Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File:                     AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier:          bwBsJObQcKzQGJK17s90HisVUTLWHEhmc01mcTT7kJs=
Subject key identifier:   17:E2:4B:C4:A1:E7:99:87:A2:47:F4:2A:DE:31:3E:D4:C9:5E:80:4E
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer:       /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial:       0217
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number:          0213
Signing time:             Sat 23 Nov 2024 01:32:37 +0000
Manifest this update:     Sat 23 Nov 2024 01:32:36 +0000
Manifest next update:     Sat 30 Nov 2024 01:32:36 +0000
Files and hashes:         1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: PVfKqeIR6jBf4c4Qp++opTJpwfkz5TxDml33SwMbKDo=)
                          2: 59179A7E0F3211EDA9D57685C4F9AE02.roa (hash: rMev8024uF8TEESVT+FsfOfbRH+3KQX0Th9l2lAdoEA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
        Validity
            Not Before: Nov 23 01:32:36 2024 GMT
            Not After : Nov 30 01:32:36 2024 GMT
        Subject: CN=674130b4-520a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:1e:2f:f1:e8:89:d6:19:a4:33:61:94:2d:
                    58:14:73:64:2e:85:01:e7:8c:63:f9:06:27:b5:14:
                    41:06:13:25:1a:39:21:19:f4:18:d1:ce:ab:17:b7:
                    4c:67:0b:22:90:8f:92:7c:b1:cc:49:7b:1a:57:1b:
                    a1:e6:bd:7e:f1:2f:a4:fe:63:25:10:1a:e3:c2:2a:
                    1f:9b:29:54:55:c4:5e:ed:7f:dc:ec:c0:b2:d3:5d:
                    59:f2:c5:54:3f:75:2d:4b:82:bf:3d:db:d1:61:f5:
                    47:1a:c1:53:f5:40:86:62:c5:4f:3b:d0:86:dd:34:
                    92:30:79:95:1d:c1:b2:fd:a4:1c:a7:c0:56:7e:98:
                    36:09:a4:1f:5b:bb:32:4a:20:40:3c:08:01:7b:7e:
                    91:8d:c6:31:e1:79:97:e9:9f:6a:3c:30:e1:89:3d:
                    a8:c0:2a:61:7f:0b:1f:f4:36:d1:55:64:2e:9f:85:
                    3f:f4:a8:ab:d9:b9:1e:52:6f:23:91:77:02:e4:5c:
                    0b:ef:7f:2d:f2:68:dd:78:f5:fe:14:3c:0a:0e:20:
                    63:dd:bd:09:94:6e:49:03:fc:58:98:67:5d:38:7f:
                    e0:33:19:57:36:7e:b6:d8:98:2c:18:be:fc:e0:49:
                    24:6c:04:b0:07:10:9d:ad:26:41:21:d1:b6:6d:3c:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E2:4B:C4:A1:E7:99:87:A2:47:F4:2A:DE:31:3E:D4:C9:5E:80:4E
            X509v3 Authority Key Identifier:
                keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:42:1d:37:b5:5a:f2:8b:91:82:6b:6b:e5:9c:03:66:1a:dd:
         46:a6:64:6e:ac:80:0a:a8:3c:fb:12:a8:c7:50:36:09:f4:19:
         14:cb:21:24:f4:fb:98:6c:c4:0c:79:aa:05:23:f6:fb:0d:35:
         79:35:7b:a5:af:a0:61:56:41:0b:e5:b7:0a:cb:ed:2f:b1:4a:
         f1:7d:c4:48:7f:25:da:8c:14:de:0f:50:8b:97:82:b0:a4:0f:
         8f:b2:44:3e:c1:fa:d9:8b:dc:2d:3c:80:a8:fc:2f:1e:4e:0d:
         7d:cd:0f:ac:87:d6:fb:60:5a:c6:8a:a0:2c:1d:f7:18:de:17:
         46:aa:3a:43:13:83:79:21:c7:69:c8:2a:03:bc:35:2a:4a:d8:
         3f:21:1f:c9:29:1f:e5:4a:e8:5f:90:98:80:2d:db:fe:08:83:
         8f:2a:c5:ce:51:c3:e9:7b:d5:db:96:76:44:1c:f1:2a:66:fb:
         1c:ad:b0:64:06:fb:b5:30:f4:d3:04:1b:c2:85:ad:bd:10:00:
         ab:04:ce:f2:9f:38:1d:ac:a1:46:80:7c:9a:27:ea:3f:50:f4:
         19:2f:bc:e1:c7:29:b5:00:a1:80:dd:96:15:ec:67:6f:35:4c:
         05:1a:a2:7a:83:35:98:5d:90:25:7f:8b:5a:42:21:65:23:60:
         4c:3b:ec:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVFNDAxMTAvBgNVBAUTKDAzMDUxODU3MzVFMDk3RUZCMzZBODYwNjUzQjI1M0FC
RTlGRTExNUMwHhcNMjQxMTIzMDEzMjM2WhcNMjQxMTMwMDEzMjM2WjAYMRYwFAYD
VQQDEw02NzQxMzBiNC01MjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy2EeL/HoidYZpDNhlC1YFHNkLoUB54xj+QYntRRBBhMlGjkhGfQY0c6rF7dM
ZwsikI+SfLHMSXsaVxuh5r1+8S+k/mMlEBrjwiofmylUVcRe7X/c7MCy011Z8sVU
P3UtS4K/PdvRYfVHGsFT9UCGYsVPO9CG3TSSMHmVHcGy/aQcp8BWfpg2CaQfW7sy
SiBAPAgBe36RjcYx4XmX6Z9qPDDhiT2owCphfwsf9DbRVWQun4U/9Kir2bkeUm8j
kXcC5FwL738t8mjdePX+FDwKDiBj3b0JlG5JA/xYmGddOH/gMxlXNn622JgsGL78
4EkkbASwBxCdrSZBIdG2bTw6hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfiS8Sh
55mHokf0Kt4xPtTJXoBOMB8GA1UdIwQYMBaAFAMFGFc14Jfvs2qGBlOyU6vp/hFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0MC8wRUVDMjlGODBG
MzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wtLXphb1lHVTdKVHEtbi1F
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F3VVlWelhnbC0temFvWUdVN0pUcS1uLUVWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RUU0MC8wRUVDMjlGODBGMzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wt
LXphb1lHVTdKVHEtbi1FVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCQh03tVryi5GCa2vlnANmGt1GpmRurIAKqDz7EqjHUDYJ9BkUyyEk
9PuYbMQMeaoFI/b7DTV5NXulr6BhVkEL5bcKy+0vsUrxfcRIfyXajBTeD1CLl4Kw
pA+PskQ+wfrZi9wtPICo/C8eTg19zQ+sh9b7YFrGiqAsHfcY3hdGqjpDE4N5Icdp
yCoDvDUqStg/IR/JKR/lSuhfkJiALdv+CIOPKsXOUcPpe9XblnZEHPEqZvscrbBk
Bvu1MPTTBBvCha29EACrBM7ynzgdrKFGgHyaJ+o/UPQZL7zhxym1AKGA3ZYV7Gdv
NUwFGqJ6gzWYXZAlf4taQiFlI2BMO+yc
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:43 2024 by rpki-client on console-fra.rpki-client.org