Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File:                     Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier:          Uqp1xK7VwxhAvl3Zdedv4fStmxxu4pPyOmMDTUnfp9U=
Subject key identifier:   44:75:97:70:79:06:F9:66:D6:E9:0E:18:63:40:C5:3B:05:30:EA:5C
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer:       /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial:       071E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number:          0715
Signing time:             Fri 22 Nov 2024 21:23:10 +0000
Manifest this update:     Fri 22 Nov 2024 21:23:09 +0000
Manifest next update:     Fri 29 Nov 2024 21:23:09 +0000
Files and hashes:         1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: VBhqFTsrPcvbwykzUxy7ct7zhqDsqFubIrXjXoaD6n8=)
                          2: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: TqzDGovwhtTAPmIXBsAGxjfJ3nw0cxE3m4Rbi1VLpSs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
                          rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822 (0x71e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
        Validity
            Not Before: Nov 22 21:23:09 2024 GMT
            Not After : Nov 29 21:23:09 2024 GMT
        Subject: CN=6740f63d-372c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:42:9b:13:5f:f2:53:12:d2:fa:ae:0e:c3:
                    6b:a7:da:7d:05:3f:b8:5c:59:75:58:42:11:19:32:
                    bb:6d:a8:35:00:ca:26:83:ff:dc:d5:8a:40:32:e8:
                    71:ab:84:3d:8d:80:ad:18:48:f6:4d:b1:90:90:38:
                    4c:f2:ba:b6:e6:fe:56:8b:e9:b5:14:e8:d4:84:d0:
                    7c:77:f8:95:e0:59:bb:df:5f:79:f0:23:02:82:d4:
                    6d:70:38:f9:fc:36:80:3c:85:ff:1c:9d:c8:97:f6:
                    31:7e:13:3b:c8:04:ae:78:8f:13:18:81:b1:9f:d0:
                    7b:3b:c4:0b:12:7e:ba:3e:6d:98:0a:74:82:91:43:
                    c5:d0:62:ef:9d:06:39:b8:5c:63:2f:53:f6:9d:3e:
                    bf:8e:c6:57:5e:83:ce:d5:50:4a:69:f8:23:ac:06:
                    cb:02:5c:a8:4d:4a:ca:85:37:cc:db:a3:d1:7a:5e:
                    ad:14:00:ab:8f:38:3d:7c:13:c2:03:27:bd:e9:6b:
                    39:bb:82:33:b5:45:15:86:a3:dc:44:67:72:51:b6:
                    89:11:11:66:17:7f:1e:68:8a:b5:38:bb:79:ea:e6:
                    f2:4c:d9:37:a7:18:1e:2a:8d:b9:11:0b:56:eb:74:
                    93:70:01:d2:8d:60:f7:29:4f:35:99:bb:4d:20:5e:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:75:97:70:79:06:F9:66:D6:E9:0E:18:63:40:C5:3B:05:30:EA:5C
            X509v3 Authority Key Identifier:
                keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:84:26:c4:2b:ff:fa:d8:03:c1:1a:0b:0d:a0:19:2d:b1:09:
         af:57:e8:af:43:16:f2:b5:c4:70:49:1c:0d:89:68:54:06:b6:
         f2:fb:52:bd:22:00:3d:80:04:f2:b4:4a:32:97:37:13:54:83:
         df:cc:9d:72:a3:54:aa:13:93:e8:84:8e:71:88:85:40:ec:1c:
         9f:6c:2e:64:59:4e:62:bc:9c:66:af:a6:fe:8d:ae:aa:4f:12:
         20:14:f7:be:f3:e0:78:d7:a3:ad:98:ab:06:fa:d9:b5:f8:20:
         6b:31:fb:3f:37:b5:25:02:1e:a3:9d:92:45:e9:d8:9d:fa:93:
         f6:52:d1:9b:2c:0a:74:07:76:85:05:9d:4b:4f:c1:b1:f6:cc:
         e4:43:0f:98:14:a0:bc:cc:02:16:19:b3:96:6f:de:4b:a8:76:
         9b:cc:ef:5e:72:f5:cb:a8:08:c3:46:42:f3:ac:39:cf:16:14:
         d8:67:87:65:19:9b:f0:1c:94:6b:76:6c:64:c8:9a:84:89:bd:
         d9:1b:68:b2:f2:44:d9:7c:8b:98:72:80:9b:45:67:6e:bb:27:
         f8:97:10:51:1f:10:b6:43:a6:fb:1d:88:1c:40:45:b7:e9:f8:
         44:f8:8d:16:36:63:ff:0c:1d:52:e3:2f:ce:47:f9:9b:8d:43:
         ab:94:3b:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVENTcxMTAvBgNVBAUTKDY2ODg3MkU4Nzk5N0I3M0I5NzVGRTNEQUQ0REFDQThF
QkVDOEVCQTMwHhcNMjQxMTIyMjEyMzA5WhcNMjQxMTI5MjEyMzA5WjAYMRYwFAYD
VQQDEw02NzQwZjYzZC0zNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwfxCmxNf8lMS0vquDsNrp9p9BT+4XFl1WEIRGTK7bag1AMomg//c1YpAMuhx
q4Q9jYCtGEj2TbGQkDhM8rq25v5Wi+m1FOjUhNB8d/iV4Fm731958CMCgtRtcDj5
/DaAPIX/HJ3Il/YxfhM7yASueI8TGIGxn9B7O8QLEn66Pm2YCnSCkUPF0GLvnQY5
uFxjL1P2nT6/jsZXXoPO1VBKafgjrAbLAlyoTUrKhTfM26PRel6tFACrjzg9fBPC
Aye96Ws5u4IztUUVhqPcRGdyUbaJERFmF38eaIq1OLt56ubyTNk3pxgeKo25EQtW
63STcAHSjWD3KU81mbtNIF68dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFER1l3B5
Bvlm1ukOGGNAxTsFMOpcMB8GA1UdIwQYMBaAFGaIcuh5l7c7l1/j2tTayo6+yOuj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUQ1Ny81Q0Q4MjQ0MjE3
QjAxMUVCQjk0REE3MTRDNEY5QUUwMi9ab2h5NkhtWHR6dVhYLVBhMU5yS2pyN0k2
Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pvaHk2SG1YdHp1WFgtUGExTnJLanI3STY2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUQ1Ny81Q0Q4MjQ0MjE3QjAxMUVCQjk0REE3MTRDNEY5QUUwMi9ab2h5NkhtWHR6
dVhYLVBhMU5yS2pyN0k2Nk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCehCbEK//62APBGgsNoBktsQmvV+ivQxbytcRwSRwNiWhUBrby+1K9
IgA9gATytEoylzcTVIPfzJ1yo1SqE5PohI5xiIVA7ByfbC5kWU5ivJxmr6b+ja6q
TxIgFPe+8+B416OtmKsG+tm1+CBrMfs/N7UlAh6jnZJF6did+pP2UtGbLAp0B3aF
BZ1LT8Gx9szkQw+YFKC8zAIWGbOWb95LqHabzO9ecvXLqAjDRkLzrDnPFhTYZ4dl
GZvwHJRrdmxkyJqEib3ZG2iy8kTZfIuYcoCbRWduuyf4lxBRHxC2Q6b7HYgcQEW3
6fhE+I0WNmP/DB1S4y/OR/mbjUOrlDvb
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org