Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
File:                     89ufFiAIvWZsv4yZYHgUz6sk1-c.mft (raw, json)
Hash identifier:          13I95iN8pdFU4g7NI5Er2g2uQSrDqSyXN/Cb873kthc=
Subject key identifier:   B3:EF:24:9D:67:81:E3:B3:B3:F3:36:8C:23:B0:80:83:B7:31:E2:B4
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       33B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
Manifest number:          312E
Signing time:             Thu 02 May 2024 15:54:10 +0000
Manifest this update:     Thu 02 May 2024 15:54:10 +0000
Manifest next update:     Thu 09 May 2024 15:54:10 +0000
Files and hashes:         1: 89ufFiAIvWZsv4yZYHgUz6sk1-c.crl (hash: BvTwt6TN0J4fnwQxNLQJuDvkZzzp3lDYfZ8NZmvZeAc=)
                          2: 2A3ED0C0314811EA82EC6962C4F9AE02.roa (hash: NvrkVQ51/bU7okfTt4KwDOkpO3IveMlulTglTD503WE=)
                          3: C808A5E6C4A711E9BE1A815DC4F9AE02.roa (hash: zB1K3/0VgDQmY4g9unC33pkWMwEjiWZC+N837uSBGTw=)
                          4: 960764842D4211EA907A566EC4F9AE02.roa (hash: i/p90vR/sFtXv/n69cNNWXu8/XgNkPpkTmPhQzPRUz8=)
                          5: 6891872A27D711EA8E7B5876C4F9AE02.roa (hash: cvdXa/zGPkC/EYl2MOjENLazHsXzQihqDl6RVwBttow=)
                          6: FE63F4649CD511E9A6A86527C4F9AE02.roa (hash: Wbjt3IzUqiF3C/Mwa+0nsEXUm0AncGfafeECCs6m4+k=)
                          7: 688029EE184B11EA85906435C4F9AE02.roa (hash: zdLeb+5OiAG+/qp+sStQnhcMtVRXHfOrUzFGOWoXTPI=)
                          8: 4979428A0E0D11EAAAF12D09C4F9AE02.roa (hash: jJNZBkrKgNjmWc3FX43DoKyuF7ZzBfyK82vjSxPHOxE=)
                          9: 3A153A08C31F11E9B2558032C4F9AE02.roa (hash: ALtZ64m+J2FYG2DtULpKBsGS9/chuNUwn5m+VWOkvNA=)
                          10: A197DDE6BF2011E99B065B7DC4F9AE02.roa (hash: XODHegdUtMCzoEoTSUegvVKzLpENrWz3F4wwNQhAS1w=)
                          11: 4025C8DC78E811E79F549F43C4F9AE02.roa (hash: tFeNcI6kFopNEe6GYOSbUN3Yh/hxqqs68jWZiYvIj3Y=)
                          12: A7B53200784E11E9AE591940C4F9AE02.roa (hash: XkQIUEc4pKTQgQhlerYuVDZV12Pa2EDZFl7JQK2zFhk=)
                          13: 3F9678DA78E811E79F549F43C4F9AE02.roa (hash: pUyC8h2GGbOD1W+WXetS9SmO7kM7unt4nOsJC3wuc90=)
                          14: 7909FCC06DF211EA806B671BC4F9AE02.roa (hash: 4bAY8PvQtqzAh0BR34CDGwXsMO5R8pvHAnktWyTK8Q0=)
                          15: 76CA0E007B7711E9B2348367C4F9AE02.roa (hash: 5pbwlYoQ/s0ABQ7QmTIWP4XUkgy7TlneCE+bcYuBYMM=)
                          16: 6BEE929EBE7A11E99ADDFD75C4F9AE02.roa (hash: qWRbhJpMO053uVGpsG/IFSeupCDZB6plRMstX65Rw00=)
                          17: 3F4717D0D89B11E9AB8A5F14C4F9AE02.roa (hash: KWfNx4SOXYveByFCmq1j32wCwrFxa2uDVAzxYXK9pkg=)
                          18: 7D281FE0CAF911E9912CF92FC4F9AE02.roa (hash: 4b54gcghzBXaW3gbJYwCDfbwnenoHDLTazmHq46yHHE=)
                          19: 93069024F98111E9BCD2807EC4F9AE02.roa (hash: f0KgeqXa4TbBv8PzEEzWgExvP3I3M91EqIxnBawNp3I=)
                          20: E97B1E5482E211EEA80A0583C4F9AE02.roa (hash: gun8LCI4ntZotqucrFdTyrzeTUDgktVdrtg4Gwfkh5M=)
                          21: B7E4B4D8676411EA90B16258C4F9AE02.roa (hash: i2FZygjHTM3jd1YxxXvDtMf98z45p9UNDCdKWGdB7Lw=)
                          22: 9CC241B2016511EA91E3CF4AC4F9AE02.roa (hash: rWRmDX660dqyRDuXMsI2GCl28Q3GT1EJJtrdQ0guTQ8=)
                          23: B883270E356B11E7A51C314CC4F9AE02.roa (hash: A/qJ2f6RBq9G1KDp8W4H8o7cKnSPcXwH8FO487zmgrk=)
                          24: 95A84A924C0211EAB9CDB321C4F9AE02.roa (hash: z7DqgAtWSGv05KlopT8vxbAjC37HH/8prJgouaG8LYw=)
                          25: DA7F8A1478E611E7AEAB9A41C4F9AE02.roa (hash: f2xfdjt5L6ii+q40owTSoerJo2iUinwQIXlKTQ56Lok=)
                          26: 6CF60CB6785811E99A6E965AC4F9AE02.roa (hash: hEv61h6PeBurd+rTRipxXpTc52EWMqbc1U8DalQNmB8=)
                          27: 691CFE18184B11EA85906435C4F9AE02.roa (hash: EBzBc5n7HwK4pw1sKzjBl6bKWRAQgxndyRnGOh0QDEU=)
                          28: 6C906DE4BE7A11E99ADDFD75C4F9AE02.roa (hash: mi1mk46KI8cH98LFiU7IeSMiJV0+0HoKJZiL/0eZC3I=)
                          29: 0259CB6ABE7911E990831772C4F9AE02.roa (hash: CX5nWUVPlduAdHlJM33jymeyweVTXx9Mmo0hVm1BJ3o=)
                          30: 6E30D6B6BE7A11E99ADDFD75C4F9AE02.roa (hash: SakjzCB9MmCgU+fdTuE6Cb706ZRBlPb9YTDyher0XEo=)
                          31: 59F5C224337811EAAD3FAA39C4F9AE02.roa (hash: Tm2jOTH45LNujDAccZpuNzL30sr0Ey2KDrxGTPi3VEo=)
                          32: 9E189DF2C4F411E9829EC138C4F9AE02.roa (hash: hkpS2nTl95nJJSU3jJMQ8u9l/ZspBxfQ6XZ5VMZUcH0=)
                          33: 5A87E8B01A7E11EAB32DB717C4F9AE02.roa (hash: CWvmbk/VkQ6hOcMTKVG0hE3sCjOTKuja0uQ3zo8RRtk=)
                          34: 6C1DC926C3E111E9A0172583C4F9AE02.roa (hash: +Evajhv80IcxMgUZIS1n0nUXKAYQDwPSzKy9G1I/OFw=)
                          35: 6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa (hash: oQ14XpQ0MO/clWFWPTUq4WuDngumYCY2vqSgo5QgnWE=)
                          36: 6AE530BABE7A11E99ADDFD75C4F9AE02.roa (hash: KLcb3arU+7VHz7Ygns8KRoodlKz1u0SUbtiUz1E/8ZE=)
                          37: 011F48EE2FF411E78B4D5566C4F9AE02.roa (hash: ojiXpAwhjmBrHELnp3C5uCPk+9bNvFUvs+eBzDg/0Do=)
                          38: BE6B7B76337911EA8016C03DC4F9AE02.roa (hash: H5yRhMu6t80UYJRJVYucUw4+J8lPE7EpA3H4jchV53g=)
                          39: DEBF5A241D8911EA8ECDAA75C4F9AE02.roa (hash: IxEsTibKINm3cQnHcOgiOcb5rBfAzUJGUFKNxFkA9Ss=)
                          40: 00C137A2BE7911E990831772C4F9AE02.roa (hash: ApqDQT65tuEFZUyPhlAuunreh/CAhuVEw+6OQ+LeQPE=)
                          41: FE17729EC4AB11E99055C166C4F9AE02.roa (hash: qrYeoDnIennAvkZEDBehCjWZV0XFuSZU18vfkqHvO84=)
                          42: 6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa (hash: 3V+BDjU/H3eSfNfThi4xot8cOeEXYDOopHfEd4MYgJw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 15:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13237 (0x33b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: May  2 15:54:10 2024 GMT
            Not After : May  9 15:54:10 2024 GMT
        Subject: CN=6633b722-142f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:41:af:63:61:12:86:17:2a:54:9a:27:e8:
                    89:42:2c:c9:c0:56:d1:6d:32:7c:85:53:47:cc:43:
                    50:8a:1d:c3:4a:71:64:6d:da:66:32:47:88:b1:4f:
                    1b:5f:70:da:e1:2b:7c:ca:17:3b:8c:be:3a:df:aa:
                    7c:25:e1:ce:5a:3f:7a:a5:a0:dc:6c:64:78:8b:24:
                    7a:8a:b4:19:20:56:bd:c1:78:f6:6e:0a:6e:f3:03:
                    0f:22:b1:27:ca:96:5d:0c:f5:8e:25:b9:7c:68:ab:
                    ed:58:a3:60:69:c1:5d:61:93:8d:bf:68:dc:72:30:
                    d8:db:b8:54:06:4c:26:39:16:98:61:a8:ef:d9:08:
                    1a:ef:dd:ed:5f:d5:ab:10:89:94:ff:46:cc:94:79:
                    b5:d4:d3:35:16:df:58:43:11:94:71:61:f3:78:b4:
                    f5:97:76:46:3b:5f:3e:5c:81:ee:fd:84:33:0a:30:
                    16:b2:a9:e8:35:92:b1:b4:f2:b0:f9:08:c4:1e:0c:
                    25:61:f6:46:dc:61:4f:eb:87:5a:99:13:78:59:04:
                    5f:50:6d:fc:fb:b8:7f:10:76:d2:f6:ae:26:ed:69:
                    75:bd:68:85:87:ad:5b:a2:64:9d:1c:d1:27:24:c9:
                    93:1a:f3:47:fd:d2:19:9b:be:4e:14:5c:5f:13:97:
                    fd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EF:24:9D:67:81:E3:B3:B3:F3:36:8C:23:B0:80:83:B7:31:E2:B4
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:86:dc:9f:1f:43:33:25:e0:dc:ef:ae:fa:6f:f4:c8:bc:c5:
         9a:bf:d5:08:88:c3:f2:1b:37:87:80:96:62:c7:13:50:c6:8f:
         82:c4:eb:d6:54:ff:45:f5:8c:12:a0:d8:e7:26:22:17:9e:bb:
         a3:2c:97:ca:0f:22:a6:00:64:62:23:26:8b:e7:73:6c:c8:5d:
         47:23:76:03:70:bf:a3:e8:ad:c0:78:43:97:1b:c0:63:3a:f4:
         3f:e8:21:bf:a1:a9:3e:97:b3:07:b7:6b:9e:c6:09:36:fe:59:
         e7:a0:48:d8:43:f8:96:69:e9:c8:cf:cc:1c:86:6f:b8:a8:f2:
         6a:62:ba:17:09:22:4b:5e:39:ea:27:1b:3f:ce:27:b2:3d:f2:
         9d:f6:b4:ae:30:44:c8:d9:97:68:3c:db:c8:57:8e:11:71:a3:
         0c:48:61:1a:94:e0:b0:7d:ef:dd:0d:69:54:87:b3:44:d3:58:
         a7:d6:b2:7a:81:cd:9b:8e:16:df:46:c0:0a:6d:1a:a0:bc:db:
         a2:e9:71:ef:6e:63:9d:4b:cd:b3:5a:aa:39:71:5c:c6:dd:1c:
         59:c5:ea:bc:8f:23:0f:26:a7:8d:3c:82:47:0a:15:60:04:de:
         e7:6a:69:5b:18:4d:9e:b3:a8:33:e1:3b:56:76:30:bb:ee:66:
         58:be:81:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICM7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjQwNTAyMTU1NDEwWhcNMjQwNTA5MTU1NDEwWjAYMRYwFAYD
VQQDEw02NjMzYjcyMi0xNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuENBr2NhEoYXKlSaJ+iJQizJwFbRbTJ8hVNHzENQih3DSnFkbdpmMkeIsU8b
X3Da4St8yhc7jL4636p8JeHOWj96paDcbGR4iyR6irQZIFa9wXj2bgpu8wMPIrEn
ypZdDPWOJbl8aKvtWKNgacFdYZONv2jccjDY27hUBkwmORaYYajv2Qga793tX9Wr
EImU/0bMlHm11NM1Ft9YQxGUcWHzeLT1l3ZGO18+XIHu/YQzCjAWsqnoNZKxtPKw
+QjEHgwlYfZG3GFP64damRN4WQRfUG38+7h/EHbS9q4m7Wl1vWiFh61bomSdHNEn
JMmTGvNH/dIZm75OFFxfE5f9qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPvJJ1n
geOzs/M2jCOwgIO3MeK0MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjIxNC9DNjVENTM2NDMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZX
WnN2NHlaWUhnVXo2c2sxLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXhtyfH0MzJeDc7676b/TIvMWav9UIiMPyGzeHgJZixxNQxo+CxOvW
VP9F9YwSoNjnJiIXnrujLJfKDyKmAGRiIyaL53NsyF1HI3YDcL+j6K3AeEOXG8Bj
OvQ/6CG/oak+l7MHt2uexgk2/lnnoEjYQ/iWaenIz8wchm+4qPJqYroXCSJLXjnq
Jxs/zieyPfKd9rSuMETI2ZdoPNvIV44RcaMMSGEalOCwfe/dDWlUh7NE01in1rJ6
gc2bjhbfRsAKbRqgvNui6XHvbmOdS82zWqo5cVzG3RxZxeq8jyMPJqeNPIJHChVg
BN7namlbGE2es6gz4TtWdjC77mZYvoEv
-----END CERTIFICATE-----
Generated at Thu May 2 17:18:31 2024 by rpki-client on console-ams.rpki-client.org