Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
File:                     rVa2cYepi6MUCEQFeXvZZW6KyLo.mft (raw, json)
Hash identifier:          C1Zxoda5s6koGjmuZGKyCoh1m7xTlxlcRuUCB27YqWw=
Subject key identifier:   09:8A:59:CF:AC:80:A0:D9:AF:A3:5C:54:5D:34:D6:7E:10:1C:B7:79
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1E65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
Manifest number:          1C11
Signing time:             Fri 22 Nov 2024 08:04:08 +0000
Manifest this update:     Fri 22 Nov 2024 08:04:07 +0000
Manifest next update:     Fri 29 Nov 2024 08:04:07 +0000
Files and hashes:         1: rVa2cYepi6MUCEQFeXvZZW6KyLo.crl (hash: RsAjcKChpwOqEeISzkeUdkCBctwsQGvLto6aw88eB64=)
                          2: D7BBF774498911EF9ECB9967C4F9AE02.roa (hash: N/YQwkyrxbXP+sBQ1DsByIHxBpcto8NTgvmeKLdiGzw=)
                          3: B07E339A257C11E79EE15E3CC4F9AE02.roa (hash: S1wTVe7U18yzyAxSugv98o5psApflxEUWoUWD+4i71s=)
                          4: D3CE622872D911E9B41E5B11C4F9AE02.roa (hash: 6rI+S51uZYy1BuACuwS5kWXoyg6lf5nMEpRvaBuNroY=)
                          5: 4DFBA2EA066011EEA5F59657C4F9AE02.roa (hash: oCS0QFpM9WGeDXVhJLQGO+CnXgJIvqSKqwsoVw4j+c4=)
                          6: 6ACA5114D9A611EDAEF7CC80C4F9AE02.roa (hash: ERGoQtQQyWNAsGtdXg9khjhxWGZ3U+TpTVn8vOUOpRc=)
                          7: BCBD866404D311E9A6452047C4F9AE02.roa (hash: 6U+FYH3uhC5XKNsaJEb/mfz8usRQjC2dGhhGqPAEIkA=)
                          8: 6136E33A07B511EBBBA2521CC4F9AE02.roa (hash: 8Q+OjzZN/ayMTw7B4asPpBGcZxQq5JGAHygNoU7Le9M=)
                          9: 792BA6283AAC11EF93D3E072C4F9AE02.roa (hash: WX5GBpvWxy43Kfv1yhOKm7/zgRf+4wjOBk2NgjKVRX4=)
                          10: 4BB76870066011EEA5F59657C4F9AE02.roa (hash: BlkP1LYtm3vROhN/faPTD29Zg2+t0xJ6pwNyD9TEZQg=)
                          11: 5B2E8848135111EF9CB17D1DC4F9AE02.roa (hash: rNzW808/YFt8lfHV68iZDZ/OStxqULNhPoYhM2Zfw9Y=)
                          12: 83A8C51804CF11E9BA917C34C4F9AE02.roa (hash: zTeGinlhgBvRCY8VLqWEaBOMi/2mlZzeV05y5KjYq4g=)
                          13: 4F2C2040066011EEA5F59657C4F9AE02.roa (hash: lhjk5dsFqap680wNoXTnx9Dur4BBQliXjVLuUUi2pb4=)
                          14: B80AFEB204D311E9A6452047C4F9AE02.roa (hash: lcZBJc0SseZ2msItGbn45fGKCw+QLyWMQGHYhse6IS0=)
                          15: 79FAE7BE5BAC11EF95A95882C4F9AE02.roa (hash: dtWxz4J2XjmayBFzETfnk0M/4ccp6teJLls14KkfCHA=)
                          16: 1B1DEA4A04D511E98BFF354BC4F9AE02.roa (hash: TkNn+MTjqvGvnFe4zWqgI2u8ZNVhGw30Qsbe/rkSamA=)
                          17: 0B989CC8BC6711EAA9856B6AC4F9AE02.roa (hash: 5JWbsLN/dW9xbqfNvNx/Ipznac7jWKsUQzc216E28SI=)
                          18: CBAFF664136B11EFB53F2683C4F9AE02.roa (hash: 7C3EpcIViwZAY4nCzCQCDuQQXNlANXEp+HrUlqwDI+0=)
                          19: 52ABDAEA039D11EF8E96E084C4F9AE02.roa (hash: MzEZo/e2yCoqtrn7oJL68mf+EWYO9suE1RsdjdKFJQ8=)
                          20: ECE5D100BBA411EAB345A780C4F9AE02.roa (hash: bigKPvPIUDwHxONb1Gr8dDYsiNQ0PtvvH9Y2uewhgDg=)
                          21: 52E1349E04D211E9BA47303FC4F9AE02.roa (hash: j5lDrxfBeX2si0djPSCGpgdQ4uiqw+hqr/e7niE8XVQ=)
                          22: 003D986AA88011EFBC843D5CC4F9AE02.roa (hash: 96GHQqwuvqH5K4GM/GSujsjVRZN4yikABtrPvT4rhc4=)
                          23: B9FBA9CE04D311E9A6452047C4F9AE02.roa (hash: rlEGi3xjhJfP2u/ZUHFiWIlVgFz9xogRY/BfK8tfhx4=)
                          24: 4CD2AB2A066011EEA5F59657C4F9AE02.roa (hash: 1/F96Do1ZWp86GNV9DFuCHRPL+Y77dWF42AM+XS1zM0=)
                          25: B33C5F9C05FB11EE9D130335C4F9AE02.roa (hash: fNI06QusL/HQ5dYlBMs9UDIEqjOTE4N+DiowzCmZuiI=)
                          26: E1E1C946E01611ED8385DA62C4F9AE02.roa (hash: o0Ry10/Dwg/gxho42K86zqrhGF78WdELGBJAljFgnsM=)
                          27: 6D4A0AECAAA711EE9614335BC4F9AE02.roa (hash: 7oIA+//D4UsvXgvWc6bf0x5ckX2V4W6yfulU8ujZhtA=)
                          28: C3EFE564C2A311EABB1BA61FC4F9AE02.roa (hash: FoZW+AGU8CXyeV1RdM6UrgzlFyF1dMho749ia7IWur8=)
                          29: B228FE46257C11E79EE15E3CC4F9AE02.roa (hash: gPZrzSM2qFJiDgKYh5xaDFhnq8qXun0G5u3g/ssPKjA=)
                          30: 5233C98A04D211E9BA47303FC4F9AE02.roa (hash: V64V572mDFjUWVtGLtAsBdOHJ3B14FfzspBJ/sNnWww=)
                          31: 84DBC93004CF11E9BA917C34C4F9AE02.roa (hash: zyMk6AWyE6lO87mAudHQsc/HNsX71NVjiloWRnQYhfA=)
                          32: A012C5E0AF7911EA869B4722C4F9AE02.roa (hash: EnrdJ6BB4UUlPJCPrDriY5JkZ6kz6OGJ2NtAj8g8718=)
                          33: F3309B3004D011E994985639C4F9AE02.roa (hash: NSCmZyO6Wz7VpbKV03OOhYeekIbonLkpYtPFZfybQtg=)
                          34: D931AD927E0F11EE97A4761DC4F9AE02.roa (hash: excgv5LuiAIExIayM9ogI84jPZ7chBE+1E++AvNwtig=)
                          35: 36AA48F2D55E11EAB56B562AC4F9AE02.roa (hash: g9KNetV5gZIclIa3Tn5Z//Qo3scBB3j7I2stbX5nfnI=)
                          36: 8278D8E004CF11E9BA917C34C4F9AE02.roa (hash: aizfB1ipwQHn2pfmgojnCTrjx4TiIlWZ3oTA7ibR03Q=)
                          37: F5CC48A804D011E994985639C4F9AE02.roa (hash: VS0VHmkDeDlKunxOHZGj08THbVfcWifqq1DkBVbt3SM=)
                          38: 203A920E9B5511EF93BA272BC4F9AE02.roa (hash: 2cMkxAulRUt+RPZWIL+F0mv8QdjA2rBZuvpPO3wvRlQ=)
                          39: D36286F2D55C11EAA224E026C4F9AE02.roa (hash: tTA+Jj1VE8Mirfwxda9PRkkRRhfGQ+BLffao2HDxah4=)
                          40: 50550748066011EEA5F59657C4F9AE02.roa (hash: lTv1K6i1/5+D8bjoEZFgJKtEtbQMReGPUUpdBqUUWmI=)
                          41: 09E2992EC11711EA98A6A253C4F9AE02.roa (hash: yfr/pkuZjQYrKaaSgTMh31gFUmAyCI82/pd9IQUIs3M=)
                          42: BD58F50404D311E9A6452047C4F9AE02.roa (hash: TWEksEuTvHoK1jEg5swQTgTY9Ej5RxanBDxFGSVO0Rk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7781 (0x1e65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Nov 22 08:04:07 2024 GMT
            Not After : Nov 29 08:04:07 2024 GMT
        Subject: CN=67403af7-a6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:65:4b:61:d3:47:7e:dd:21:c5:10:c2:ab:
                    eb:83:96:b3:c3:49:6a:e2:28:f1:86:c3:f5:db:d8:
                    b5:ac:9b:5d:15:fe:d1:36:c4:04:13:44:3c:97:ed:
                    14:70:09:42:f4:45:f9:85:be:f1:d5:71:19:1d:cc:
                    9f:80:48:5a:6e:55:7e:ea:60:1a:db:99:c2:4d:54:
                    15:c5:44:da:4b:3e:45:ef:a8:dc:fd:c7:35:52:96:
                    a8:39:6e:48:fc:6b:b0:80:25:57:b4:17:29:47:36:
                    e7:d9:62:1d:30:d6:f6:39:c7:bb:da:8e:85:63:38:
                    e9:46:1a:23:32:6a:16:c3:69:4b:2c:6b:4b:46:69:
                    94:71:be:08:4a:b0:a8:b6:99:9e:49:8a:9e:11:89:
                    d8:db:18:71:3a:62:8a:29:f0:b9:a1:04:49:f1:b8:
                    fb:bd:39:bb:0c:9a:47:ff:a2:86:04:30:95:7b:57:
                    e8:3c:a1:82:5a:09:17:af:25:b8:0e:61:13:4b:b5:
                    e6:94:c8:e2:6d:fa:98:8b:12:92:8a:6f:3a:f0:52:
                    10:12:70:31:90:6b:9b:74:0b:1c:68:8c:5e:c6:11:
                    9e:c0:d2:2b:46:36:fd:71:0a:d8:3b:a2:36:bc:1e:
                    94:a2:3e:f2:9a:f2:0f:21:f0:ef:f1:b9:b9:b9:39:
                    31:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8A:59:CF:AC:80:A0:D9:AF:A3:5C:54:5D:34:D6:7E:10:1C:B7:79
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a0:56:43:31:77:63:cd:1c:1f:25:47:1f:bf:db:17:f6:f0:
         28:b4:18:40:6b:74:c2:ef:16:e5:7b:8a:8f:41:a4:24:48:fe:
         f5:0d:0b:c6:9f:34:44:8a:63:04:33:01:bb:5d:33:45:b6:1e:
         62:13:12:fe:1d:2a:6b:42:91:00:fe:0b:17:c2:f3:ba:98:87:
         61:b5:a2:c4:a2:23:ec:f9:10:bb:0f:23:d8:1f:26:6f:f8:80:
         eb:c2:ff:6d:e3:92:cc:1f:65:0e:d9:75:ed:32:b4:63:6a:7a:
         e7:e0:5e:00:d3:5c:24:e4:c5:67:54:dc:19:a7:49:0a:04:e3:
         25:af:8a:53:75:f2:97:07:7b:61:e9:77:14:e1:9b:d4:fa:e7:
         dc:93:8e:0a:88:8e:e7:5f:26:e4:90:3d:6d:b6:68:5b:6e:fb:
         e3:ba:b6:25:54:5d:04:a2:bf:34:1a:88:0e:b7:46:fc:45:c3:
         7e:a2:0b:d0:37:21:26:52:d3:d7:7e:31:6f:71:ec:a6:fc:d2:
         92:3a:96:bf:90:eb:1a:46:84:25:50:47:ad:46:75:d3:a4:be:
         b1:25:60:ee:3c:eb:cb:f3:b2:8e:73:5c:04:d1:88:ff:a1:c3:
         e6:cd:4e:36:aa:aa:cf:ba:7a:00:9a:40:a7:79:2f:25:dc:a7:
         3d:eb:66:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----