Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
File:                     Z15jpMF4xvVmAmQCRHJGTrmOG10.mft (raw, json)
Hash identifier:          MCGn0+tp+fSMlhLN6dV8cO7Xg4zx816B2rS87RQ4Hdo=
Subject key identifier:   AE:1C:79:50:7F:3D:24:99:C6:D2:A9:55:E8:CC:4A:D4:78:1E:3F:22
Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D
Certificate issuer:       /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
Certificate serial:       03C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
Manifest number:          03BA
Signing time:             Fri 03 May 2024 02:33:29 +0000
Manifest this update:     Fri 03 May 2024 02:33:28 +0000
Manifest next update:     Fri 10 May 2024 02:33:28 +0000
Files and hashes:         1: Z15jpMF4xvVmAmQCRHJGTrmOG10.crl (hash: 24FinP2oN+r2PL0mUoBp+e2VaQ4thsdoJEZWxk1MdLk=)
                          2: CBCD0962B91511EE865E5E34C4F9AE02.roa (hash: MPMU7OUgYBl620yvxDyqpFHZiff0gi36DqlHhDnMud4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl
                          rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 00:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
        Validity
            Not Before: May  3 02:33:28 2024 GMT
            Not After : May 10 02:33:28 2024 GMT
        Subject: CN=66344cf9-0259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:30:0a:3d:08:30:17:88:cb:5e:4a:ba:f7:
                    16:7a:3e:74:78:36:1f:fd:47:c0:62:f2:e6:78:1a:
                    6d:93:5b:82:59:42:40:30:94:ec:87:10:32:f2:fd:
                    97:c5:bd:65:c6:39:8e:8d:3d:92:4b:01:ce:59:22:
                    d2:49:e2:d4:a8:75:eb:c8:ab:e2:96:bf:36:83:af:
                    51:ba:47:b9:7b:0d:6f:46:ac:41:5e:f9:68:a3:6f:
                    00:62:7c:71:15:f8:7a:22:b0:69:23:32:1e:42:e9:
                    f0:29:4d:65:65:11:62:f9:79:63:e8:7a:6a:61:d4:
                    fb:f6:c0:40:4f:f1:40:57:5b:8b:16:b1:3e:da:17:
                    e9:90:af:c7:4c:fc:d2:51:54:d5:88:db:fa:17:bc:
                    ed:88:4f:7b:0a:95:b9:88:e1:35:30:99:f5:85:bf:
                    57:f7:4f:55:3a:40:a5:24:6c:b9:2a:5f:78:f2:2b:
                    b8:94:be:22:56:95:d0:e3:47:54:46:60:18:2e:1b:
                    05:a7:9b:5b:f9:d8:bc:75:83:3a:ba:e9:45:fe:19:
                    57:0a:6e:46:6d:f3:f9:01:3f:37:ef:c0:fd:89:00:
                    55:69:08:b3:99:5c:53:e5:6d:85:63:e2:33:38:82:
                    2e:63:d3:4f:36:5f:3c:73:1b:e0:12:80:3d:b8:61:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1C:79:50:7F:3D:24:99:C6:D2:A9:55:E8:CC:4A:D4:78:1E:3F:22
            X509v3 Authority Key Identifier:
                keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:06:40:0f:1e:82:11:24:ef:ec:fc:82:3a:f9:70:18:6a:71:
         4d:19:e6:24:97:ab:ac:0f:b3:c8:a2:21:ba:81:d1:04:2c:eb:
         39:38:01:07:98:0e:2f:a2:d0:33:a0:d2:a9:8d:74:18:6b:c6:
         e5:44:b6:72:6a:e6:13:84:e3:06:84:40:70:a6:c2:f3:78:34:
         63:33:d5:ff:7d:7e:93:7f:c0:6c:82:3f:d7:66:82:77:d6:21:
         e3:a5:e9:74:d2:2d:62:ef:39:e4:0a:f8:00:fa:5d:be:1e:d9:
         dd:f5:6e:4a:bf:ba:b6:ec:a1:9d:38:59:9b:c5:10:7b:ca:be:
         a8:dc:b1:ed:f0:ea:8b:09:e3:29:23:78:bd:87:34:96:8f:b6:
         d3:a3:0f:6a:d5:62:22:6f:f6:80:e8:f1:ee:09:af:59:ce:70:
         3d:53:0e:5d:e5:be:8b:71:87:0d:8d:c7:30:5b:9d:ad:e3:89:
         f5:8f:a6:1b:5a:fc:d9:78:b7:4a:41:f9:23:88:ba:b4:c2:6e:
         3c:b3:48:8b:6f:c0:97:57:cf:b9:8c:2b:25:8f:25:aa:61:45:
         b0:4f:c2:91:51:88:f6:f6:86:c5:57:65:48:a0:87:c6:a2:7e:
         f2:db:f4:60:18:4b:14:68:b6:c1:70:31:3f:4a:ba:22:31:e3:
         70:12:6d:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAxRkYxMTAvBgNVBAUTKDY3NUU2M0E0QzE3OEM2RjU2NjAyNjQwMjQ0NzI0NjRF
Qjk4RTFCNUQwHhcNMjQwNTAzMDIzMzI4WhcNMjQwNTEwMDIzMzI4WjAYMRYwFAYD
VQQDEw02NjM0NGNmOS0wMjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxwYwCj0IMBeIy15KuvcWej50eDYf/UfAYvLmeBptk1uCWUJAMJTshxAy8v2X
xb1lxjmOjT2SSwHOWSLSSeLUqHXryKvilr82g69Ruke5ew1vRqxBXvloo28AYnxx
Ffh6IrBpIzIeQunwKU1lZRFi+Xlj6HpqYdT79sBAT/FAV1uLFrE+2hfpkK/HTPzS
UVTViNv6F7ztiE97CpW5iOE1MJn1hb9X909VOkClJGy5Kl948iu4lL4iVpXQ40dU
RmAYLhsFp5tb+di8dYM6uulF/hlXCm5GbfP5AT8378D9iQBVaQizmVxT5W2FY+Iz
OIIuY9NPNl88cxvgEoA9uGFM4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4ceVB/
PSSZxtKpVejMStR4Hj8iMB8GA1UdIwQYMBaAFGdeY6TBeMb1ZgJkAkRyRk65jhtd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFGRi9COEMxRTdENDQx
MjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2Vm1BbVFDUkhKR1RybU9H
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1oxNWpwTUY0eHZWbUFtUUNSSEpHVHJtT0cxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDFGRi9COEMxRTdENDQxMjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2
Vm1BbVFDUkhKR1RybU9HMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHBkAPHoIRJO/s/II6+XAYanFNGeYkl6usD7PIoiG6gdEELOs5OAEH
mA4votAzoNKpjXQYa8blRLZyauYThOMGhEBwpsLzeDRjM9X/fX6Tf8Bsgj/XZoJ3
1iHjpel00i1i7znkCvgA+l2+Htnd9W5Kv7q27KGdOFmbxRB7yr6o3LHt8OqLCeMp
I3i9hzSWj7bTow9q1WIib/aA6PHuCa9ZznA9Uw5d5b6LcYcNjccwW52t44n1j6Yb
WvzZeLdKQfkjiLq0wm48s0iLb8CXV8+5jCsljyWqYUWwT8KRUYj29obFV2VIoIfG
on7y2/RgGEsUaLbBcDE/SroiMeNwEm2c
-----END CERTIFICATE-----
Generated at Fri May 3 03:10:55 2024 by rpki-client on console-ams.rpki-client.org