Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
File:                     cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft (raw, json)
Hash identifier:          mM4AGK6aiHkGSzw8msns6nE+PZGkQ6uwiPuqRlRUfRI=
Subject key identifier:   A3:03:81:A8:62:8F:68:69:96:09:FF:D5:27:07:B4:21:B4:97:D1:1A
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
Manifest number:          010A
Signing time:             Thu 21 Nov 2024 03:27:07 +0000
Manifest this update:     Thu 21 Nov 2024 03:27:06 +0000
Manifest next update:     Thu 28 Nov 2024 03:27:06 +0000
Files and hashes:         1: cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl (hash: wuBtBjEyGVNN9xHBIqO2eDR1TEAAPVx1tePZSKPveKg=)
                          2: 9DB1FB565EA511EFBA70FD68C4F9AE02.roa (hash: 4Ah/QLfJHlIj6dW20RpkEQlUiHl1IpCVTVGIN9SKd94=)
                          3: 9AADC284366311EEB376DC3AC4F9AE02.roa (hash: 7n+dP3DomtnmMtbxA80Fq/rZrQRw0nuu83uCWiKsr0A=)
                          4: 986FD2A0366311EEB376DC3AC4F9AE02.roa (hash: GhhggZHcmG8xazItX7R9+gh23ZMJG7qSLYcPNvSJFoE=)
                          5: 9767C3CC366311EEB376DC3AC4F9AE02.roa (hash: /kzB6t0e2pIjrtu3XsEpKLUUcDNjuBfLcGgruTa29yo=)
                          6: 75A05C926E8211EFA843807EC4F9AE02.roa (hash: MjTh8AW1DZ7u20XYuEekJB2oVk8O+HGzspm35tkqSi4=)
                          7: 97F664EC366311EEB376DC3AC4F9AE02.roa (hash: jVgsFzrdDjMbKaPnRbnUFCbiiTiaCFys2RcAiFEFE1Y=)
                          8: 9663A3B0366311EEB376DC3AC4F9AE02.roa (hash: wnmUO76JZp85+6TihvqjqAM1N82zX1eYSMWfhDXNXJY=)
                          9: BFDC8CE68AAB11EF93DB792CC4F9AE02.roa (hash: sVEWr8cHjR39v6HfMG/t80nfPCrUOYbbrrhYH6aQohw=)
                          10: 99B68AAA366311EEB376DC3AC4F9AE02.roa (hash: HqHx/0ENjdkTLzMg3QNvatBgii/b6Dv1FTm2YDg1foE=)
                          11: 80B19E569D2211EF9347847CC4F9AE02.roa (hash: 9ZtPkhQguMFKS+J3dbwsQGRe1bfxO+SzVsu3mqO53M8=)
                          12: 96EE3F5C366311EEB376DC3AC4F9AE02.roa (hash: iqhmC9coSd2mzPbX3c1Fi/SFAwy7h2jkexQ+YuDufDA=)
                          13: DC25866C6E6011EF830E7360C4F9AE02.roa (hash: OxiDT0SIFYyQoxxlhldZuYHR+pzMlUPJXfn9ZyBjWvM=)
                          14: 95EA48DA366311EEB376DC3AC4F9AE02.roa (hash: C4dhE2J+JR7WSKraMxcvR+Zja04JWKmYhWbZTHMV9AY=)
                          15: 993E65A2366311EEB376DC3AC4F9AE02.roa (hash: fVieB3CbqkvA15ScxDkYzRN045+h0GFMVwnZjL5ZWgk=)
                          16: 957D5E14366311EEB376DC3AC4F9AE02.roa (hash: pgOaeP/yDCO2Cd6nEAR34lCV049Kw8nNm7xRomHrUYU=)
                          17: 9B616A50366311EEB376DC3AC4F9AE02.roa (hash: uBzB0Mx36ap5dWU5XV4Be+Yi0frCuCO0c0j3Jvjl9Eo=)
                          18: 9C62F7D4366311EEB376DC3AC4F9AE02.roa (hash: 9g3C+nEwKUK4F3WWkxyvzCO8aTpUHXvcIzgpC5OoQrM=)
                          19: 9BDF5D70366311EEB376DC3AC4F9AE02.roa (hash: uTpk1PzmtkDm1Pw1+mRz53sS8x0F8j3TW2RqmuyIpuA=)
                          20: 9A3920B4366311EEB376DC3AC4F9AE02.roa (hash: O/ffCsKG2xasRSJeYinW7rjVtt6bLKUgyWdrzBes+/k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Nov 21 03:27:06 2024 GMT
            Not After : Nov 28 03:27:06 2024 GMT
        Subject: CN=673ea88b-e6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:ba:4e:b9:0b:00:44:e3:79:43:13:b5:8a:
                    02:4a:cf:84:a7:09:8b:83:2d:fb:a5:7c:9c:6b:db:
                    a0:48:3b:33:87:0b:6b:27:34:a9:4d:bf:95:9b:56:
                    d8:d6:4c:48:9e:d1:50:c0:46:fd:6e:8b:c5:e4:3f:
                    aa:d7:96:a9:62:85:c7:f8:3b:57:e0:ca:32:94:48:
                    a9:46:b9:0b:38:25:be:1e:85:f4:53:24:a0:42:05:
                    29:2d:f9:9d:ae:d5:51:40:e3:8f:59:35:aa:b7:6e:
                    48:f6:ca:e0:be:62:72:74:de:8d:bf:e9:b8:84:91:
                    32:39:3c:9e:fe:f1:4e:ae:10:54:94:e8:bd:be:3f:
                    ce:0b:6a:39:0d:2d:a3:d8:5b:7c:74:34:af:86:b2:
                    57:ad:04:18:13:9b:92:57:61:72:4c:fb:96:e7:c8:
                    24:34:87:0a:21:27:77:24:01:0f:a8:72:b5:1e:b1:
                    92:3b:4f:a7:10:9c:2c:5c:f6:71:a2:04:20:07:e6:
                    8c:bc:ae:0a:53:68:3f:99:3f:52:a7:97:1a:f6:f8:
                    a0:87:fc:7c:84:26:73:4d:05:11:34:61:4e:2f:f2:
                    ed:8a:52:ea:2e:93:58:d8:64:8a:1a:43:b0:bf:93:
                    68:c0:b9:8e:4b:c8:80:20:9e:2c:a7:3c:7d:44:78:
                    9c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:03:81:A8:62:8F:68:69:96:09:FF:D5:27:07:B4:21:B4:97:D1:1A
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a2:f0:d4:98:62:d1:20:20:a8:4f:32:d0:1d:19:ba:6b:7d:
         2b:c2:0e:19:4c:c7:5c:3e:96:55:90:7b:b2:ad:4d:48:f5:f3:
         9e:5d:e6:99:e5:1b:d8:a4:72:78:09:6b:70:ca:36:8d:dd:d7:
         51:b7:04:bf:73:19:83:8a:b5:b4:5f:59:7d:50:f3:a6:f3:a0:
         ff:8b:cf:11:c8:dd:b5:58:45:18:6a:7c:f6:8c:c7:94:b7:6d:
         f8:fd:68:d7:d9:6c:dc:58:04:83:e3:21:4c:ce:be:1b:6e:f6:
         b6:bc:6d:0b:6b:79:9d:e9:19:0e:05:5b:92:1e:29:f9:01:9b:
         d5:58:ea:65:d7:c8:40:1c:1f:35:88:e5:35:18:0f:d2:c5:b7:
         27:bf:8f:62:66:aa:01:87:df:57:84:cf:d5:4c:29:4c:2d:1c:
         e8:af:a6:35:c6:0b:fe:f5:ae:13:00:ca:03:68:fb:60:dd:4a:
         ce:30:5c:77:ad:61:0b:97:24:04:05:74:19:60:cf:d5:f9:9d:
         c7:00:ff:1e:01:27:a7:e2:12:b4:39:7d:6a:4d:84:91:ca:2b:
         41:48:92:6b:77:aa:59:63:c6:5c:8c:00:9f:9e:db:93:b6:91:
         bc:e2:3b:b0:07:69:f4:d5:a7:4e:5c:dc:6a:4d:8d:12:f3:d4:
         00:ab:66:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKDcxRjQwMjE4QzFBRjQ3QzVFOTkzQTIxQTJCMjkyODRF
NEMzMkM5MzQwHhcNMjQxMTIxMDMyNzA2WhcNMjQxMTI4MDMyNzA2WjAYMRYwFAYD
VQQDEw02NzNlYTg4Yi1lNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvv26TrkLAETjeUMTtYoCSs+EpwmLgy37pXyca9ugSDszhwtrJzSpTb+Vm1bY
1kxIntFQwEb9bovF5D+q15apYoXH+DtX4MoylEipRrkLOCW+HoX0UySgQgUpLfmd
rtVRQOOPWTWqt25I9srgvmJydN6Nv+m4hJEyOTye/vFOrhBUlOi9vj/OC2o5DS2j
2Ft8dDSvhrJXrQQYE5uSV2FyTPuW58gkNIcKISd3JAEPqHK1HrGSO0+nEJwsXPZx
ogQgB+aMvK4KU2g/mT9Sp5ca9vigh/x8hCZzTQURNGFOL/LtilLqLpNY2GSKGkOw
v5NowLmOS8iAIJ4spzx9RHiclwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMDgahi
j2hplgn/1ScHtCG0l9EaMB8GA1UdIwQYMBaAFHH0AhjBr0fF6ZOiGispKE5MMsk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy82REUzQ0U3QzM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4WHBrNklhS3lrb1Rrd3l5
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2NmUUNHTUd2UjhYcGs2SWFLeWtvVGt3eXlUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTM2Qy82REUzQ0U3QzM2NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4
WHBrNklhS3lrb1Rrd3l5VFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCrovDUmGLRICCoTzLQHRm6a30rwg4ZTMdcPpZVkHuyrU1I9fOeXeaZ
5RvYpHJ4CWtwyjaN3ddRtwS/cxmDirW0X1l9UPOm86D/i88RyN21WEUYanz2jMeU
t234/WjX2WzcWASD4yFMzr4bbva2vG0La3md6RkOBVuSHin5AZvVWOpl18hAHB81
iOU1GA/Sxbcnv49iZqoBh99XhM/VTClMLRzor6Y1xgv+9a4TAMoDaPtg3UrOMFx3
rWELlyQEBXQZYM/V+Z3HAP8eASen4hK0OX1qTYSRyitBSJJrd6pZY8ZcjACfntuT
tpG84juwB2n01adOXNxqTY0S89QAq2b/
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org