Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
File:                     mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json)
Hash identifier:          aCp6iP73ByzyTl3r8VQTKHcwD/BcIbMOm2D+JlOtxgA=
Subject key identifier:   9F:81:28:CF:91:79:12:C5:5C:CD:73:3D:BB:97:4B:B3:B9:6E:72:A8
Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43
Certificate issuer:       /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
Certificate serial:       030B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
Manifest number:          0307
Signing time:             Fri 03 May 2024 03:16:34 +0000
Manifest this update:     Fri 03 May 2024 03:16:33 +0000
Manifest next update:     Fri 10 May 2024 03:16:33 +0000
Files and hashes:         1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: 4UESlgriUhguYcbq/REUANkovcoYvFD1XNktVZICqW8=)
                          2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: NvR9oTP8aVtW41+HpR5ZnWPqrkmQ4StnKs9ffYZOrLM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl
                          rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779 (0x30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
        Validity
            Not Before: May  3 03:16:33 2024 GMT
            Not After : May 10 03:16:33 2024 GMT
        Subject: CN=66345711-21a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:af:d5:5e:e3:e8:ae:61:5d:bd:22:7b:92:
                    85:4a:94:04:9b:76:54:5d:e1:7b:f6:8c:39:76:c3:
                    7a:49:31:34:32:f9:f4:c7:b7:57:96:18:77:5b:86:
                    10:04:15:25:77:63:f0:b1:ec:d5:5c:28:37:70:30:
                    b8:e0:34:d4:c5:ff:ac:47:0e:20:fa:59:87:c4:ac:
                    ec:4e:f7:33:52:b2:bf:4f:fe:65:f2:5a:d1:d9:23:
                    1a:bf:2d:0c:fe:c2:ad:68:da:ec:e9:99:4b:02:cf:
                    4e:51:2f:a2:3a:f5:e8:6a:4c:76:fe:0b:a4:5a:5c:
                    db:15:29:fe:6d:54:3d:ac:9b:33:ef:0e:ce:c2:61:
                    58:05:74:eb:8d:c6:e8:9a:0e:51:d2:8d:7f:50:7c:
                    75:4c:80:a4:b3:4b:08:8c:1c:f2:6c:fe:a8:6c:b7:
                    cf:06:fe:1c:1c:a5:8e:c3:b1:14:52:04:b3:03:ad:
                    21:13:67:33:5b:92:ae:7f:f1:47:ff:b2:3e:30:e8:
                    27:dd:8b:86:a5:26:23:26:c2:95:88:ec:34:79:92:
                    98:7b:fc:26:ac:f4:ec:29:cb:83:6d:93:21:79:73:
                    07:06:e4:98:c4:a6:eb:8e:0c:00:bf:d9:a2:91:76:
                    9f:4e:10:76:1e:99:2d:04:bc:78:c0:76:0c:cc:a8:
                    57:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:81:28:CF:91:79:12:C5:5C:CD:73:3D:BB:97:4B:B3:B9:6E:72:A8
            X509v3 Authority Key Identifier:
                keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0e:1c:75:ac:2e:d7:89:08:b0:b4:f8:5e:f5:c8:b3:19:51:
         61:19:1c:c4:6d:1a:75:b1:8c:2f:19:58:de:6c:f9:6e:d1:f8:
         e1:57:60:3f:29:c5:9b:16:cd:a5:9a:8c:1e:4d:e0:25:83:b7:
         75:ea:6f:70:cb:f1:82:3d:cf:33:5c:1c:d4:02:7c:0a:ca:80:
         71:75:5d:53:95:24:bd:c6:eb:f3:00:92:9b:93:f6:07:c6:73:
         62:8a:fc:f8:ae:66:d4:a1:b5:6d:8b:e0:27:9f:74:38:f4:59:
         05:30:25:dd:84:6b:86:59:71:c8:44:6c:35:a8:5c:85:1a:38:
         6c:4f:e8:b7:a4:e1:30:aa:ab:61:3a:e4:a0:7d:45:9d:7f:0b:
         ff:a5:56:b0:b4:4f:1c:74:53:3e:19:4b:3e:99:50:c4:21:ef:
         18:ad:9b:54:3a:4d:b0:bd:8e:4e:b7:ec:64:24:1f:ac:18:38:
         b4:c6:c9:ce:81:bf:6f:58:61:8d:54:95:af:bc:40:e1:47:57:
         9f:1a:93:62:9a:43:9e:95:a4:61:63:a7:2f:05:f1:e7:b1:26:
         ff:a3:2a:fe:b1:b4:6b:f9:b6:0f:4f:97:cb:29:2e:15:9e:e2:
         af:bc:e3:97:63:75:58:f7:07:9f:4f:ff:ff:45:89:12:a6:06:
         44:ab:80:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1
NkU3NUM1NDMwHhcNMjQwNTAzMDMxNjMzWhcNMjQwNTEwMDMxNjMzWjAYMRYwFAYD
VQQDEw02NjM0NTcxMS0yMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxEav1V7j6K5hXb0ie5KFSpQEm3ZUXeF79ow5dsN6STE0Mvn0x7dXlhh3W4YQ
BBUld2PwsezVXCg3cDC44DTUxf+sRw4g+lmHxKzsTvczUrK/T/5l8lrR2SMavy0M
/sKtaNrs6ZlLAs9OUS+iOvXoakx2/gukWlzbFSn+bVQ9rJsz7w7OwmFYBXTrjcbo
mg5R0o1/UHx1TICks0sIjBzybP6obLfPBv4cHKWOw7EUUgSzA60hE2czW5Kuf/FH
/7I+MOgn3YuGpSYjJsKViOw0eZKYe/wmrPTsKcuDbZMheXMHBuSYxKbrjgwAv9mi
kXafThB2HpktBLx4wHYMzKhXNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+BKM+R
eRLFXM1zPbuXS7O5bnKoMB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3
REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjkwRi81QUIyNzUzRTg3REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQx
V0RJdHpWczN5OFJXNTF4VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRDhx1rC7XiQiwtPhe9cizGVFhGRzEbRp1sYwvGVjebPlu0fjhV2A/
KcWbFs2lmoweTeAlg7d16m9wy/GCPc8zXBzUAnwKyoBxdV1TlSS9xuvzAJKbk/YH
xnNiivz4rmbUobVti+Ann3Q49FkFMCXdhGuGWXHIRGw1qFyFGjhsT+i3pOEwqqth
OuSgfUWdfwv/pVawtE8cdFM+GUs+mVDEIe8YrZtUOk2wvY5Ot+xkJB+sGDi0xsnO
gb9vWGGNVJWvvEDhR1efGpNimkOelaRhY6cvBfHnsSb/oyr+sbRr+bYPT5fLKS4V
nuKvvOOXY3VY9wefT///RYkSpgZEq4AB
-----END CERTIFICATE-----
Generated at Fri May 3 04:45:20 2024 by rpki-client on console-fra.rpki-client.org