Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
File:                     M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json)
Hash identifier:          IOwSPtegJoLswwuUaccXH3l/qXFbkwVJ6svDuSAbg8Y=
Subject key identifier:   DC:8C:47:30:60:DF:9F:87:BA:66:39:C6:CC:80:D8:0C:04:18:D9:38
Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
Certificate issuer:       /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Certificate serial:       0279
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
Manifest number:          0275
Signing time:             Sat 01 Jun 2024 04:57:30 +0000
Manifest this update:     Sat 01 Jun 2024 04:57:30 +0000
Manifest next update:     Sat 08 Jun 2024 04:57:30 +0000
Files and hashes:         1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: P2EzSABYv1cvesBmFpoxiNOKi6ojzgVBkhe9NPrIk/A=)
                          2: 6AF5A9FAC6C811ECA5A9AB33C4F9AE02.roa (hash: wMOZvvUdhpLnHFRtGb9ZgJxGMkQuxJPR5+ohVmHOlM4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
                          rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
        Validity
            Not Before: Jun  1 04:57:30 2024 GMT
            Not After : Jun  8 04:57:30 2024 GMT
        Subject: CN=665aaa3a-8732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:b0:fa:ae:66:5f:94:46:24:3e:7e:7d:8b:
                    af:22:68:df:58:20:f9:bc:35:02:5b:51:0c:23:74:
                    69:4f:a8:8c:7b:b4:e7:aa:86:8e:b3:e5:4f:e1:f0:
                    39:47:fe:3c:e3:79:45:70:26:41:96:fd:90:83:f0:
                    1c:d5:50:fd:6f:8c:3e:d9:86:de:09:d0:11:d5:fe:
                    51:49:e9:46:dd:15:0d:66:24:e2:6a:18:e1:87:c3:
                    e1:8c:54:fd:4f:bd:cd:d2:b8:f6:5f:0d:5d:cb:b9:
                    ed:0f:a3:48:27:fc:ef:30:3f:96:ff:77:2f:17:ac:
                    21:28:0e:a3:3d:ba:87:c1:70:05:d2:b4:69:8d:91:
                    61:34:b0:61:57:d6:45:5f:23:ad:cc:ba:1e:23:d8:
                    3d:7d:b6:b0:1f:0c:40:74:20:36:06:86:0c:4d:e9:
                    94:f2:50:1c:ca:22:cd:9f:a7:da:5c:3f:99:e1:6b:
                    76:2a:fc:df:59:57:90:cc:6f:bf:7d:8d:28:f7:73:
                    c2:6e:09:5c:70:a2:0f:8b:58:03:79:0e:16:b4:92:
                    6c:6c:84:ff:11:4f:14:30:15:3b:bf:1b:81:5e:14:
                    f8:04:c5:08:88:91:04:0f:cf:98:7e:25:b4:ff:58:
                    ba:71:a0:13:69:13:fa:9d:17:ed:b8:79:7c:be:90:
                    e5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8C:47:30:60:DF:9F:87:BA:66:39:C6:CC:80:D8:0C:04:18:D9:38
            X509v3 Authority Key Identifier:
                keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:35:53:b4:c5:8c:09:8a:93:2d:3e:e4:47:2a:b3:76:ea:58:
         3e:26:7b:7d:c0:61:73:1e:85:c8:85:7c:2c:9f:49:e7:05:7c:
         a2:30:02:61:22:a8:f7:77:00:a4:c9:f0:7d:63:8f:84:fc:3c:
         1d:43:5c:b2:6b:97:09:8b:43:c8:fd:1e:3f:bc:8b:26:62:7d:
         5c:12:a6:b6:90:eb:6e:c9:9f:33:1e:e1:99:9a:d9:25:c0:70:
         0f:5e:79:de:5a:d4:31:b1:95:d5:77:c4:fc:5b:21:ee:ca:c9:
         bb:fc:d3:55:a8:2c:23:7d:da:fd:b0:b0:32:85:55:88:0b:cb:
         6d:7a:d4:e9:42:e1:f8:8a:84:4a:d9:16:c2:07:d5:79:88:61:
         13:18:c0:87:e0:e2:1b:49:d0:f7:24:d3:e2:da:b8:69:ef:e4:
         07:4d:e3:1c:63:1d:4d:7c:0f:48:ee:6c:85:55:bc:17:d1:38:
         05:74:78:74:e6:bb:7d:75:3c:24:05:51:ba:14:9b:02:47:c1:
         05:a4:5d:71:b0:60:25:ff:f2:a6:88:05:57:86:e2:d6:7c:83:
         81:e0:f7:4b:2d:d0:82:92:5f:eb:cc:65:82:84:8a:42:18:ea:
         4c:c6:b4:84:e6:e8:28:07:4f:2d:34:ff:13:93:09:d1:db:b5:
         a2:4f:48:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB
NUNDNzcyQzAwHhcNMjQwNjAxMDQ1NzMwWhcNMjQwNjA4MDQ1NzMwWjAYMRYwFAYD
VQQDEw02NjVhYWEzYS04NzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvESw+q5mX5RGJD5+fYuvImjfWCD5vDUCW1EMI3RpT6iMe7TnqoaOs+VP4fA5
R/4843lFcCZBlv2Qg/Ac1VD9b4w+2YbeCdAR1f5RSelG3RUNZiTiahjhh8PhjFT9
T73N0rj2Xw1dy7ntD6NIJ/zvMD+W/3cvF6whKA6jPbqHwXAF0rRpjZFhNLBhV9ZF
XyOtzLoeI9g9fbawHwxAdCA2BoYMTemU8lAcyiLNn6faXD+Z4Wt2KvzfWVeQzG+/
fY0o93PCbglccKIPi1gDeQ4WtJJsbIT/EU8UMBU7vxuBXhT4BMUIiJEED8+YfiW0
/1i6caATaRP6nRftuHl8vpDlLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyMRzBg
35+HumY5xsyA2AwEGNk4MB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2
MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj
c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE
andGX3BsMUhCNEdsekhjc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwNVO0xYwJipMtPuRHKrN26lg+Jnt9wGFzHoXIhXwsn0nnBXyiMAJh
Iqj3dwCkyfB9Y4+E/DwdQ1yya5cJi0PI/R4/vIsmYn1cEqa2kOtuyZ8zHuGZmtkl
wHAPXnneWtQxsZXVd8T8WyHuysm7/NNVqCwjfdr9sLAyhVWIC8ttetTpQuH4ioRK
2RbCB9V5iGETGMCH4OIbSdD3JNPi2rhp7+QHTeMcYx1NfA9I7myFVbwX0TgFdHh0
5rt9dTwkBVG6FJsCR8EFpF1xsGAl//KmiAVXhuLWfIOB4PdLLdCCkl/rzGWChIpC
GOpMxrSE5ugoB08tNP8TkwnR27WiT0gC
-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:21 2024 by rpki-client on console-ams.rpki-client.org