Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
File:                     Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft (raw, json)
Hash identifier:          hTbnzNTInGt60GC95+jT2iKddiklXu8eQmO2DtIZhqs=
Subject key identifier:   8F:1F:F6:94:BA:66:B4:0B:79:F4:69:39:DA:6D:04:F4:30:FC:E3:61
Authority key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2
Certificate issuer:       /CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
Manifest number:          47
Signing time:             Sun 15 Sep 2024 09:44:43 +0000
Manifest this update:     Sun 15 Sep 2024 09:44:41 +0000
Manifest next update:     Sun 22 Sep 2024 09:44:41 +0000
Files and hashes:         1: Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl (hash: 2Qq6F/CxoDoslKa44vA2UnJvBT8vVtBtic1XPQ+0oVI=)
                          2: 66387A6C087211EF9EDFC673C4F9AE02.roa (hash: pgoxE8TT+V8GBeQeayiCskcI8BF3IYFQIBj4lqGhvug=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl
                          rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2
        Validity
            Not Before: Sep 15 09:44:41 2024 GMT
            Not After : Sep 22 09:44:41 2024 GMT
        Subject: CN=66e6ac8a-af6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fa:59:99:46:8e:2c:32:39:c7:ff:b0:8b:5e:
                    20:39:67:2f:45:84:ec:d5:f0:0c:86:13:41:da:25:
                    ec:08:d1:b3:f9:fe:af:da:0e:a9:03:05:ca:61:26:
                    55:de:18:8d:e1:6a:44:0a:5a:b8:b0:2e:68:81:d3:
                    45:a5:83:d2:aa:38:40:ea:6a:b8:b4:05:2f:4d:f1:
                    d8:cc:c8:5f:f5:e4:ab:f8:cb:ce:37:08:e5:fb:b4:
                    91:1c:91:d8:b7:84:f0:cd:a0:c6:92:60:9f:51:17:
                    c5:de:0d:ba:00:f2:48:06:c2:70:22:f3:4a:a3:2d:
                    a3:17:8e:71:99:43:53:ad:66:b3:56:5f:a9:a0:b5:
                    18:f0:f8:e5:ed:87:2b:a4:5f:29:12:7b:30:2c:79:
                    5c:55:12:2e:7d:ee:7e:e1:87:1e:60:e2:2b:b4:74:
                    09:ad:3f:85:3d:f8:31:09:13:c1:83:ae:6f:81:cd:
                    a0:e5:24:d4:4c:e9:62:00:8f:22:f8:e6:65:ef:56:
                    ad:71:c2:a8:a4:13:07:38:26:a6:f0:76:61:c4:4c:
                    b0:0b:70:08:48:83:69:b4:ac:9c:77:2c:c6:f0:b1:
                    f0:94:f9:a8:87:85:b1:46:37:e2:81:14:1d:98:6e:
                    6c:e2:1a:fc:ca:5a:00:a4:db:40:6f:c5:d8:8c:ae:
                    d9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1F:F6:94:BA:66:B4:0B:79:F4:69:39:DA:6D:04:F4:30:FC:E3:61
            X509v3 Authority Key Identifier:
                keyid:11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:66:3c:e0:60:dd:5e:94:c4:24:71:3f:04:72:bd:d3:de:59:
         c9:66:81:d8:76:e8:09:ac:e7:df:f8:cc:c8:a5:37:44:08:67:
         d6:80:5b:ab:ae:52:8a:86:78:c0:b8:76:82:b5:82:42:7c:fb:
         49:73:88:21:2e:d2:91:dc:65:9e:42:7b:56:f7:f7:6f:e9:c7:
         33:f1:ba:41:a9:92:5c:21:9c:68:20:c0:ea:83:83:b2:72:30:
         8b:aa:34:57:0c:b2:90:71:0e:1c:6c:d0:45:e4:cc:0b:4d:73:
         93:83:f4:95:fb:e9:91:1b:f5:b6:63:79:c8:eb:ff:cc:42:6d:
         b8:08:28:c6:12:f8:00:f7:1f:e2:04:a3:1a:e8:14:94:54:db:
         00:7d:d5:1f:05:03:5b:06:e5:68:df:1a:67:91:3f:72:e6:69:
         a4:5f:b0:f9:5c:7f:ce:bf:b8:66:a8:1b:d7:f8:03:b0:b1:74:
         b1:05:70:e2:3e:16:ca:42:60:a2:86:09:3d:5a:0f:39:00:a8:
         4f:d2:69:1c:88:92:40:9b:f9:4d:1d:b2:cc:2d:dd:80:54:c6:
         be:f4:86:5e:1e:44:f9:72:a1:4c:f4:cb:02:44:ff:de:2f:1e:
         41:be:c5:42:5e:e1:37:5e:02:7a:82:68:60:7e:46:4e:ee:0c:
         53:de:40:e0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
RTM5RjExMC8GA1UEBRMoMTFFNzNGNTJCRjBGNTg2RjJCOUZBNjlFRTJDQTE1RjIx
ODVGNjZDMjAeFw0yNDA5MTUwOTQ0NDFaFw0yNDA5MjIwOTQ0NDFaMBgxFjAUBgNV
BAMTDTY2ZTZhYzhhLWFmNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDf+lmZRo4sMjnH/7CLXiA5Zy9FhOzV8AyGE0HaJewI0bP5/q/aDqkDBcphJlXe
GI3hakQKWriwLmiB00Wlg9KqOEDqari0BS9N8djMyF/15Kv4y843COX7tJEckdi3
hPDNoMaSYJ9RF8XeDboA8kgGwnAi80qjLaMXjnGZQ1OtZrNWX6mgtRjw+OXthyuk
XykSezAseVxVEi597n7hhx5g4iu0dAmtP4U9+DEJE8GDrm+BzaDlJNRM6WIAjyL4
5mXvVq1xwqikEwc4JqbwdmHETLALcAhIg2m0rJx3LMbwsfCU+aiHhbFGN+KBFB2Y
bmziGvzKWgCk20BvxdiMrtn9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjx/2lLpm
tAt59Gk52m0E9DD842EwHwYDVR0jBBgwFoAUEec/Ur8PWG8rn6ae4soV8hhfZsIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFMzlGL0I1MDk1QTIyMDg2
QzExRUZBMDg1MkUxNkM0RjlBRTAyL0VlY19VcjhQV0c4cm42YWU0c29WOGhoZlpz
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRWVjX1VyOFBXRzhybjZhZTRzb1Y4aGhmWnNJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF
MzlGL0I1MDk1QTIyMDg2QzExRUZBMDg1MkUxNkM0RjlBRTAyL0VlY19VcjhQV0c4
cm42YWU0c29WOGhoZlpzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABVmPOBg3V6UxCRxPwRyvdPeWclmgdh26Ams59/4zMilN0QIZ9aAW6uu
UoqGeMC4doK1gkJ8+0lziCEu0pHcZZ5Ce1b392/pxzPxukGpklwhnGggwOqDg7Jy
MIuqNFcMspBxDhxs0EXkzAtNc5OD9JX76ZEb9bZjecjr/8xCbbgIKMYS+AD3H+IE
oxroFJRU2wB91R8FA1sG5WjfGmeRP3LmaaRfsPlcf86/uGaoG9f4A7CxdLEFcOI+
FspCYKKGCT1aDzkAqE/SaRyIkkCb+U0dsswt3YBUxr70hl4eRPlyoUz0ywJE/94v
HkG+xUJe4TdeAnqCaGB+Rk7uDFPeQOA=
-----END CERTIFICATE-----
Generated at Sun Sep 15 10:46:20 2024 by rpki-client on console-ams.rpki-client.org