Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
File:                     967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json)
Hash identifier:          zlvurVEk+DCTdga2k+6ZhjzcuDwgY5RxkW1UC57sXEQ=
Subject key identifier:   42:65:3F:28:2E:39:C1:82:6E:72:92:B7:84:2E:6F:E6:6A:85:2B:4D
Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
Certificate issuer:       /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
Manifest number:          010D
Signing time:             Thu 21 Nov 2024 03:13:12 +0000
Manifest this update:     Thu 21 Nov 2024 03:13:11 +0000
Manifest next update:     Thu 28 Nov 2024 03:13:11 +0000
Files and hashes:         1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: b8U1TncURG41wZfcO+O7ASXkpw7Zh4YJNNTMuD5C230=)
                          2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: NdGIPH8f8wkgYW6zcP9LxqBI8GpzouxLlN3sIemW9iA=)
                          3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: cy1abmbl+JqrinSrVyT95t2qjBKaNUF64uwPHXi8Mu8=)
                          4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: J7JqSqFB0utzju3agkbPPIteMCf05VWU5tDxkvd5OXY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
                          rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
        Validity
            Not Before: Nov 21 03:13:11 2024 GMT
            Not After : Nov 28 03:13:11 2024 GMT
        Subject: CN=673ea547-9efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:66:c5:1c:07:2d:fe:b8:ea:f2:c4:ec:f9:
                    b0:5a:69:46:94:69:20:1b:70:49:4e:c7:1b:3b:75:
                    51:6a:b0:8a:b1:54:90:a4:af:11:0b:66:c4:66:f0:
                    f1:01:8e:b1:7a:a4:41:ce:c9:74:eb:65:c2:47:50:
                    0f:80:2d:da:2c:bc:7e:57:26:3e:74:18:27:20:06:
                    68:af:a1:4a:ed:f7:50:11:2c:2c:c9:b0:32:4a:53:
                    ea:b8:e7:f3:69:29:44:81:6a:cf:1c:ee:0c:c1:dc:
                    92:eb:93:45:25:6e:6c:69:81:95:ec:89:d3:bf:bd:
                    38:d5:7c:27:4d:08:a4:f1:c0:f2:7d:c9:d5:0d:08:
                    85:b7:bf:9d:7b:43:66:67:33:06:8d:7a:a4:b6:51:
                    a1:65:fe:42:46:86:3a:2e:6d:3f:ce:31:64:cd:38:
                    2b:85:d5:cb:0b:d4:df:16:b2:5d:b1:c2:a7:c0:0a:
                    64:3c:9b:be:c4:36:12:57:f1:03:b7:ac:48:67:53:
                    b6:c6:10:52:2c:c7:89:ab:b9:87:5e:4e:cf:cd:d4:
                    83:64:4c:e1:5c:4b:a2:83:3c:34:32:62:32:f3:bc:
                    60:b8:b6:90:03:4f:19:c0:c2:7e:c0:0d:07:f5:8e:
                    7e:ef:45:d5:dd:24:cc:28:62:bc:fa:4e:04:62:46:
                    1a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:65:3F:28:2E:39:C1:82:6E:72:92:B7:84:2E:6F:E6:6A:85:2B:4D
            X509v3 Authority Key Identifier:
                keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:73:46:36:f7:1c:ec:9e:1a:fc:2e:c4:e5:aa:b6:ee:ad:4f:
         07:f8:06:53:ed:9c:95:a8:79:56:04:bd:12:54:2e:ee:15:bb:
         92:90:4c:25:bf:0b:db:cf:30:7c:15:f9:13:bf:b8:ed:69:bf:
         1f:9a:b1:df:77:bf:65:e2:2f:a1:3a:4b:ae:0e:7a:d1:28:c6:
         7c:95:20:6a:5e:62:98:9a:2c:31:10:56:2e:02:b0:ee:ac:e4:
         42:f9:e8:c2:0b:32:3e:17:59:10:37:64:bd:28:d6:71:4e:f0:
         c7:c0:83:22:f8:bb:1a:c8:d4:13:7b:f4:e1:4c:d7:a2:36:a7:
         d0:44:84:77:a3:26:c3:ab:ec:cb:d1:fe:99:85:02:04:ae:24:
         cd:f7:52:db:7a:74:1e:a4:0f:6d:c0:97:da:7d:37:10:8d:7c:
         4c:af:c3:51:80:0b:77:f7:f7:ff:97:f7:13:f5:2f:f5:f2:3f:
         b4:cc:d7:dd:18:7b:35:77:a4:f2:84:16:da:95:59:b8:c6:9d:
         a3:99:1a:3d:d8:36:d9:7a:35:34:1b:6f:bd:48:26:0d:a3:bb:
         f1:49:65:d9:33:6d:54:05:d3:c1:10:79:fb:c3:17:de:27:1c:
         01:4e:a0:f7:39:22:bf:f4:90:70:2d:13:c3:99:cc:a3:2d:cf:
         d4:47:bf:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQwQUMxMTAvBgNVBAUTKEY3QUVENTg3NTExMkNDRkIyMDhFNzE4MjQ3QjFFNDlC
QUFGRkI4NjUwHhcNMjQxMTIxMDMxMzExWhcNMjQxMTI4MDMxMzExWjAYMRYwFAYD
VQQDEw02NzNlYTU0Ny05ZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA36xmxRwHLf646vLE7PmwWmlGlGkgG3BJTscbO3VRarCKsVSQpK8RC2bEZvDx
AY6xeqRBzsl062XCR1APgC3aLLx+VyY+dBgnIAZor6FK7fdQESwsybAySlPquOfz
aSlEgWrPHO4MwdyS65NFJW5saYGV7InTv7041XwnTQik8cDyfcnVDQiFt7+de0Nm
ZzMGjXqktlGhZf5CRoY6Lm0/zjFkzTgrhdXLC9TfFrJdscKnwApkPJu+xDYSV/ED
t6xIZ1O2xhBSLMeJq7mHXk7PzdSDZEzhXEuigzw0MmIy87xguLaQA08ZwMJ+wA0H
9Y5+70XV3STMKGK8+k4EYkYacQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJlPygu
OcGCbnKSt4Qub+ZqhStNMB8GA1UdIwQYMBaAFPeu1YdREsz7II5xgkex5Juq/7hl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy9BMjlBQTJEODE1
MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQc2dqbkdDUjdIa202cl91
R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk2N1ZoMUVTelBzZ2puR0NSN0hrbTZyX3VHVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDBBQy9BMjlBQTJEODE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQ
c2dqbkdDUjdIa202cl91R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDjc0Y29xzsnhr8LsTlqrburU8H+AZT7ZyVqHlWBL0SVC7uFbuSkEwl
vwvbzzB8FfkTv7jtab8fmrHfd79l4i+hOkuuDnrRKMZ8lSBqXmKYmiwxEFYuArDu
rORC+ejCCzI+F1kQN2S9KNZxTvDHwIMi+LsayNQTe/ThTNeiNqfQRIR3oybDq+zL
0f6ZhQIEriTN91LbenQepA9twJfafTcQjXxMr8NRgAt39/f/l/cT9S/18j+0zNfd
GHs1d6TyhBbalVm4xp2jmRo92DbZejU0G2+9SCYNo7vxSWXZM21UBdPBEHn7wxfe
JxwBTqD3OSK/9JBwLRPDmcyjLc/UR7/3
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:05 2024 by rpki-client on console-ams.rpki-client.org