvaUTz9r+PbtIz+QXf61ph
x4baE6/el531pblx9cBHtonsCZOYH2uYcX8EPVloBFpjDIafcudfU9Nm7LOgeSUm
EN6ldOl8dZctF7gAg4vNi1yLCqAKhXd7K0SbP7BMbR9d2++wKdFU3khUNCH4DBif
HZSV81Inej7rjx+ozBqC7/qJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxNhEhU8b
sE1lwsjO7KZ8BwarAWkwHwYDVR0jBBgwFoAUeSD4yoTskTxpqY1UNxIJtDTDMZEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNTU0Lzc5Rjg5OTgyOTM1
NjExRUZBOEVERUIzM0M0RjlBRTAyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1a
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZVNENHlvVHNrVHhwcVkxVU54SUp0RFRETVpFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB
NTU0Lzc5Rjg5OTgyOTM1NjExRUZBOEVERUIzM0M0RjlBRTAyL2VTRDR5b1Rza1R4
cHFZMVVOeElKdERURE1aRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACI6tnNXidiht09q/wxNHFDR0UzaJ/BhwG+cv8ga9topi+PPJVO0PNNI
IcvU3T6M14/fTqJPS2OmkbV9gj/PZNbUINgpd17Fy+2vRfIofSuVAY5rK1ZQKeNr
C4eCroTlYGoeTeF/ZqLKrT3jCk4SveVz8SuoqP48p7lKybzj/NGbMrSCDeNK37Zc
CIuIVHFK+A/r5Guflw+u3fNacNcJhFhWB4joOIfOlashIdHCqTEP9xSh8KTTD36j
guzSe68UZxA1G3Yh7uPDGh3FPyzgpi9reg7T1/okK+FhNFoO9bm2+1ASlbTtirbR
N4LWZVCcBVZK/oIDtIadspwy0eZCX5w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:02 2024 by rpki-client on console-ams.rpki-client.org