Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File:                     D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier:          50RVGLpRRYdcervc0HkyMQXpDTU8iTcqJkDdEogtpqY=
Subject key identifier:   73:98:25:D0:E9:84:37:3B:6A:05:67:9C:F3:18:BC:1E:5F:E3:17:39
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer:       /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial:       0B5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number:          0B49
Signing time:             Thu 02 May 2024 19:51:09 +0000
Manifest this update:     Thu 02 May 2024 19:51:08 +0000
Manifest next update:     Thu 09 May 2024 19:51:08 +0000
Files and hashes:         1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: z7zyLrv3z6wvnF0MsTr1fF9rmSCGp22i5kNQBSapIlY=)
                          2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: IT8My1igb19zRIqfP1EEqWkr5ITf55rRyu3QYeadVgU=)
                          3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: 5fSkBz/blC9vFV4c7Fw4uMJzBb7PoDNDHFIWI/q+D+k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
                          rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 19:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2910 (0xb5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
        Validity
            Not Before: May  2 19:51:08 2024 GMT
            Not After : May  9 19:51:08 2024 GMT
        Subject: CN=6633eead-5fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:c0:23:81:a8:90:ee:20:13:e7:f8:9d:b1:
                    f3:0a:18:fa:4f:ed:2a:96:9c:d2:c0:19:26:93:87:
                    a8:a9:61:28:63:8d:32:43:d6:b6:ca:ee:67:54:fd:
                    3c:9b:ac:16:a2:e0:6e:aa:0d:fb:5c:21:c3:90:07:
                    07:23:39:7e:54:b4:6e:56:12:e9:cf:24:69:01:13:
                    de:d4:ce:37:0e:b6:f1:6b:a3:e3:67:49:10:28:63:
                    1e:13:c3:84:d7:f0:79:1e:0f:08:95:05:8b:ed:c8:
                    eb:51:19:e2:96:a3:22:95:5b:45:43:ce:ae:79:0c:
                    25:79:9d:6f:5c:d4:cd:c9:d8:ce:7c:28:74:9a:ef:
                    23:c9:2c:51:46:9c:5c:0c:43:d2:b6:77:9f:89:13:
                    74:8f:f7:ac:43:51:93:ea:00:76:69:6b:b1:7a:0f:
                    9e:ef:e8:24:8a:b5:8c:22:8b:84:2d:e5:34:c9:22:
                    61:bd:01:f6:55:3a:64:03:73:64:4f:dd:7b:7e:e4:
                    d0:1a:03:7b:76:d1:3d:ff:e2:fd:0a:16:ad:17:81:
                    cb:5c:e7:ce:25:30:95:96:53:27:ff:8c:73:c4:66:
                    04:06:49:50:11:eb:9d:19:a9:d8:80:aa:55:30:bc:
                    3b:16:ab:1e:02:58:e9:0e:b0:b4:fd:01:b4:17:09:
                    66:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:98:25:D0:E9:84:37:3B:6A:05:67:9C:F3:18:BC:1E:5F:E3:17:39
            X509v3 Authority Key Identifier:
                keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b9:05:2d:b0:34:d1:32:f7:56:d2:6d:5b:aa:d6:c6:e8:e7:
         2d:f5:f2:81:38:0d:85:8b:e7:a9:c0:ea:9a:1e:0e:28:3b:5a:
         f5:61:41:70:5e:58:55:9c:56:5f:12:bc:d4:f2:ef:95:13:bb:
         37:47:6e:fa:18:fa:d6:f8:0d:1d:19:7a:5e:7b:8a:bd:b7:17:
         35:c0:d9:76:7c:f1:80:90:d3:42:42:c7:47:1d:6a:5e:c5:c7:
         d8:d2:4a:48:3d:7a:82:4c:25:06:2f:8d:25:6e:53:28:ef:ae:
         6f:da:e3:f6:74:9f:8a:60:03:b4:e0:88:d1:c0:58:2b:fe:42:
         d8:18:72:29:c0:fb:15:f7:1e:1f:4c:bd:0c:ee:dc:18:f4:7c:
         10:55:be:f1:e8:e6:c7:73:9d:e4:08:82:e6:35:47:a2:10:60:
         41:e7:b6:e7:07:a1:0c:f1:10:7b:a5:26:48:8f:e9:79:9b:0a:
         cf:a9:a8:1b:d8:db:bf:ec:c4:9f:dc:76:47:4b:d2:57:74:ab:
         7c:1c:e4:86:a7:01:f7:42:4f:cf:15:2a:b1:41:88:14:24:c6:
         ac:cc:3b:17:68:aa:ea:13:9b:97:f6:ea:73:cb:cd:5b:fc:d6:
         b5:c4:8a:e4:80:77:be:b5:e8:be:f9:2f:f9:8a:30:e3:c4:78:
         22:09:ec:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0NTUxMTAvBgNVBAUTKDBGQTlFNTMzRTg1QTE4M0MxNDUzMDAwOEE4Qjk2MjNG
ODU2RDVERUIwHhcNMjQwNTAyMTk1MTA4WhcNMjQwNTA5MTk1MTA4WjAYMRYwFAYD
VQQDEw02NjMzZWVhZC01ZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvdrAI4GokO4gE+f4nbHzChj6T+0qlpzSwBkmk4eoqWEoY40yQ9a2yu5nVP08
m6wWouBuqg37XCHDkAcHIzl+VLRuVhLpzyRpARPe1M43Drbxa6PjZ0kQKGMeE8OE
1/B5Hg8IlQWL7cjrURnilqMilVtFQ86ueQwleZ1vXNTNydjOfCh0mu8jySxRRpxc
DEPStnefiRN0j/esQ1GT6gB2aWuxeg+e7+gkirWMIouELeU0ySJhvQH2VTpkA3Nk
T917fuTQGgN7dtE9/+L9ChatF4HLXOfOJTCVllMn/4xzxGYEBklQEeudGanYgKpV
MLw7FqseAljpDrC0/QG0FwlmMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOYJdDp
hDc7agVnnPMYvB5f4xc5MB8GA1UdIwQYMBaAFA+p5TPoWhg8FFMACKi5Yj+FbV3r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQ1NS9BNTVFNEY5NjEx
RjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdEd1VVd0FJcUxsaVA0VnRY
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q2bmxNLWhhR0R3VVV3QUlxTGxpUDRWdFhlcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDQ1NS9BNTVFNEY5NjExRjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdE
d1VVd0FJcUxsaVA0VnRYZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOuQUtsDTRMvdW0m1bqtbG6Oct9fKBOA2Fi+epwOqaHg4oO1r1YUFw
XlhVnFZfErzU8u+VE7s3R276GPrW+A0dGXpee4q9txc1wNl2fPGAkNNCQsdHHWpe
xcfY0kpIPXqCTCUGL40lblMo765v2uP2dJ+KYAO04IjRwFgr/kLYGHIpwPsV9x4f
TL0M7twY9HwQVb7x6ObHc53kCILmNUeiEGBB57bnB6EM8RB7pSZIj+l5mwrPqagb
2Nu/7MSf3HZHS9JXdKt8HOSGpwH3Qk/PFSqxQYgUJMaszDsXaKrqE5uX9upzy81b
/Na1xIrkgHe+tei++S/5ijDjxHgiCezI
-----END CERTIFICATE-----
Generated at Thu May 2 20:50:25 2024 by rpki-client on console-fra.rpki-client.org