Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
File:                     IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json)
Hash identifier:          dib1WMgJ67fwJ00piNEOngfjNA9HekdEOsWXFxcQn8g=
Subject key identifier:   9E:C0:00:04:72:F4:37:79:19:0B:E0:0A:29:3D:42:F0:C7:CA:49:4D
Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
Certificate issuer:       /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
Manifest number:          37
Signing time:             Thu 21 Nov 2024 05:37:45 +0000
Manifest this update:     Thu 21 Nov 2024 05:37:44 +0000
Manifest next update:     Thu 28 Nov 2024 05:37:44 +0000
Files and hashes:         1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: pm+o7Bfu86Y+HBMGE1Y8RCF3SgpfgEIAZZLxWI5g1ag=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl
                          rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
        Validity
            Not Before: Nov 21 05:37:44 2024 GMT
            Not After : Nov 28 05:37:44 2024 GMT
        Subject: CN=673ec728-f030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:50:49:e4:e6:94:ad:7d:53:47:be:eb:b1:
                    4e:cb:5d:4b:84:1e:44:05:e4:54:f6:c2:75:2b:ba:
                    f3:69:2a:d4:07:8c:25:5f:fc:2a:8a:e2:5e:79:6a:
                    05:e8:dd:cf:96:72:b3:17:1f:27:21:03:17:6b:40:
                    1d:df:2a:52:18:db:31:38:08:8b:8b:71:a6:15:3e:
                    fe:88:90:12:b7:91:d7:44:78:dc:ba:08:5a:ea:4d:
                    5d:27:4d:7d:16:a4:12:29:01:26:d7:00:78:3c:42:
                    b0:c7:56:e4:15:85:96:13:f7:4d:82:57:f4:25:e0:
                    1e:d3:f8:21:6c:87:f8:e2:b3:4c:af:29:29:1c:9a:
                    2c:39:3d:69:95:e9:01:d2:a4:36:4c:b0:2e:d4:84:
                    2c:7b:b3:84:21:55:85:73:a5:9f:0d:cb:ca:6e:2b:
                    b1:98:77:05:f8:17:e0:57:3e:5d:24:81:93:27:37:
                    3a:56:48:c6:27:1a:8a:ce:a7:3f:29:bf:06:ae:72:
                    45:22:d4:af:20:c0:50:2a:b6:b8:5d:60:0a:cf:63:
                    20:c1:19:09:2a:98:1a:03:9c:0a:3f:92:33:85:79:
                    f7:5e:b1:4b:36:b0:bc:96:38:dc:e0:1b:81:14:a4:
                    bb:e9:c0:80:41:07:2c:87:4e:28:52:ff:49:0a:48:
                    59:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C0:00:04:72:F4:37:79:19:0B:E0:0A:29:3D:42:F0:C7:CA:49:4D
            X509v3 Authority Key Identifier:
                keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:7f:c0:72:64:df:c0:74:8a:0b:cf:95:2c:46:89:3f:dd:55:
         08:8f:27:b5:3b:7c:7f:df:d5:23:09:d3:7f:02:a4:4b:20:93:
         41:2a:8a:0b:9b:f5:27:4e:42:c5:a7:92:c0:00:c7:07:c9:bb:
         a1:f2:7e:42:e7:db:30:38:9e:f5:3e:32:04:56:e3:0f:5a:85:
         e6:96:3e:dd:7d:3a:63:ec:00:06:b0:12:61:06:d6:78:82:7d:
         06:0b:70:2f:36:85:b1:a3:54:07:26:8a:a0:53:8c:37:cf:95:
         a6:60:99:93:e4:08:5e:67:52:96:ce:86:eb:c6:e9:d2:35:1f:
         29:86:d4:e5:e2:ef:79:95:22:5c:36:11:8a:06:26:9d:d7:79:
         ae:82:0b:75:5e:58:12:3e:55:4b:d2:03:b4:8d:3b:20:e5:f7:
         2a:69:b2:c3:93:11:90:f4:3d:0f:84:56:08:b8:a3:31:64:8a:
         1b:63:1e:00:40:f1:1d:f2:d8:44:1e:0e:44:c3:39:a3:10:0d:
         bb:6f:8b:81:77:55:12:4d:9d:f7:79:83:0e:96:6c:79:7d:77:
         82:73:e6:f2:b2:0e:9f:24:c5:3b:d7:25:45:fd:7b:89:d0:fb:
         14:66:f7:79:38:e6:5b:b1:29:69:fc:12:ed:2a:a1:52:ea:e6:
         3e:a5:11:d5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MzM2QTExMC8GA1UEBRMoMjFEM0VEMjFGN0NERUJDN0QwMEYxQkI3QTA5NTExQjk1
Q0RFRkUyMzAeFw0yNDExMjEwNTM3NDRaFw0yNDExMjgwNTM3NDRaMBgxFjAUBgNV
BAMTDTY3M2VjNzI4LWYwMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDhIFBJ5OaUrX1TR77rsU7LXUuEHkQF5FT2wnUruvNpKtQHjCVf/CqK4l55agXo
3c+WcrMXHychAxdrQB3fKlIY2zE4CIuLcaYVPv6IkBK3kddEeNy6CFrqTV0nTX0W
pBIpASbXAHg8QrDHVuQVhZYT902CV/Ql4B7T+CFsh/jis0yvKSkcmiw5PWmV6QHS
pDZMsC7UhCx7s4QhVYVzpZ8Ny8puK7GYdwX4F+BXPl0kgZMnNzpWSMYnGorOpz8p
vwauckUi1K8gwFAqtrhdYArPYyDBGQkqmBoDnAo/kjOFefdesUs2sLyWONzgG4EU
pLvpwIBBByyHTihS/0kKSFn1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnsAABHL0
N3kZC+AKKT1C8MfKSU0wHwYDVR0jBBgwFoAUIdPtIffN68fQDxu3oJURuVze/iMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMzZBLzhGNUE5MzU2NUFF
QTExRUY5NEU5M0Q2RUM0RjlBRTAyL0lkUHRJZmZONjhmUUR4dTNvSlVSdVZ6ZV9p
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSWRQdElmZk42OGZRRHh1M29KVVJ1VnplX2lNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz
MzZBLzhGNUE5MzU2NUFFQTExRUY5NEU5M0Q2RUM0RjlBRTAyL0lkUHRJZmZONjhm
UUR4dTNvSlVSdVZ6ZV9pTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMJ/wHJk38B0igvPlSxGiT/dVQiPJ7U7fH/f1SMJ038CpEsgk0Eqigub
9SdOQsWnksAAxwfJu6HyfkLn2zA4nvU+MgRW4w9aheaWPt19OmPsAAawEmEG1niC
fQYLcC82hbGjVAcmiqBTjDfPlaZgmZPkCF5nUpbOhuvG6dI1HymG1OXi73mVIlw2
EYoGJp3Xea6CC3VeWBI+VUvSA7SNOyDl9yppssOTEZD0PQ+EVgi4ozFkihtjHgBA
8R3y2EQeDkTDOaMQDbtvi4F3VRJNnfd5gw6WbHl9d4Jz5vKyDp8kxTvXJUX9e4nQ
+xRm93k45luxKWn8Eu0qoVLq5j6lEdU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org