Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
File:                     ewHKzBcP5qYbIDBBheholG33KFo.mft (raw, json)
Hash identifier:          HB54+y84/FtXAmpr2Ht+Qhmu6d1LXGkfffc7QJvW8GY=
Subject key identifier:   9B:55:00:9B:E5:11:06:D4:89:0D:40:96:C7:20:02:B9:C1:98:3B:6F
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Certificate issuer:       /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial:       0F3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
Manifest number:          0C3F
Signing time:             Wed 20 Nov 2024 18:21:49 +0000
Manifest this update:     Wed 20 Nov 2024 18:21:49 +0000
Manifest next update:     Wed 27 Nov 2024 18:21:49 +0000
Files and hashes:         1: ewHKzBcP5qYbIDBBheholG33KFo.crl (hash: bzZkoFBi/w1j5TGlXAfQOuZhFugozJNc7M88XskOUBc=)
                          2: 55F662DC09B111EAB045B31EC4F9AE02.roa (hash: 2wbdEcI1zwm+PHPsvpOKdsLN31Ce0ebGFE+98z/6Pv0=)
                          3: 52BF1CA809B111EAB045B31EC4F9AE02.roa (hash: TiW/xjiDGOTGCqC8pPieynk7U1Sl6bZ+sVNibJx7Fpg=)
                          4: B3811802FED411EA83E4EC37C4F9AE02.roa (hash: UPpk+2tVIEQUEGmR/myBFx0UFhS9+5WTjzI5Ji1O2VI=)
                          5: 5731ACF609B111EAB045B31EC4F9AE02.roa (hash: kREnLf88OoWgQ34/8mPOwFXMrynWxlb31lWTQCGwgd8=)
                          6: 54E1D22809B111EAB045B31EC4F9AE02.roa (hash: lwwYSi9bX2n/PcHAAgQ7BIhZ09lvA32FB6Yk04V2ZEM=)
                          7: 92C1DA72F96911EA96156C10C4F9AE02.roa (hash: 7OzEh6CNMowVfHgSovY1lWqmtDu6I5pBIgEYdybsNmg=)
                          8: 5690B49A09B111EAB045B31EC4F9AE02.roa (hash: vsR0HJiYkbe+BR/BUhFJteqxMTpXWqIaNvhTXe4uDL8=)
                          9: A874B08E072E11EA8A64DC59C4F9AE02.roa (hash: uziB4dGvF1VHlHvVWALH5Lm20+CTQMd7ucVTGRsNsBc=)
                          10: 0DD6A56C073011EAAD272760C4F9AE02.roa (hash: chzh/wLBlVn6UWj7Q8i4fp766bjmlVm4kExalm92FjM=)
                          11: D2CA53BCAF8E11EAA40B786BC4F9AE02.roa (hash: wB0s66v9M93cgErxsfMtFMJx2dUMKCkCUSxfojTViS4=)
                          12: 70CB2CA80B4D11EA9667AC1FC4F9AE02.roa (hash: /d1RKSm1mM4ZOHXX9XQZJVNypQP+JvRWagaNr0gtbDI=)
                          13: 48DF5EAE072D11EAAE8E1D56C4F9AE02.roa (hash: BsCVVmp0q57BnB/YoL9MKz36p2dLDMqWx/srRTUug5Y=)
                          14: EFDC701A099A11EAB5891D5BC4F9AE02.roa (hash: ThJ/r1UPbbOhsBDCxK8ziXsacEDHIM2voA7gPJ/2xsU=)
                          15: F2D46CA0099A11EAB5891D5BC4F9AE02.roa (hash: zic/oINhYmRooQ8iMUf+tscj5beBiqiSkdPRCqJqGYw=)
                          16: 585A89FE09B111EAB045B31EC4F9AE02.roa (hash: M4/YIzxDgXUiNPYwebtHJ2b7xiVviMJaqWCyFFUNwB4=)
                          17: 42C9FE0C77ED11EBBFBAF568C4F9AE02.roa (hash: w6jxhdQtTNOwHu4Z9zXxDBnMSEsbHnP/UkRYuwortdo=)
                          18: F3DDF814099A11EAB5891D5BC4F9AE02.roa (hash: cIVKo6UWPGyzSyVR+rg38rhOGNYaeRQiWkow074+frc=)
                          19: 55703D7E09B111EAB045B31EC4F9AE02.roa (hash: tyUvrUwvIGRweAG/KzClCXWTUPJZF4YehjvPYFruiFo=)
                          20: 496AB3D2072D11EAAE8E1D56C4F9AE02.roa (hash: PCQKlj6deOHtT7m2rfD9JwGJn7LJ5iM5rrfuzp4pIzE=)
                          21: F1D9CD5E099A11EAB5891D5BC4F9AE02.roa (hash: 4WX0ehLqUuik7rDt9ycis+y5a+d/nd5z3lRe8qLsMRA=)
                          22: F10FEA5C099A11EAB5891D5BC4F9AE02.roa (hash: CAFj3AR8C7nWFilluq8Zlz0MzuUUBW8YUn1ZIPsTqVg=)
                          23: 58DE045009B111EAB045B31EC4F9AE02.roa (hash: MlcDdH2YcLTXnbDft5Qb6lIe3iV/Jg5H+gZe0mFBVCw=)
                          24: 79E6617E073111EA993EC663C4F9AE02.roa (hash: gxcqMjqJdHakFd3R3eZ3MKpJ0wg3dtDrCjjIhe2ywRw=)
                          25: 57D0ACB609B111EAB045B31EC4F9AE02.roa (hash: FSyGFE7K35QX2cyotfzUQAvVJ9+/c5ofR0HDyKVjUD0=)
                          26: F0735BD8099A11EAB5891D5BC4F9AE02.roa (hash: dPl8NIAc8hQAimsq+AflvGqpzytj/z2QOKoRD2CnON4=)
                          27: F34CE5D6099A11EAB5891D5BC4F9AE02.roa (hash: C8EoWDHnyUtKpzbw4P5yytnqCxbHplgBOBwsCKWtUKk=)
                          28: F49547A8099A11EAB5891D5BC4F9AE02.roa (hash: JJZZ616zU4KOj7qhE4chxD+LUHVETeK41jSiTC6Vntc=)
                          29: 4B5E14FC96AD11EBA4AC9F7FC4F9AE02.roa (hash: Lp0ykW8HMm5jIMIBMEywg/EkIRhvoLD6TR/kXi750rc=)
                          30: 543B65D209B111EAB045B31EC4F9AE02.roa (hash: XV3ljGILi43Kdyc2pjrYtHsHPuk3NAIUOd8HDXY2t+s=)
                          31: 7AA2CD46073111EA993EC663C4F9AE02.roa (hash: tpSrRToHQManhjAr4cN1zG6dZmu/boCfaeGvP/Y0EhE=)
                          32: 48366FBA072D11EAAE8E1D56C4F9AE02.roa (hash: 6VcgZkUFaRXSrU6uuGyZ8vIpQ8pVo6uQn+n+Mfvx2z0=)
                          33: F254F0CE099A11EAB5891D5BC4F9AE02.roa (hash: i2v48s58DOAkVrcshyIOwOnzjUvrau1oQLQQL2De7Wg=)
                          34: E009A066072B11EAB6E08A52C4F9AE02.roa (hash: Nm2BDyTFPo0rjwtuej5Ye3yeMHCpXPqhQ9hwgt7ovWc=)
                          35: D22EBE84AF8E11EAA40B786BC4F9AE02.roa (hash: V2LSoQQqUSZYZ/j45F/NITGOX0DPUGqWuntz5CdnTdI=)
                          36: 7FC0AC6009AE11EAA7CED313C4F9AE02.roa (hash: GRE0ewXP9PESGqor5uVPuUuE/rw1jzhPWXveVKTgn6g=)
                          37: 795DEE70073111EA993EC663C4F9AE02.roa (hash: Ej7YMgenIUCQWW4OuoVEXOtE3nBBeIBDoBOcs5rBB0Y=)
                          38: 537DDF3A09B111EAB045B31EC4F9AE02.roa (hash: CmuSEfG1UIdzSsh9ec/xg1Tx5rcMA3aH5mzrUytDjcw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
                          rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 18:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3899 (0xf3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
        Validity
            Not Before: Nov 20 18:21:49 2024 GMT
            Not After : Nov 27 18:21:49 2024 GMT
        Subject: CN=673e28bd-3c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:1b:38:4c:8c:c5:29:8b:85:13:b2:d0:39:
                    70:b6:4e:43:88:4c:35:19:62:62:56:fe:70:69:ae:
                    12:24:73:93:03:0e:c8:98:04:82:f0:cc:cd:ba:77:
                    48:00:a8:a9:6c:da:60:b4:ff:35:46:b4:5f:9f:a2:
                    8f:9d:0e:7d:20:ff:08:37:2d:f5:5a:c6:0b:71:90:
                    98:66:b1:38:00:3f:0c:f6:82:fa:51:2b:63:58:6b:
                    d3:83:2b:d8:51:f9:f5:ab:eb:13:f0:32:b1:d9:e6:
                    6e:14:bf:17:d0:aa:20:db:b0:aa:69:9c:1f:49:70:
                    f6:83:0c:c6:71:e9:d0:bc:cb:ff:7a:f6:c6:ad:ee:
                    3e:fc:a0:6d:8a:90:c1:0a:7c:8e:b4:59:a5:61:b8:
                    46:4d:ab:75:2d:f8:c0:cf:9a:2e:a8:0a:b4:19:9d:
                    56:a8:6c:47:21:fe:36:71:e1:64:21:50:59:93:87:
                    b9:f3:10:96:26:2b:c4:07:8e:2c:9d:e4:42:43:5b:
                    e7:bb:b5:b9:16:7c:b2:8b:52:62:d1:7c:5c:17:7a:
                    ad:e9:18:57:79:d0:2d:1e:8d:c2:90:3e:d3:d3:91:
                    91:c9:56:74:37:47:5d:fd:34:75:ea:67:99:ec:23:
                    57:4b:ff:1c:83:fc:4c:3f:e4:19:8e:e9:f0:b9:2b:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:55:00:9B:E5:11:06:D4:89:0D:40:96:C7:20:02:B9:C1:98:3B:6F
            X509v3 Authority Key Identifier:
                keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:36:76:19:75:ac:10:ca:cb:b0:37:7d:49:c9:a4:14:7a:bb:
         fe:0a:86:b9:68:24:ab:c9:43:99:bd:1d:63:6f:fa:02:68:05:
         1e:68:84:99:4a:70:e6:ab:4a:85:d9:5c:61:e9:39:f8:1b:24:
         66:f1:94:c6:40:3d:b7:7c:59:af:5f:a5:1c:cd:3a:b4:e7:59:
         66:37:7f:6b:60:58:13:0f:02:d6:99:6f:1c:b9:41:48:55:f1:
         36:3b:2d:9c:c0:2c:b7:73:40:fd:0c:58:ea:28:c3:dd:7d:32:
         d8:a5:8b:fe:95:fa:02:42:ac:21:c4:dc:78:2f:d9:b3:a8:c3:
         24:a6:d7:ee:f5:b3:0a:c3:d1:ac:da:00:22:39:e7:45:29:5c:
         4f:c4:62:99:46:13:dd:d5:9d:ee:ff:8c:e7:eb:70:73:85:b0:
         4a:cd:5c:6e:f0:09:68:48:88:fa:6f:24:02:18:b9:6f:de:04:
         30:b8:3f:8f:62:ad:4c:b0:c3:a3:0d:04:47:fe:d0:5a:c0:89:
         eb:84:41:7e:97:64:c2:a1:c8:60:a4:3a:d9:d5:cb:b1:04:97:
         cb:3e:1f:fd:2f:d4:04:25:ea:4c:9d:9e:72:a0:e7:50:82:2d:
         e4:fc:e9:fa:63:d8:6b:96:b5:18:81:e9:79:7e:23:3d:13:16:
         3e:3c:c7:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0
NkRGNzI4NUEwHhcNMjQxMTIwMTgyMTQ5WhcNMjQxMTI3MTgyMTQ5WjAYMRYwFAYD
VQQDEw02NzNlMjhiZC0zYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZ4bOEyMxSmLhROy0Dlwtk5DiEw1GWJiVv5waa4SJHOTAw7ImASC8MzNundI
AKipbNpgtP81RrRfn6KPnQ59IP8INy31WsYLcZCYZrE4AD8M9oL6UStjWGvTgyvY
Ufn1q+sT8DKx2eZuFL8X0Kog27CqaZwfSXD2gwzGcenQvMv/evbGre4+/KBtipDB
CnyOtFmlYbhGTat1LfjAz5ouqAq0GZ1WqGxHIf42ceFkIVBZk4e58xCWJivEB44s
neRCQ1vnu7W5Fnyyi1Ji0XxcF3qt6RhXedAtHo3CkD7T05GRyVZ0N0dd/TR16meZ
7CNXS/8cg/xMP+QZjunwuSvTBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtVAJvl
EQbUiQ1AlscgArnBmDtvMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0
RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL
Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTlFQS82RDQ2M0NGRTA0RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVx
WWJJREJCaGVob2xHMzNLRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAENnYZdawQysuwN31JyaQUerv+Coa5aCSryUOZvR1jb/oCaAUeaISZ
SnDmq0qF2Vxh6Tn4GyRm8ZTGQD23fFmvX6UczTq051lmN39rYFgTDwLWmW8cuUFI
VfE2Oy2cwCy3c0D9DFjqKMPdfTLYpYv+lfoCQqwhxNx4L9mzqMMkptfu9bMKw9Gs
2gAiOedFKVxPxGKZRhPd1Z3u/4zn63BzhbBKzVxu8AloSIj6byQCGLlv3gQwuD+P
Yq1MsMOjDQRH/tBawInrhEF+l2TCochgpDrZ1cuxBJfLPh/9L9QEJepMnZ5yoOdQ
gi3k/On6Y9hrlrUYgel5fiM9ExY+PMe3
-----END CERTIFICATE-----