Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File:                     IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier:          9trgLYrg8tXgaKOHy+0CC3VDzt9QJO15VOS8wqPj+dI=
Subject key identifier:   80:8F:AA:F7:E2:10:86:AC:F1:2C:7C:4B:EB:2B:19:14:63:38:C5:3C
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       07E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number:          0735
Signing time:             Fri 22 Nov 2024 21:34:36 +0000
Manifest this update:     Fri 22 Nov 2024 21:34:36 +0000
Manifest next update:     Fri 29 Nov 2024 21:34:36 +0000
Files and hashes:         1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: yacxo2OvceQa8ASnIFPvlK5s1ivFZeiMJGypgRHtwEU=)
                          2: AF96D07C2A4111EBA1B1BB3DC4F9AE02.roa (hash: pfkn3LqtWnlMP8UpcJdjJfLXYLMtDN/Y2mXi1zUzlb8=)
                          3: 3FE22252768411EF90BA3947C4F9AE02.roa (hash: UvlXMYtGIesKGzxoqdXuAlOonlLGDZ03e+bNbwi1gNw=)
                          4: AC0C25102A4111EBA1B1BB3DC4F9AE02.roa (hash: 0NcwENIPa3aVs9LiCMI6VRR24OQw/5jsXsJdB5KTDNI=)
                          5: B2B210782A4111EBA1B1BB3DC4F9AE02.roa (hash: dGroT90n4HpSSarELnS9ycmTSfu76/xv3XLB7XMogw4=)
                          6: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: idP0hZXpOCwYHzliLMTNRucny8Egj/j1Z19W4PS5OLo=)
                          7: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: O7sjrhuAPeNLhdDmU+FUflcsKiJtI32kZjGU1irXu3k=)
                          8: 55493366013C11ED9864F33CC4F9AE02.roa (hash: 0qVhe66/0pu/dhz2TXJhU0ebQFEgZUWbuY+h0HJ2A+s=)
                          9: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: WfXXNMh9zukh9cw/K2USlyOa5g/BvSo7Ld0ZRuzBy8Y=)
                          10: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: aPw4mGEbOxYWWebEcyujbpJrg+fs+P4Y9IEeShpAP4U=)
                          11: 675BCACC2A4311EBBD69BE46C4F9AE02.roa (hash: JeIGfmzM9/H3N+XM4MDMKgzhCuBbnQiu19aZl6n9MCE=)
                          12: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: CYtCw6FS79ggEtILkmIusb4NbSIfDQlOjZ2OPAV35Ns=)
                          13: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: ffQ7EpA6/85wg3fq0OAm4cOsCvC1rwsB4ss5G2Du5RQ=)
                          14: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (hash: 7EvN151Z0cCWehOeO5V1tb71Wpww4FkgmZYoCsNNWOI=)
                          15: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: rc1/VbiY0J3hOQkDA9+0MnO9yaPOrPavDdCaglBQlsk=)
                          16: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: vd9TS3c3hqUpKC0UOT4J7rOC7tn77c4ltY/9JjoO2uw=)
                          17: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: KPBVmLDj2miMk0iCns+BdrVEybJEudko0DHUwlDDU0U=)
                          18: B0AE76722A4111EBA1B1BB3DC4F9AE02.roa (hash: WHUs7uiSLHTiNu3oZOaxNNTVUc68BSjtP5j1yMglu4o=)
                          19: 6B40A6762A4311EBBD69BE46C4F9AE02.roa (hash: fW9hk+7D/BuNY4XpxRynYnBWTpVYrBFFA1dty5jFOzI=)
                          20: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: HW/TwS8KqQJz2heGvjIIgo8ashWGE1qienljQIplUHI=)
                          21: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: ejrqi4bkKTsVyjwG71W1i8Xl36S/BkVt3MW7xKqS5K0=)
                          22: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: yomdqOdjT/I2gnB3kNHRnmOa5KgGzGpapRAlE8R2x9Y=)
                          23: B374E3E62A4111EBA1B1BB3DC4F9AE02.roa (hash: BFnKLQoP86m4lMutC2SByr4F9XQp+mjyL0+W9gC8mZc=)
                          24: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: 8OYf8mEpPucFEvMRW/W78dtixXmjCZ1X5ocLo47rpIk=)
                          25: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: Rebiezn8kMwwNohSbkA4jvGVYfAHkCng1T1V3Qr81Hk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2020 (0x7e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Nov 22 21:34:36 2024 GMT
            Not After : Nov 29 21:34:36 2024 GMT
        Subject: CN=6740f8ec-eba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:20:67:2b:05:08:cc:77:29:df:c0:c9:68:
                    2a:9a:48:1f:3e:3d:c8:98:2f:fa:bf:d4:a0:f2:07:
                    90:aa:6e:50:58:5b:ea:3c:66:d8:e4:8c:fe:ab:cd:
                    d1:dc:1a:49:36:7f:a5:9c:f3:d8:8d:92:cb:51:46:
                    35:82:7a:7c:f9:56:5a:a1:2b:d0:25:a4:b3:86:3d:
                    8c:68:90:0c:12:f1:68:ab:47:1c:02:55:0c:cc:fb:
                    13:3c:33:97:21:b7:0a:53:6c:8e:89:fb:c7:8e:24:
                    cd:71:8e:3f:f4:b6:00:a7:e0:04:ee:41:66:2a:79:
                    22:1e:b2:34:b7:62:a4:e9:39:2b:23:26:eb:4e:86:
                    b4:83:75:fa:7c:95:95:f0:a2:92:7e:18:3d:90:04:
                    e8:95:4f:77:fa:d6:02:d2:e6:1c:3c:29:47:c0:51:
                    97:a8:7a:64:ae:18:26:2e:9c:f2:ea:a9:9d:dd:28:
                    e7:d1:7e:3e:3f:37:87:43:a9:c1:b4:60:45:cc:77:
                    9c:01:b6:6e:31:4f:45:97:8b:bf:e5:b0:92:47:68:
                    4d:1b:d1:b4:76:54:25:4d:f7:1f:3c:15:10:50:22:
                    70:95:83:68:c6:2f:9d:4a:64:72:d5:1d:da:b1:33:
                    ce:e9:48:a0:f7:5b:df:04:16:f0:6e:a1:68:57:ec:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8F:AA:F7:E2:10:86:AC:F1:2C:7C:4B:EB:2B:19:14:63:38:C5:3C
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:42:e8:9b:04:91:72:e3:ca:2a:32:99:aa:08:65:a6:e5:4a:
         a8:d7:2e:75:31:a9:2a:5d:14:2c:21:12:36:e1:66:4b:60:59:
         eb:7a:ee:73:e7:82:34:cb:4c:84:17:e1:d0:9e:f4:ea:99:1e:
         79:ae:41:fe:ab:2c:67:c2:f3:9c:e7:03:cd:42:ae:12:82:56:
         1e:9b:bc:23:91:d7:f1:1e:c4:0f:4a:3d:d4:38:c0:15:fa:f0:
         77:0e:ef:2d:8f:15:e7:49:b4:fc:7d:c4:01:4f:49:29:73:d1:
         02:81:2c:ae:c9:c7:36:fc:d0:81:f0:23:62:8a:ba:52:bc:c2:
         78:d9:eb:88:20:a8:5d:ba:c7:66:f5:67:95:a2:cb:ed:8a:47:
         2f:b6:70:3f:c7:cf:08:31:8c:4a:e6:f9:16:ac:43:bb:64:40:
         a7:39:7a:e9:b0:e4:90:e1:c1:d6:2d:57:a4:58:31:2b:76:68:
         04:5b:1e:c4:ca:4b:fb:c8:75:52:d5:a9:9c:72:7a:8f:ce:51:
         95:97:c5:2a:fa:6c:63:65:3d:29:b4:23:11:76:6a:70:6b:58:
         9a:a0:3f:47:0d:c0:e5:1e:df:95:fb:aa:a0:59:44:b1:df:d1:
         2f:7c:ff:02:dd:77:1f:71:49:a4:8b:fd:2a:86:65:ab:25:ed:
         76:12:e6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org