Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
File:                     63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json)
Hash identifier:          tC8S7XTtVo3vIYV+a141s+sEiqsQWIis4ly1n/myNrA=
Subject key identifier:   6A:06:20:FE:6A:9C:5E:63:7E:65:5F:E5:81:36:37:7E:63:07:44:70
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       354E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
Manifest number:          3493
Signing time:             Fri 22 Nov 2024 14:54:36 +0000
Manifest this update:     Fri 22 Nov 2024 14:54:35 +0000
Manifest next update:     Fri 29 Nov 2024 14:54:35 +0000
Files and hashes:         1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: EHgfWw8zSMlAfqh0RvFXQ5PIMNbXBQ2VhJFaQ+oDhPo=)
                          2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: Zph4qw7OPknDovoxX3cm0uRfAXTr+TUdnZIAn859WAM=)
                          3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: rbHmJ7wg+EQEHnyfTG4+nvFCGTpxVf1MlsE3F9F45/k=)
                          4: BB8E79F23D7211ED80C24116C4F9AE02.roa (hash: /UQcwZPg26VqsQtvRJJDSvHXzuNexFFzMoF+ofGjcoo=)
                          5: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: pLbQqr89P4AkmvOvi7BDliGKTzDAbmdTOjVTjIAl6bU=)
                          6: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: VwL1SA1XYUQEX2a/7luueLDgNwQBDHg9AU4D4r2vHAQ=)
                          7: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: QrrS2VxYNscI/BOk9bE6lCTC7XbP/jpfa//4gPNZQ8Y=)
                          8: 355461A4372C11EDB1059640C4F9AE02.roa (hash: koGkOVdAIOzAkdXNFvneL4bWaW+bmp6jpepdCCYoFbI=)
                          9: 347735B4C00511EE82324069C4F9AE02.roa (hash: fNvMfFA8SZsS2jWyHTOpKkLQBUAi5cx79SftmeTD8YM=)
                          10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: L/jYt5xxPCKBnIXxZUdgTrcg+twE9nZDfu0Pnb+WIaQ=)
                          11: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: 1tIVsx8hYlvkqLU4QzVnNUag+wclIVuhXc3VSs3WI6A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13646 (0x354e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Nov 22 14:54:35 2024 GMT
            Not After : Nov 29 14:54:35 2024 GMT
        Subject: CN=67409b2b-87c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:14:9f:95:cc:df:3e:35:de:ee:00:f2:c3:
                    1a:08:81:f0:f8:b6:1e:cd:7f:80:ca:04:20:b7:d8:
                    40:93:3b:30:54:5d:1e:ab:41:e9:13:15:5c:17:16:
                    e1:6c:c8:db:4f:9e:d5:1c:bc:03:fe:c1:1c:41:86:
                    7a:c7:b2:7b:18:8a:a8:54:e3:99:ff:ac:34:f6:bd:
                    53:72:fd:8f:83:d6:b0:a1:69:2e:c4:16:14:4e:25:
                    a1:9a:98:ae:ae:fa:b9:1c:63:7a:87:d4:86:21:7f:
                    2e:30:ef:cb:38:be:be:70:09:8f:12:ae:e9:dc:be:
                    73:44:11:19:5a:62:6c:94:e8:0b:5d:45:49:0b:9a:
                    c9:78:cb:23:8d:e7:c3:6d:0b:f2:c8:4d:1b:63:82:
                    b5:04:bf:bb:93:18:77:b0:25:c2:b0:e2:a1:09:9e:
                    c6:ba:c3:db:68:a3:97:ba:62:b4:dd:56:04:90:33:
                    0c:ab:59:f0:0b:4a:c7:6c:c9:23:91:76:c4:b9:86:
                    7c:40:77:d9:d0:b9:6b:34:07:35:6a:66:16:32:df:
                    d9:7b:a5:18:a4:76:85:97:bb:65:b8:76:99:f9:e2:
                    e7:2b:00:68:36:3d:b4:c0:48:59:d1:d7:70:ae:07:
                    2c:4a:cf:7a:3e:95:e5:42:0f:2c:61:7c:4d:2d:cc:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:06:20:FE:6A:9C:5E:63:7E:65:5F:E5:81:36:37:7E:63:07:44:70
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:50:e8:89:e1:b8:83:4d:5d:d9:e2:2d:6c:99:28:28:65:90:
         bf:8b:85:a4:da:6e:23:50:4a:83:40:06:c1:d1:df:94:40:c3:
         18:38:84:e3:b8:22:7c:61:ed:a6:4d:e8:44:21:71:27:57:10:
         7d:76:96:1a:7d:75:ab:1f:5d:4f:ff:00:e5:6d:bb:f8:c8:b1:
         9d:ee:99:bd:4d:61:bc:51:1f:82:91:eb:47:35:3c:eb:cd:9b:
         8a:1b:f2:2e:36:75:77:41:d3:f5:99:6b:e9:2e:88:7d:e5:30:
         51:d9:46:af:a4:98:92:0c:93:86:57:9d:d9:6c:b0:70:03:ea:
         ff:10:8c:25:26:45:60:fd:e6:9e:d3:e3:f7:a9:b9:04:95:4a:
         09:0b:dd:a9:f7:04:08:d5:3d:cf:01:70:6b:3a:64:6c:68:f8:
         7a:1d:98:cc:de:af:d5:bd:4f:7a:30:0b:e1:e1:78:03:e1:ac:
         88:48:73:6b:64:f0:1b:1b:47:6e:a7:4d:fd:01:d8:65:53:04:
         61:ef:26:b0:76:62:17:20:03:04:92:20:ef:a5:ce:30:55:ae:
         45:16:aa:2a:1a:f7:60:e0:17:8d:a3:56:78:db:89:7d:96:e2:
         3d:61:f5:4c:a4:7c:ab:d9:ae:fe:8c:54:22:15:8b:d6:a9:4f:
         34:88:a9:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB
RUE2RkY4MDYwHhcNMjQxMTIyMTQ1NDM1WhcNMjQxMTI5MTQ1NDM1WjAYMRYwFAYD
VQQDEw02NzQwOWIyYi04N2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxfIUn5XM3z413u4A8sMaCIHw+LYezX+AygQgt9hAkzswVF0eq0HpExVcFxbh
bMjbT57VHLwD/sEcQYZ6x7J7GIqoVOOZ/6w09r1Tcv2Pg9awoWkuxBYUTiWhmpiu
rvq5HGN6h9SGIX8uMO/LOL6+cAmPEq7p3L5zRBEZWmJslOgLXUVJC5rJeMsjjefD
bQvyyE0bY4K1BL+7kxh3sCXCsOKhCZ7GusPbaKOXumK03VYEkDMMq1nwC0rHbMkj
kXbEuYZ8QHfZ0LlrNAc1amYWMt/Ze6UYpHaFl7tluHaZ+eLnKwBoNj20wEhZ0ddw
rgcsSs96PpXlQg8sYXxNLcydjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoGIP5q
nF5jfmVf5YE2N35jB0RwMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE
OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD
VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBeUOiJ4biDTV3Z4i1smSgoZZC/i4Wk2m4jUEqDQAbB0d+UQMMYOITj
uCJ8Ye2mTehEIXEnVxB9dpYafXWrH11P/wDlbbv4yLGd7pm9TWG8UR+CketHNTzr
zZuKG/IuNnV3QdP1mWvpLoh95TBR2UavpJiSDJOGV53ZbLBwA+r/EIwlJkVg/eae
0+P3qbkElUoJC92p9wQI1T3PAXBrOmRsaPh6HZjM3q/VvU96MAvh4XgD4ayISHNr
ZPAbG0dup039AdhlUwRh7yawdmIXIAMEkiDvpc4wVa5FFqoqGvdg4BeNo1Z424l9
luI9YfVMpHyr2a7+jFQiFYvWqU80iKlV
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org