Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
File:                     03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json)
Hash identifier:          ewvms9AZ5o2s8pK/ptuNtjPWoz5X+6k73uFqDXDXzic=
Subject key identifier:   0E:09:47:4B:AE:91:6F:71:6E:18:A2:6D:3D:03:AB:45:08:D3:C0:0C
Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
Certificate issuer:       /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Certificate serial:       045D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
Manifest number:          0458
Signing time:             Fri 22 Nov 2024 23:44:28 +0000
Manifest this update:     Fri 22 Nov 2024 23:44:28 +0000
Manifest next update:     Fri 29 Nov 2024 23:44:28 +0000
Files and hashes:         1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: 13tlS707FwIiUi+MCIe13misjwzMQ0ls7eDcX3E3b7I=)
                          2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: kAAXrPn3h6fnDZKcj+NU7y43HflGR++IvUSQGCyuZuM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
                          rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
        Validity
            Not Before: Nov 22 23:44:28 2024 GMT
            Not After : Nov 29 23:44:28 2024 GMT
        Subject: CN=6741175c-de87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:fa:a2:84:cc:25:96:21:01:8b:39:24:b4:
                    10:dd:9a:43:9a:34:89:90:f1:83:aa:3b:42:95:16:
                    98:b3:34:6a:fe:ed:a8:ad:35:ee:f5:4c:da:c0:a7:
                    ca:b6:32:c8:65:36:4c:5e:8c:d6:e1:9c:1b:67:88:
                    7d:3c:7c:79:f5:19:9b:f1:ae:7a:f6:7a:2b:b4:0a:
                    d1:18:f3:33:41:28:06:76:0d:54:0d:d2:1a:e7:19:
                    b6:fb:df:45:dd:64:09:1f:66:ca:21:a7:10:39:2d:
                    4c:9a:c7:80:18:16:64:57:5c:00:a0:a6:b3:49:1e:
                    18:4a:a6:4a:4e:e2:62:f2:03:a4:13:86:9a:37:62:
                    a1:61:a1:c8:c1:f0:08:ef:26:ef:b3:d0:ca:b2:e3:
                    be:65:f3:e3:a1:77:f1:46:e1:4f:25:ad:38:ed:38:
                    dd:5f:52:b6:39:11:16:39:00:a6:21:30:c6:1e:b2:
                    c9:6a:8d:2f:0b:f4:37:4f:b5:83:c9:29:04:c6:ef:
                    78:e0:81:e6:c7:e3:a8:6a:6f:f3:2f:b4:b8:37:53:
                    b7:a8:02:8a:65:8a:68:ed:48:0a:7c:61:5b:d4:f7:
                    e8:2e:e8:ff:12:f8:0f:27:bd:89:13:ed:0a:74:18:
                    b1:f4:32:32:48:0e:df:03:1e:dc:e4:86:09:48:09:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:09:47:4B:AE:91:6F:71:6E:18:A2:6D:3D:03:AB:45:08:D3:C0:0C
            X509v3 Authority Key Identifier:
                keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:cf:1e:c2:d2:9a:3f:b3:b1:ba:b6:22:5c:da:33:76:03:cf:
         ed:c8:a7:f5:27:39:fa:50:81:c8:2d:fc:f6:84:25:1a:94:af:
         ef:7e:7a:73:90:dd:af:b4:c5:25:3e:25:fd:3a:21:6c:f9:8c:
         21:08:b4:0f:f0:18:87:c0:63:b0:d1:5e:85:7a:57:05:68:e5:
         25:4f:44:a3:62:a0:3c:7d:23:ac:6d:39:81:eb:0b:83:b7:d4:
         0a:d9:a1:e9:36:0d:16:93:82:7e:1a:5e:83:0e:43:d5:ad:4c:
         4a:7c:e3:58:3c:60:fa:04:4a:28:cb:7c:fe:b4:3f:2b:ab:ea:
         af:1b:0a:4c:7b:08:01:44:89:63:cd:b3:67:8a:37:00:ea:aa:
         0b:58:08:58:08:af:4b:ec:32:3e:7b:b6:ba:fa:2d:fe:26:df:
         cf:30:e8:83:4d:61:48:9e:c2:b7:61:b6:82:cc:89:19:c6:b6:
         77:b2:83:71:e0:55:cd:42:e6:78:31:7e:5d:7a:42:60:4b:45:
         df:f4:ed:46:c3:ac:bc:99:e4:01:57:c8:d8:dd:68:88:e6:fb:
         fa:d7:40:37:a6:a1:d6:36:5f:d9:8e:de:52:94:c8:67:58:aa:
         1e:b1:32:fe:9a:16:0d:88:51:36:da:ae:a2:aa:1f:8b:7c:e6:
         ad:f9:2f:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNDNTAxMTAvBgNVBAUTKEQzN0M5Q0Q2NTBDMDIwQTM1MDBFREM5QjQwQTU0NkE4
NEMzRjI2MEIwHhcNMjQxMTIyMjM0NDI4WhcNMjQxMTI5MjM0NDI4WjAYMRYwFAYD
VQQDEw02NzQxMTc1Yy1kZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxOH6ooTMJZYhAYs5JLQQ3ZpDmjSJkPGDqjtClRaYszRq/u2orTXu9UzawKfK
tjLIZTZMXozW4ZwbZ4h9PHx59Rmb8a569nortArRGPMzQSgGdg1UDdIa5xm2+99F
3WQJH2bKIacQOS1MmseAGBZkV1wAoKazSR4YSqZKTuJi8gOkE4aaN2KhYaHIwfAI
7ybvs9DKsuO+ZfPjoXfxRuFPJa047TjdX1K2OREWOQCmITDGHrLJao0vC/Q3T7WD
ySkExu944IHmx+Ooam/zL7S4N1O3qAKKZYpo7UgKfGFb1PfoLuj/EvgPJ72JE+0K
dBix9DIySA7fAx7c5IYJSAmtKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4JR0uu
kW9xbhiibT0Dq0UI08AMMB8GA1UdIwQYMBaAFNN8nNZQwCCjUA7cm0ClRqhMPyYL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0M1MC80QjkwNjMwMjJD
RDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlLTlFEdHliUUtWR3FFd19K
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzAzeWMxbERBSUtOUUR0eWJRS1ZHcUV3X0pncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0M1MC80QjkwNjMwMjJDRDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlL
TlFEdHliUUtWR3FFd19KZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCczx7C0po/s7G6tiJc2jN2A8/tyKf1Jzn6UIHILfz2hCUalK/vfnpz
kN2vtMUlPiX9OiFs+YwhCLQP8BiHwGOw0V6FelcFaOUlT0SjYqA8fSOsbTmB6wuD
t9QK2aHpNg0Wk4J+Gl6DDkPVrUxKfONYPGD6BEooy3z+tD8rq+qvGwpMewgBRIlj
zbNnijcA6qoLWAhYCK9L7DI+e7a6+i3+Jt/PMOiDTWFInsK3YbaCzIkZxrZ3soNx
4FXNQuZ4MX5dekJgS0Xf9O1Gw6y8meQBV8jY3WiI5vv610A3pqHWNl/Zjt5SlMhn
WKoesTL+mhYNiFE22q6iqh+LfOat+S97
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org