Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
File:                     DvqgEPOwbVMhkO827SAodPggF8k.mft (raw, json)
Hash identifier:          hkibwggkFQkT3RhZV4RSjMGhYknL9xCWWsUIeqlogN0=
Subject key identifier:   C7:E4:52:6B:F2:C4:A1:F1:48:A3:F4:38:94:E9:3A:8F:0E:91:1C:22
Authority key identifier: 0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9
Certificate issuer:       /CN=A9167F0C/serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9
Certificate serial:       0E7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
Manifest number:          17A5
Signing time:             Sun 26 May 2024 18:25:45 +0000
Manifest this update:     Sun 26 May 2024 18:25:44 +0000
Manifest next update:     Sun 02 Jun 2024 18:25:44 +0000
Files and hashes:         1: DvqgEPOwbVMhkO827SAodPggF8k.crl (hash: f2zEEW1jXL3BqJ569V7PKoIjrVlFQzyCvt4WqIJqKz4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl
                          rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 18:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3706 (0xe7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F0C/serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9
        Validity
            Not Before: May 26 18:25:44 2024 GMT
            Not After : Jun  2 18:25:44 2024 GMT
        Subject: CN=66537ea9-9c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:7b:67:9e:77:73:61:b5:2e:02:e9:78:13:
                    37:b9:db:49:c7:21:fc:de:aa:29:1c:ec:2e:c6:45:
                    3f:dc:48:c2:ba:44:a3:46:a2:ab:b2:d4:09:e9:2c:
                    3e:49:2c:64:91:08:90:37:88:85:bc:12:4e:65:58:
                    b7:b1:95:c8:66:95:9d:eb:97:6a:8b:72:8b:b9:e3:
                    84:2c:bf:0b:24:e2:fa:57:37:df:45:43:a1:42:21:
                    20:f6:99:97:78:b6:34:1f:ed:b2:51:de:bf:59:d1:
                    4d:68:dc:b5:d7:15:ec:ac:6d:de:63:dd:f4:6c:ef:
                    d9:30:e6:5d:81:31:e1:69:c9:d8:95:c1:18:59:88:
                    db:a2:f4:79:f5:c5:6d:65:47:0c:6a:22:dd:86:d3:
                    fe:bd:61:ae:7c:f6:ed:a7:e6:92:c6:8d:fd:a0:c6:
                    ad:e2:56:54:a3:48:00:21:68:1a:5a:69:6c:7f:6a:
                    d0:bd:ef:fc:77:17:17:f2:b5:22:07:7a:82:d8:69:
                    1c:66:af:68:34:29:b8:01:05:39:25:33:35:31:cf:
                    42:f3:fa:f3:b9:b4:d5:a1:71:a0:12:d4:c5:ab:e8:
                    a8:1d:a4:7d:61:92:e0:5e:30:52:96:f9:24:ef:a0:
                    98:12:f2:fc:7e:a4:64:7d:ae:29:55:89:4d:6f:2d:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E4:52:6B:F2:C4:A1:F1:48:A3:F4:38:94:E9:3A:8F:0E:91:1C:22
            X509v3 Authority Key Identifier:
                keyid:0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c2:74:68:50:96:82:b9:05:ff:b5:f1:51:42:03:eb:18:23:
         f9:e6:14:d5:5f:00:d2:b6:9b:fd:1d:b7:c4:5e:cc:fc:3e:0b:
         a6:63:9a:da:b8:31:9e:ef:8a:b4:f3:d5:09:27:4c:76:c8:48:
         b7:e4:8e:c8:17:d8:34:69:eb:7b:5f:a6:a8:1f:7d:c7:92:da:
         45:36:1b:84:3e:7b:64:2b:d1:b9:ab:07:9f:61:28:0d:80:33:
         2b:cb:76:68:fe:6e:c1:c9:5d:a7:9f:36:ec:81:8d:f8:91:7c:
         ca:18:30:9d:59:0e:7a:78:90:b8:5d:cb:d8:13:ae:e0:bd:41:
         70:82:35:0c:61:e5:bb:8e:7c:68:e6:3a:e3:7e:44:ae:82:02:
         56:fb:b2:f4:f4:49:17:d3:02:da:59:0f:6c:cc:06:4d:e2:89:
         22:92:59:09:a2:4e:76:a4:70:c7:86:ff:08:56:db:b1:c9:43:
         7d:bd:4b:f0:fb:3f:d5:ba:73:7d:91:db:c0:af:35:ac:04:fc:
         c4:e8:fa:39:a1:91:bf:e6:68:e8:40:0e:84:54:7e:63:b6:cd:
         8d:1a:e2:b5:3b:a2:70:e8:85:35:d2:a0:cc:1c:14:18:98:7e:
         77:af:ea:36:b5:fa:a9:1d:fc:fb:d5:13:72:f4:8e:34:78:3b:
         5b:b2:90:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdGMEMxMTAvBgNVBAUTKDBFRkFBMDEwRjNCMDZENTMyMTkwRUYzNkVEMjAyODc0
RjgyMDE3QzkwHhcNMjQwNTI2MTgyNTQ0WhcNMjQwNjAyMTgyNTQ0WjAYMRYwFAYD
VQQDEw02NjUzN2VhOS05YzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ON7Z553c2G1LgLpeBM3udtJxyH83qopHOwuxkU/3EjCukSjRqKrstQJ6Sw+
SSxkkQiQN4iFvBJOZVi3sZXIZpWd65dqi3KLueOELL8LJOL6VzffRUOhQiEg9pmX
eLY0H+2yUd6/WdFNaNy11xXsrG3eY930bO/ZMOZdgTHhacnYlcEYWYjbovR59cVt
ZUcMaiLdhtP+vWGufPbtp+aSxo39oMat4lZUo0gAIWgaWmlsf2rQve/8dxcX8rUi
B3qC2GkcZq9oNCm4AQU5JTM1Mc9C8/rzubTVoXGgEtTFq+ioHaR9YZLgXjBSlvkk
76CYEvL8fqRkfa4pVYlNby1g5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfkUmvy
xKHxSKP0OJTpOo8OkRwiMB8GA1UdIwQYMBaAFA76oBDzsG1TIZDvNu0gKHT4IBfJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw
QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9EdnFnRVBPd2JWTWhrTzgyN1NBb2RQZ2dG
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R2cWdFUE93YlZNaGtPODI3U0FvZFBnZ0Y4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9EdnFnRVBPd2JW
TWhrTzgyN1NBb2RQZ2dGOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwwnRoUJaCuQX/tfFRQgPrGCP55hTVXwDStpv9HbfEXsz8PgumY5ra
uDGe74q089UJJ0x2yEi35I7IF9g0aet7X6aoH33HktpFNhuEPntkK9G5qwefYSgN
gDMry3Zo/m7ByV2nnzbsgY34kXzKGDCdWQ56eJC4XcvYE67gvUFwgjUMYeW7jnxo
5jrjfkSuggJW+7L09EkX0wLaWQ9szAZN4okiklkJok52pHDHhv8IVtuxyUN9vUvw
+z/VunN9kdvArzWsBPzE6Po5oZG/5mjoQA6EVH5jts2NGuK1O6Jw6IU10qDMHBQY
mH53r+o2tfqpHfz71RNy9I40eDtbspAt
-----END CERTIFICATE-----
Generated at Sun May 26 23:05:30 2024 by rpki-client on console-ams.rpki-client.org