Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
File:                     5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json)
Hash identifier:          GmmdrhB63p46eNGr+uXAgsRXCE1ipmnPgkYWwbREhHY=
Subject key identifier:   D3:EF:5C:EF:66:03:96:D5:09:1E:8F:6C:3B:97:D7:89:F7:A5:53:31
Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
Certificate issuer:       /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Certificate serial:       02DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
Manifest number:          02C3
Signing time:             Tue 07 May 2024 03:32:55 +0000
Manifest this update:     Tue 07 May 2024 03:32:55 +0000
Manifest next update:     Tue 14 May 2024 03:32:55 +0000
Files and hashes:         1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: SZevUJx+gBPuNJB267sP+7O4nhx4jnO1OsGgF1ntSDY=)
                          2: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: SMBY1LukYFigMF8a28TCWL5pjJYfobly4CC1lr0o8t4=)
                          3: C8165660822F11EEABA7D533C4F9AE02.roa (hash: U8OEyZFjA9I1IQBUUkrhnUMwPDhM8kTGhjLTtv1sIUM=)
                          4: D09E7C3CAC2911EC9588CD3DC4F9AE02.roa (hash: OBJODsj4HUWO2lOwNFZHPGaGKNAfWbQECvTCk39fuLY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
                          rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 03:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734 (0x2de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
        Validity
            Not Before: May  7 03:32:55 2024 GMT
            Not After : May 14 03:32:55 2024 GMT
        Subject: CN=6639a0e7-ee5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:ac:44:17:0b:1c:97:c7:7d:8c:df:46:64:
                    eb:9f:eb:c8:8f:43:2b:ed:31:68:b9:6a:ec:ec:43:
                    6d:cc:62:f9:ae:7c:35:e2:46:3f:d2:1a:af:d1:50:
                    bb:f5:a9:6e:6f:e7:5a:0a:df:a2:2c:aa:f6:51:74:
                    2a:dc:33:4e:43:13:fe:2a:ed:b3:d0:fa:4f:43:eb:
                    18:4c:ab:95:1a:3e:d7:1f:f8:c6:b5:17:e4:8c:61:
                    af:ce:a4:8d:e5:db:79:2b:2b:88:f7:92:42:02:8c:
                    6d:4a:15:15:33:40:41:ed:fd:ca:3c:bc:b9:29:73:
                    f5:f9:02:3b:29:c1:fb:40:f5:ae:85:87:92:d3:62:
                    88:22:6a:7d:67:fb:1e:e9:0d:99:36:d9:a0:fc:ff:
                    67:2a:e3:c7:58:27:d8:c6:bc:b2:8d:5d:37:d7:1d:
                    ac:2e:13:54:78:03:62:80:b6:64:fd:39:b4:2b:35:
                    22:aa:ee:ef:1e:9c:35:c0:8f:c1:c8:24:5b:2f:4b:
                    96:3f:3b:cf:a8:bd:38:9f:d9:03:8e:1d:cc:e9:a4:
                    c6:54:5f:5a:6d:b5:32:40:23:ce:e3:35:11:18:77:
                    74:8a:6d:83:19:e2:7c:c9:92:24:90:ca:ce:96:15:
                    4a:ef:b4:87:e5:97:38:1c:4c:37:98:11:15:65:0a:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EF:5C:EF:66:03:96:D5:09:1E:8F:6C:3B:97:D7:89:F7:A5:53:31
            X509v3 Authority Key Identifier:
                keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0a:fa:85:f2:3a:46:74:8f:0a:df:ae:9a:8e:1e:9a:79:7a:
         a9:77:c3:46:6d:41:0f:d3:dd:63:16:d1:cc:9b:84:18:a4:25:
         ba:80:2f:9e:e3:82:f6:c2:8a:f5:4d:65:a3:f9:61:4c:15:5c:
         1d:df:75:49:f3:c8:6b:b2:83:e4:55:61:00:03:e0:59:2c:ab:
         d6:c3:c5:80:bc:a7:e5:df:f4:cf:7b:6c:a6:6d:23:a0:c9:cf:
         ca:73:c9:9a:94:69:c0:1a:87:e3:0e:6b:d0:84:23:ba:44:08:
         78:cb:31:06:06:cb:b0:b2:ff:b8:07:f6:a8:52:48:8e:50:b0:
         f9:2e:40:ca:fc:cd:5f:40:c8:1d:c3:0d:92:2b:83:5c:66:28:
         e6:25:82:60:fa:b3:72:dc:df:33:89:65:76:f6:80:5a:8d:6f:
         d1:49:73:21:fe:36:81:5a:c6:aa:92:1c:c4:93:f3:a9:b1:27:
         16:1c:97:3f:72:ed:4f:63:de:7a:ab:5a:f2:76:7a:9a:0d:38:
         3d:43:5c:61:97:4a:8c:c5:60:27:40:4e:69:19:34:8a:24:68:
         5a:4c:56:bd:37:ad:c4:4b:45:cc:19:cb:65:36:78:aa:18:9f:
         e7:7a:69:ea:cd:2b:0a:73:d8:87:37:9e:10:db:86:c9:2f:cf:
         51:6f:7d:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5ODIxMTAvBgNVBAUTKEU2MjE0NjlDRDVBNTc4Rjk0N0FCNDdFQjBFQ0U4ODkz
OUI4N0VCRkIwHhcNMjQwNTA3MDMzMjU1WhcNMjQwNTE0MDMzMjU1WjAYMRYwFAYD
VQQDEw02NjM5YTBlNy1lZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmrSsRBcLHJfHfYzfRmTrn+vIj0Mr7TFouWrs7ENtzGL5rnw14kY/0hqv0VC7
9alub+daCt+iLKr2UXQq3DNOQxP+Ku2z0PpPQ+sYTKuVGj7XH/jGtRfkjGGvzqSN
5dt5KyuI95JCAoxtShUVM0BB7f3KPLy5KXP1+QI7KcH7QPWuhYeS02KIImp9Z/se
6Q2ZNtmg/P9nKuPHWCfYxryyjV031x2sLhNUeANigLZk/Tm0KzUiqu7vHpw1wI/B
yCRbL0uWPzvPqL04n9kDjh3M6aTGVF9abbUyQCPO4zURGHd0im2DGeJ8yZIkkMrO
lhVK77SH5Zc4HEw3mBEVZQolbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPvXO9m
A5bVCR6PbDuX14n3pVMxMB8GA1UdIwQYMBaAFOYhRpzVpXj5R6tH6w7OiJObh+v7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9EOEI2ODY5NkFD
MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQbEhxMGZyRHM2SWs1dUg2
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVpRkduTldsZVBsSHEwZnJEczZJazV1SDZfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDk4Mi9EOEI2ODY5NkFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQ
bEhxMGZyRHM2SWs1dUg2X3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRCvqF8jpGdI8K366ajh6aeXqpd8NGbUEP091jFtHMm4QYpCW6gC+e
44L2wor1TWWj+WFMFVwd33VJ88hrsoPkVWEAA+BZLKvWw8WAvKfl3/TPe2ymbSOg
yc/Kc8malGnAGofjDmvQhCO6RAh4yzEGBsuwsv+4B/aoUkiOULD5LkDK/M1fQMgd
ww2SK4NcZijmJYJg+rNy3N8ziWV29oBajW/RSXMh/jaBWsaqkhzEk/OpsScWHJc/
cu1PY956q1rydnqaDTg9Q1xhl0qMxWAnQE5pGTSKJGhaTFa9N63ES0XMGctlNniq
GJ/nemnqzSsKc9iHN54Q24bJL89Rb31o
-----END CERTIFICATE-----
Generated at Tue May 7 04:34:49 2024 by rpki-client on console-fra.rpki-client.org