Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
File:                     PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json)
Hash identifier:          lK4+FGYgZBCJ0CAZy+NXB8ySREHbjirrMbAjQfP6/3U=
Subject key identifier:   E8:EF:AA:17:D5:1C:05:32:55:4F:24:6F:BD:9E:0B:B3:AD:B3:F8:13
Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC
Certificate issuer:       /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
Manifest number:          0126
Signing time:             Sat 23 Nov 2024 02:53:07 +0000
Manifest this update:     Sat 23 Nov 2024 02:53:07 +0000
Manifest next update:     Sat 30 Nov 2024 02:53:07 +0000
Files and hashes:         1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: 67f8g2dMmfn2LxKNvOHUQmh9sc1yZDDV9iwInszV4KI=)
                          2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: LOMVrGcpqBkYXud2B+9+0rUhLbtH2Vrj6cMlX58bV+A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl
                          rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
        Validity
            Not Before: Nov 23 02:53:07 2024 GMT
            Not After : Nov 30 02:53:07 2024 GMT
        Subject: CN=67414393-2014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:83:8c:b7:f9:56:93:8f:95:03:d9:68:df:
                    16:4c:46:71:19:af:1b:d5:e5:98:34:c8:2e:c0:8e:
                    f3:c7:85:13:9e:9d:50:a9:45:d1:d0:49:5b:a4:01:
                    ea:b8:97:f5:3c:ff:c3:85:5c:4d:51:fe:b5:97:10:
                    0e:60:1c:8b:4e:c0:0e:bd:ec:a8:ef:c8:6d:69:f3:
                    dd:09:6f:16:ac:75:b9:60:5c:d1:ad:cb:c7:15:1e:
                    93:05:a6:aa:ee:3b:c4:04:f5:fa:a1:f6:93:56:24:
                    09:11:3d:3a:4c:86:c3:9d:5b:67:8d:fa:00:8a:4d:
                    7a:d2:f9:1b:f5:29:84:69:cf:d4:2d:1e:4e:19:30:
                    00:6d:61:71:05:6c:b7:ff:6e:5a:4a:68:13:7e:61:
                    57:41:86:ac:11:17:c5:b7:7b:18:53:31:7a:11:54:
                    bc:06:ed:97:77:1f:a9:f6:cf:d2:e0:e1:02:83:9b:
                    ac:83:49:8f:b9:3f:2e:35:81:4e:77:79:16:57:c1:
                    ae:a7:24:37:77:34:59:af:99:82:e7:65:ee:68:ee:
                    9c:77:43:7d:f6:0b:25:46:93:d4:3b:cf:a6:d4:68:
                    cf:f7:ea:f4:2f:17:4e:f5:4d:05:48:16:fc:17:97:
                    e8:8b:34:d1:b3:88:c2:34:26:f3:d3:17:22:a1:24:
                    40:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EF:AA:17:D5:1C:05:32:55:4F:24:6F:BD:9E:0B:B3:AD:B3:F8:13
            X509v3 Authority Key Identifier:
                keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8e:fb:29:bc:88:37:dd:cd:94:f2:15:e3:1c:07:13:47:b8:
         c5:4d:1f:f8:b0:8e:92:0e:7c:db:20:14:69:4d:dc:15:4a:19:
         67:fb:bb:5a:41:a9:38:96:87:16:fc:bb:83:b1:8a:5f:79:78:
         a2:16:9b:e5:82:80:c7:f7:91:81:6a:db:56:5d:41:e5:1a:61:
         7c:98:91:1c:cd:b0:7d:da:67:b5:f2:22:10:70:3c:4e:15:6c:
         b8:f6:22:5c:14:df:7c:f7:d7:8b:9c:25:a0:98:fb:fd:df:fb:
         33:d8:84:db:9e:3b:f1:64:63:5a:da:ca:5f:c7:8a:8f:96:23:
         9e:cc:e1:8b:d3:d5:4b:73:48:6b:11:0e:b0:b4:ab:75:da:6d:
         44:51:24:7a:8b:95:8f:2b:16:2c:a8:ac:13:b0:3a:4f:7d:5b:
         59:0a:00:27:a3:97:3d:9b:7d:9e:2a:69:3d:33:79:f6:d6:dc:
         ec:09:7f:9d:a0:c5:4a:34:5f:5c:b2:47:be:9a:87:29:61:85:
         af:b6:35:1d:72:06:94:0d:d5:29:14:4a:aa:a2:14:2c:9d:4f:
         cd:dd:c1:fd:2e:9c:9e:95:47:b6:f1:29:1d:7f:a7:bf:98:ee:
         34:6c:4d:9b:3c:e2:28:4a:2a:2b:f0:ed:46:b7:8e:f0:22:4c:
         bf:9e:a0:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlCNUUxMTAvBgNVBAUTKDNEQkIyMUIzMzU4QjA4NUYwODIxQjREQzA2QTkxQTlD
NDVDNDJDQkMwHhcNMjQxMTIzMDI1MzA3WhcNMjQxMTMwMDI1MzA3WjAYMRYwFAYD
VQQDEw02NzQxNDM5My0yMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvXiDjLf5VpOPlQPZaN8WTEZxGa8b1eWYNMguwI7zx4UTnp1QqUXR0ElbpAHq
uJf1PP/DhVxNUf61lxAOYByLTsAOveyo78htafPdCW8WrHW5YFzRrcvHFR6TBaaq
7jvEBPX6ofaTViQJET06TIbDnVtnjfoAik160vkb9SmEac/ULR5OGTAAbWFxBWy3
/25aSmgTfmFXQYasERfFt3sYUzF6EVS8Bu2Xdx+p9s/S4OECg5usg0mPuT8uNYFO
d3kWV8GupyQ3dzRZr5mC52XuaO6cd0N99gslRpPUO8+m1GjP9+r0LxdO9U0FSBb8
F5foizTRs4jCNCbz0xcioSRApwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjvqhfV
HAUyVU8kb72eC7Ots/gTMB8GA1UdIwQYMBaAFD27IbM1iwhfCCG03AapGpxFxCy8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI1RS9GODcyM0ZFNEU5
NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENGOElJYlRjQnFrYW5FWEVM
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Bic2hzeldMQ0Y4SUliVGNCcWthbkVYRUxMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUI1RS9GODcyM0ZFNEU5NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENG
OElJYlRjQnFrYW5FWEVMTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQjvspvIg33c2U8hXjHAcTR7jFTR/4sI6SDnzbIBRpTdwVShln+7ta
Qak4locW/LuDsYpfeXiiFpvlgoDH95GBattWXUHlGmF8mJEczbB92me18iIQcDxO
FWy49iJcFN9899eLnCWgmPv93/sz2ITbnjvxZGNa2spfx4qPliOezOGL09VLc0hr
EQ6wtKt12m1EUSR6i5WPKxYsqKwTsDpPfVtZCgAno5c9m32eKmk9M3n21tzsCX+d
oMVKNF9cske+mocpYYWvtjUdcgaUDdUpFEqqohQsnU/N3cH9LpyelUe28Skdf6e/
mO40bE2bPOIoSior8O1Gt47wIky/nqB3
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:53 2024 by rpki-client on console-fra.rpki-client.org