Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
File:                     T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json)
Hash identifier:          7NhElKO65sopbTxPpBjnEY87WAF1IGq9QE030s+hmXE=
Subject key identifier:   B6:FE:E5:F8:5E:0C:09:C7:46:22:0A:D2:4A:EE:17:ED:E0:C6:21:CF
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Certificate issuer:       /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial:       0316
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
Manifest number:          0312
Signing time:             Thu 21 Nov 2024 00:45:16 +0000
Manifest this update:     Thu 21 Nov 2024 00:45:16 +0000
Manifest next update:     Thu 28 Nov 2024 00:45:16 +0000
Files and hashes:         1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: vlU+c4E41EQqQtQTaJJesBjtCXry1aV666R0bvx1GEw=)
                          2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: TdSkmklXk1H4TogCKQu6LKS6MtXDIHAbYnJtQJNtXOk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
                          rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
        Validity
            Not Before: Nov 21 00:45:16 2024 GMT
            Not After : Nov 28 00:45:16 2024 GMT
        Subject: CN=673e829c-db97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:53:e3:7c:bc:a7:80:d8:bb:9e:6d:00:af:
                    d9:8c:45:be:13:a9:d7:81:0e:e9:ec:d4:ef:e7:83:
                    89:b5:d8:a1:e4:81:12:2c:46:06:fe:30:b6:c4:25:
                    ca:33:28:68:76:7f:b3:a9:95:df:f9:7a:be:78:a8:
                    6d:ff:d2:3d:b3:f9:cc:d5:f3:8c:ad:6b:f4:ac:a2:
                    27:7c:1e:32:0a:ce:f3:83:73:33:50:b2:a4:80:f0:
                    db:85:bf:6e:91:35:8e:46:eb:43:77:33:7e:23:1d:
                    c1:3d:d2:23:0c:a7:45:ac:64:17:10:f4:fd:2f:86:
                    6d:03:3b:05:62:c5:9b:16:f6:92:2f:8c:e1:19:75:
                    73:f8:a9:0e:1b:49:62:76:fa:0c:45:c5:07:97:62:
                    ed:ae:8e:6f:05:af:54:fd:65:c5:bb:31:c0:dd:77:
                    6f:f7:35:0f:0e:5a:5d:f5:d0:c9:0f:10:c1:e2:b3:
                    88:42:08:42:9a:5d:1e:bc:a1:d6:aa:54:d0:78:7f:
                    fe:27:37:51:02:fd:d5:eb:71:64:2e:ce:6f:3d:bb:
                    11:ad:c7:1d:b8:71:0d:c0:99:99:87:2b:75:15:da:
                    69:e4:09:77:cc:0f:21:68:a1:69:c6:af:36:e5:06:
                    e2:09:67:e9:fb:38:0f:c1:d4:4b:31:10:a1:2d:90:
                    6f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FE:E5:F8:5E:0C:09:C7:46:22:0A:D2:4A:EE:17:ED:E0:C6:21:CF
            X509v3 Authority Key Identifier:
                keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1b:c5:79:80:03:6b:5d:71:b9:af:b4:2a:33:fd:ab:7a:5a:
         5f:14:36:a7:cb:3f:01:f0:e4:6f:53:60:f5:9f:28:ed:66:b5:
         f9:0e:85:e3:67:42:c4:70:7d:b4:c1:01:06:36:af:01:2b:32:
         8a:78:ce:5e:91:43:8f:31:34:43:69:99:48:99:9f:9a:c6:0b:
         86:cc:e9:b1:3d:c4:67:89:95:2c:2c:8c:76:20:dc:bf:6a:7d:
         8e:78:bc:42:8c:3e:30:aa:a1:08:25:11:10:5d:17:a3:45:89:
         a1:a7:f4:18:9e:d1:13:57:97:62:f8:dd:0a:49:4d:a9:04:98:
         4b:e1:a9:14:b3:4f:ae:ec:4a:c5:94:44:60:7d:c8:56:e5:d2:
         49:15:dc:a4:07:99:87:db:5d:d3:a2:5c:4b:c9:db:00:7e:ca:
         5a:9e:53:77:5e:01:ca:c1:e1:1a:45:fb:ae:84:3c:3f:81:3e:
         5e:4e:18:30:78:f4:13:cc:22:b1:20:86:7f:aa:a8:5f:7a:24:
         30:41:51:d4:a8:ac:cb:eb:22:91:4a:4f:63:3c:da:87:86:df:
         ab:64:61:cb:9f:8f:50:2e:96:10:82:1f:51:be:95:e2:04:57:
         4f:25:ad:f3:a3:dd:e1:d7:0e:23:22:54:99:f8:8b:4b:8f:1c:
         16:f8:67:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG
NTczOEY5MEEwHhcNMjQxMTIxMDA0NTE2WhcNMjQxMTI4MDA0NTE2WjAYMRYwFAYD
VQQDEw02NzNlODI5Yy1kYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1LlT43y8p4DYu55tAK/ZjEW+E6nXgQ7p7NTv54OJtdih5IESLEYG/jC2xCXK
Myhodn+zqZXf+Xq+eKht/9I9s/nM1fOMrWv0rKInfB4yCs7zg3MzULKkgPDbhb9u
kTWORutDdzN+Ix3BPdIjDKdFrGQXEPT9L4ZtAzsFYsWbFvaSL4zhGXVz+KkOG0li
dvoMRcUHl2Ltro5vBa9U/WXFuzHA3Xdv9zUPDlpd9dDJDxDB4rOIQghCml0evKHW
qlTQeH/+JzdRAv3V63FkLs5vPbsRrccduHENwJmZhyt1Fdpp5Al3zA8haKFpxq82
5QbiCWfp+zgPwdRLMRChLZBvYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb+5fhe
DAnHRiIK0kruF+3gxiHPMB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC
MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO
VmwwejhDclRodWIxYzQtUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARG8V5gANrXXG5r7QqM/2relpfFDanyz8B8ORvU2D1nyjtZrX5DoXj
Z0LEcH20wQEGNq8BKzKKeM5ekUOPMTRDaZlImZ+axguGzOmxPcRniZUsLIx2INy/
an2OeLxCjD4wqqEIJREQXRejRYmhp/QYntETV5di+N0KSU2pBJhL4akUs0+u7ErF
lERgfchW5dJJFdykB5mH213TolxLydsAfspanlN3XgHKweEaRfuuhDw/gT5eThgw
ePQTzCKxIIZ/qqhfeiQwQVHUqKzL6yKRSk9jPNqHht+rZGHLn49QLpYQgh9RvpXi
BFdPJa3zo93h1w4jIlSZ+ItLjxwW+Gfo
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:39 2024 by rpki-client on console-ams.rpki-client.org