Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
File:                     yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json)
Hash identifier:          rCbhjlgfd1ZeBiWltCz+rZJkdcYC9m0/DNGfZlF8xTo=
Subject key identifier:   17:B4:57:10:24:C1:9C:67:4A:92:61:B0:88:67:25:3B:59:84:FF:C6
Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
Certificate issuer:       /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Certificate serial:       100E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
Manifest number:          0FFC
Signing time:             Fri 22 Nov 2024 17:25:54 +0000
Manifest this update:     Fri 22 Nov 2024 17:25:54 +0000
Manifest next update:     Fri 29 Nov 2024 17:25:54 +0000
Files and hashes:         1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: L2AmPCp5B49+xkkDNCNyiRzOd9FVv64UTTqc6in/Bs4=)
                          2: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: xtz9Y7G/yiLqt3GEDOo767zpSDB3Z7BKoYv47Z3yFfc=)
                          3: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: 53Kre2BjfokqYZatLvHeac7RUyzpHwRQ0+cubvzXvb4=)
                          4: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: R9PMkjGXgOcQjk0/UQYLOxv5UDNqT04eK7DjfiWdfHY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
                          rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4110 (0x100e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
        Validity
            Not Before: Nov 22 17:25:54 2024 GMT
            Not After : Nov 29 17:25:54 2024 GMT
        Subject: CN=6740bea2-ae04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:2a:86:c6:e2:83:2a:7f:04:40:f6:42:33:
                    d8:03:f0:45:bc:89:1d:81:db:04:c5:c5:0b:ad:75:
                    00:40:0c:25:5c:31:f6:72:18:0f:6b:97:c4:bb:2b:
                    6f:17:cb:e1:0b:25:2e:11:b8:96:59:44:72:e9:81:
                    c0:e9:ee:f8:35:c4:b4:cf:17:b3:e7:06:a7:0f:a8:
                    de:fd:c7:28:a1:05:61:da:1e:a0:fc:75:cf:62:ed:
                    fe:dd:cd:6d:e1:e1:19:de:e0:0c:4f:9a:7d:95:28:
                    5f:c0:0c:51:ed:52:68:ae:cb:36:86:21:e8:62:03:
                    a0:0d:fd:4c:1b:6b:db:84:8c:c1:2a:b3:0e:08:05:
                    07:96:85:ba:7d:1d:20:cf:79:90:c5:44:88:e7:bb:
                    64:49:14:74:4d:d8:60:02:99:11:7c:17:69:4b:0c:
                    1a:ce:61:40:f6:f0:e1:37:1c:85:d9:2e:d6:49:23:
                    6e:c2:10:22:0e:37:ce:b5:cd:ae:84:3d:7d:e9:a2:
                    42:49:e5:39:fa:eb:31:e7:ef:90:31:b0:c9:17:b6:
                    ff:65:4a:96:9e:ee:b7:81:95:22:99:1b:e2:94:b0:
                    6d:5c:f9:60:c5:1f:7a:fd:f5:6d:59:e3:8d:2a:a9:
                    29:a3:6a:ee:c1:44:11:90:12:7b:47:7c:48:c7:34:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B4:57:10:24:C1:9C:67:4A:92:61:B0:88:67:25:3B:59:84:FF:C6
            X509v3 Authority Key Identifier:
                keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:68:88:ba:6d:7b:9f:0d:53:00:bd:6f:46:7d:3c:86:ce:ec:
         bc:cf:fc:36:17:57:1e:83:a0:ce:68:11:b9:04:6b:27:d3:81:
         e7:0c:ff:5e:2a:ea:16:74:3d:6e:eb:70:fa:08:56:11:40:10:
         e1:9b:e7:62:42:18:78:ae:37:e8:75:93:17:56:c5:a9:a6:8f:
         a0:89:6b:b1:12:e4:01:51:00:fa:b0:15:50:40:fc:9a:9a:77:
         51:34:38:50:33:82:4f:fa:2d:d8:a2:67:e0:8b:0f:f8:79:cb:
         d8:10:57:94:a3:e9:2b:de:e7:4a:0e:27:1d:57:76:d4:4f:71:
         b9:1e:84:5f:c7:4b:84:fa:3e:87:08:d9:a9:3a:58:ba:90:71:
         32:4c:07:71:1d:bf:59:e2:e8:09:f7:54:83:40:d5:08:a7:39:
         5c:e2:db:cf:b1:45:c0:ff:8b:c9:bc:19:0d:85:00:87:db:2f:
         01:ec:5e:08:9d:b7:a6:a5:66:ba:bc:7e:b5:c4:3c:d9:bc:c6:
         09:54:1f:a3:b1:08:35:83:6e:29:43:84:a6:6f:32:09:b6:31:
         c1:6f:88:f0:b1:c8:d9:b0:88:24:6a:e3:19:35:67:6b:7d:fc:
         f0:e3:c1:66:52:52:c3:58:6c:f4:2c:21:1e:22:e3:06:05:4c:
         eb:0b:e3:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx
RkI5QTVGMkEwHhcNMjQxMTIyMTcyNTU0WhcNMjQxMTI5MTcyNTU0WjAYMRYwFAYD
VQQDEw02NzQwYmVhMi1hZTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz4Mqhsbigyp/BED2QjPYA/BFvIkdgdsExcULrXUAQAwlXDH2chgPa5fEuytv
F8vhCyUuEbiWWURy6YHA6e74NcS0zxez5wanD6je/ccooQVh2h6g/HXPYu3+3c1t
4eEZ3uAMT5p9lShfwAxR7VJorss2hiHoYgOgDf1MG2vbhIzBKrMOCAUHloW6fR0g
z3mQxUSI57tkSRR0TdhgApkRfBdpSwwazmFA9vDhNxyF2S7WSSNuwhAiDjfOtc2u
hD196aJCSeU5+usx5++QMbDJF7b/ZUqWnu63gZUimRvilLBtXPlgxR96/fVtWeON
Kqkpo2ruwUQRkBJ7R3xIxzTWSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBe0VxAk
wZxnSpJhsIhnJTtZhP/GMB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5
MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzU1OC8wRjIxMjE0RTM5MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0
V0Y0eENzMk5feXNmdWFYeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+aIi6bXufDVMAvW9GfTyGzuy8z/w2F1ceg6DOaBG5BGsn04HnDP9e
KuoWdD1u63D6CFYRQBDhm+diQhh4rjfodZMXVsWppo+giWuxEuQBUQD6sBVQQPya
mndRNDhQM4JP+i3Yomfgiw/4ecvYEFeUo+kr3udKDicdV3bUT3G5HoRfx0uE+j6H
CNmpOli6kHEyTAdxHb9Z4ugJ91SDQNUIpzlc4tvPsUXA/4vJvBkNhQCH2y8B7F4I
nbempWa6vH61xDzZvMYJVB+jsQg1g24pQ4SmbzIJtjHBb4jwscjZsIgkauMZNWdr
ffzw48FmUlLDWGz0LCEeIuMGBUzrC+MM
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org