Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
File:                     qQILYm9QRkjk2_akIHbomXPEq8A.mft (raw, json)
Hash identifier:          N17DGb9S7rL+0k4pHv/xISs38italSXI+1H4BkyIeEU=
Subject key identifier:   C9:DA:04:B4:E1:99:BC:D4:5C:B0:83:DF:22:24:33:50:E9:4A:07:00
Authority key identifier: A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0
Certificate issuer:       /CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0
Certificate serial:       07C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
Manifest number:          07BD
Signing time:             Fri 22 Nov 2024 20:43:34 +0000
Manifest this update:     Fri 22 Nov 2024 20:43:33 +0000
Manifest next update:     Fri 29 Nov 2024 20:43:33 +0000
Files and hashes:         1: qQILYm9QRkjk2_akIHbomXPEq8A.crl (hash: Km0obfH8ORkXp+7VjpZrj571s3fcipkGUFRcgvUoI08=)
                          2: 0446C8B2945911EB83AC5363C4F9AE02.roa (hash: XgD24201nYGGWIPhAWXOM6yau57LLbr5Mjm1/Cxhbmw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl
                          rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991 (0x7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0
        Validity
            Not Before: Nov 22 20:43:33 2024 GMT
            Not After : Nov 29 20:43:33 2024 GMT
        Subject: CN=6740ecf6-083d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:95:e3:5f:d5:b2:7d:09:64:bd:f6:0e:5b:
                    a4:c1:5a:9b:ea:ea:fa:2f:d9:c8:27:3b:bb:5f:b3:
                    c3:64:e3:48:0e:89:4b:e4:6a:8b:c0:89:d0:61:49:
                    2d:72:27:83:90:cd:ee:1f:78:52:b1:82:30:2b:c6:
                    ef:36:e7:b9:a9:e5:af:c3:0c:09:09:85:6c:e9:b2:
                    72:9d:11:1e:26:32:65:7a:b4:0a:b6:ed:27:34:9a:
                    81:6b:b2:10:69:4b:92:ee:7f:ed:58:9e:51:59:e4:
                    25:eb:0f:b7:ac:5d:6c:3d:82:ae:8c:17:4b:e2:11:
                    eb:26:99:6d:37:17:ef:2b:2f:56:12:9a:4f:ff:25:
                    e8:94:d0:45:a6:37:a5:52:3d:3e:11:f6:37:d8:db:
                    ed:a7:d2:2b:33:dd:96:20:18:ff:4c:1f:7f:95:51:
                    ed:f5:bf:34:b1:2d:bc:d3:39:f3:67:87:c5:be:2c:
                    ef:00:d7:94:f4:af:9b:73:70:3e:68:66:3b:ff:df:
                    08:d1:74:62:e6:6d:e8:af:a9:25:fd:e3:dc:84:fa:
                    61:b8:39:7e:7a:85:69:9f:82:c9:26:6a:41:b9:5a:
                    c9:18:57:af:48:94:45:1e:44:8e:8b:6d:89:96:0b:
                    37:13:34:7e:3e:14:0c:db:c2:a0:cd:42:27:4d:af:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DA:04:B4:E1:99:BC:D4:5C:B0:83:DF:22:24:33:50:E9:4A:07:00
            X509v3 Authority Key Identifier:
                keyid:A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:54:7d:71:7f:f3:63:89:ce:2d:b9:02:ce:53:a8:25:f2:f4:
         a1:86:39:62:b9:da:6f:4c:eb:23:5e:24:09:d8:5e:84:13:c5:
         e8:81:e0:ca:1c:44:37:9f:a6:6f:3f:da:85:d8:b9:33:59:4d:
         41:01:63:40:14:c5:00:5a:f6:52:65:43:f1:b2:a8:10:23:eb:
         ed:55:44:c7:48:67:a3:1a:7b:e3:f0:50:19:ea:07:a0:19:fd:
         d9:ae:ea:7a:7a:84:5e:4f:b6:46:d3:21:84:e9:41:fb:88:5d:
         86:e4:90:af:ad:2f:20:ed:ae:66:f2:f1:29:2a:51:4e:e8:45:
         04:fa:39:4a:f7:47:fa:47:c1:af:91:d9:79:7e:6e:d6:23:bb:
         c6:e2:75:99:9a:34:bf:e4:83:c0:22:73:29:54:35:1e:94:a5:
         e6:d6:d9:b4:b9:f8:3f:23:1a:b1:f7:09:9a:ea:61:01:8a:48:
         d8:f4:d2:1a:40:b6:a0:c6:c6:e7:f4:53:74:a7:44:99:1d:94:
         4d:62:7a:08:ec:f3:d6:3f:e3:7b:0f:e8:e3:4a:a0:3a:f7:ec:
         48:a8:a4:63:7d:5e:26:39:c3:32:7c:84:e8:bb:ec:56:eb:0e:
         47:45:43:e9:69:d9:65:d3:80:3d:73:06:04:b1:d7:a5:63:84:
         60:60:99:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OThENkIxMTAvBgNVBAUTKEE5MDIwQjYyNkY1MDQ2NDhFNERCRjZBNDIwNzZFODk5
NzNDNEFCQzAwHhcNMjQxMTIyMjA0MzMzWhcNMjQxMTI5MjA0MzMzWjAYMRYwFAYD
VQQDEw02NzQwZWNmNi0wODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsDqV41/Vsn0JZL32DlukwVqb6ur6L9nIJzu7X7PDZONIDolL5GqLwInQYUkt
cieDkM3uH3hSsYIwK8bvNue5qeWvwwwJCYVs6bJynREeJjJlerQKtu0nNJqBa7IQ
aUuS7n/tWJ5RWeQl6w+3rF1sPYKujBdL4hHrJpltNxfvKy9WEppP/yXolNBFpjel
Uj0+EfY32Nvtp9IrM92WIBj/TB9/lVHt9b80sS280znzZ4fFvizvANeU9K+bc3A+
aGY7/98I0XRi5m3or6kl/ePchPphuDl+eoVpn4LJJmpBuVrJGFevSJRFHkSOi22J
lgs3EzR+PhQM28KgzUInTa+VGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnaBLTh
mbzUXLCD3yIkM1DpSgcAMB8GA1UdIwQYMBaAFKkCC2JvUEZI5Nv2pCB26JlzxKvA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ2Qi84MUU4M0Y2MkQ2
NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJramsyX2FrSUhib21YUEVx
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FRSUxZbTlRUmtqazJfYWtJSGJvbVhQRXE4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OEQ2Qi84MUU4M0Y2MkQ2NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJr
amsyX2FrSUhib21YUEVxOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWVH1xf/Njic4tuQLOU6gl8vShhjliudpvTOsjXiQJ2F6EE8XogeDK
HEQ3n6ZvP9qF2LkzWU1BAWNAFMUAWvZSZUPxsqgQI+vtVUTHSGejGnvj8FAZ6geg
Gf3Zrup6eoReT7ZG0yGE6UH7iF2G5JCvrS8g7a5m8vEpKlFO6EUE+jlK90f6R8Gv
kdl5fm7WI7vG4nWZmjS/5IPAInMpVDUelKXm1tm0ufg/Ixqx9wma6mEBikjY9NIa
QLagxsbn9FN0p0SZHZRNYnoI7PPWP+N7D+jjSqA69+xIqKRjfV4mOcMyfITou+xW
6w5HRUPpadll04A9cwYEsdelY4RgYJlQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:35 2024 by rpki-client on console-ams.rpki-client.org