Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
File:                     F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json)
Hash identifier:          NFXW5gwFsFhUdZy6kQfpe9g85iq4jeGpS8RXaQk4rcU=
Subject key identifier:   70:7F:8E:F8:A8:58:40:79:05:ED:CA:F5:F3:85:4F:A8:2A:47:1F:00
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Certificate issuer:       /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial:       0856
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
Manifest number:          184E
Signing time:             Fri 22 Nov 2024 17:24:08 +0000
Manifest this update:     Fri 22 Nov 2024 17:24:08 +0000
Manifest next update:     Fri 29 Nov 2024 17:24:08 +0000
Files and hashes:         1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: InL/VeW4UWbCjnRc4h688DDm51rgq5qPFfMiKifuovU=)
                          2: 2FF45F2A3A7E11EDA75E2E49C4F9AE02.roa (hash: Cfo5eHFqFHymPEFxBsPivlJKda+i/j/nkyQNRr+wROs=)
                          3: 6308A9A8618E11EC80A05E34C4F9AE02.roa (hash: eXmR8bVyYJl7/HZGI5zaP9+gG9XOzJWc+DWEUi3P0fc=)
                          4: EE1D8CD2458D11ED9EA9AB43C4F9AE02.roa (hash: TmU7Xz6MFoTHxH4C+3H/MaWLM4eqH+ViLbFJPll1evg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
                          rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134 (0x856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
        Validity
            Not Before: Nov 22 17:24:08 2024 GMT
            Not After : Nov 29 17:24:08 2024 GMT
        Subject: CN=6740be38-dc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:a8:01:0b:d9:a5:e4:e2:0a:e8:73:6a:00:
                    76:2d:85:f3:9f:a0:c0:23:4a:6a:97:31:2e:c3:35:
                    1f:3d:a6:08:d6:18:8d:d2:b2:16:51:f7:06:ac:0f:
                    ce:96:a6:b4:6e:a2:38:35:a7:22:9e:8b:07:e3:bb:
                    25:96:54:39:50:bf:da:f8:42:c3:a7:35:f1:4b:ba:
                    b0:34:74:65:32:f2:26:f4:54:99:cb:2c:0c:e3:a5:
                    f3:5b:5f:09:0f:1b:54:dc:7b:bd:0a:89:94:84:36:
                    a3:99:d6:56:31:33:f9:a4:f0:73:a3:8b:44:73:8d:
                    b3:80:4d:36:69:86:85:e2:c4:ed:13:40:7a:0e:95:
                    61:e6:78:c8:0a:3b:c1:50:d0:d9:ec:8a:cd:1a:b6:
                    c7:c5:09:66:06:3a:b8:40:78:4c:ec:6a:a5:07:15:
                    6d:b6:73:5c:84:7f:73:0d:22:32:a7:78:91:b7:34:
                    16:56:20:45:ba:7b:84:87:03:75:de:61:f2:7f:94:
                    4d:57:89:c8:92:79:a4:68:37:fc:eb:5a:76:c0:e3:
                    7f:6f:56:57:fc:3e:6f:37:7a:72:6f:8d:2d:65:62:
                    78:65:9e:c1:d1:3f:2f:6e:81:9f:bc:c9:42:bc:d7:
                    e8:4b:b4:a1:55:de:00:cc:dc:f0:9c:d5:cf:28:31:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7F:8E:F8:A8:58:40:79:05:ED:CA:F5:F3:85:4F:A8:2A:47:1F:00
            X509v3 Authority Key Identifier:
                keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:84:76:0d:af:56:9d:3a:88:e6:c5:d4:dd:3f:fe:d7:e1:86:
         99:06:7a:1b:c8:95:a2:7e:f9:2a:16:be:a3:26:b1:b9:45:b0:
         4a:92:8a:6c:f6:ca:9c:b6:7f:f2:6a:0a:56:d5:fc:b8:e4:37:
         86:17:50:07:01:0d:07:5c:f4:1a:07:42:25:4d:11:44:60:f3:
         d9:e0:65:ee:0c:75:09:a1:cc:9e:16:95:4d:61:00:3c:14:d1:
         95:70:94:bb:4e:3a:d2:ca:1c:3f:19:30:1c:4b:c1:c7:de:ff:
         67:23:8c:3e:47:d8:a1:93:ff:ef:19:e8:72:27:79:4f:8f:f0:
         c4:8c:4e:69:56:23:59:9c:62:91:97:85:94:9b:c6:51:ef:d2:
         b5:2d:5d:b5:66:5c:e5:e3:fa:ff:30:0f:cb:d0:71:82:55:4f:
         44:b2:ce:72:d1:9a:7a:dd:58:51:4c:05:37:90:4b:21:f7:45:
         7b:7b:ba:9f:3c:bc:f3:44:dc:3a:be:c2:4d:b9:23:79:15:20:
         f9:3b:37:f1:8b:7e:50:bd:6c:73:6f:a0:51:0a:db:fd:d3:59:
         36:32:6a:fa:7e:c0:75:cf:df:a2:a5:05:87:5d:58:cd:42:be:
         af:a9:c5:d4:a3:c0:3b:91:10:eb:cb:6e:fa:cf:d2:e6:c4:17:
         c9:c3:7d:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG
Rjc5RDFFMDEwHhcNMjQxMTIyMTcyNDA4WhcNMjQxMTI5MTcyNDA4WjAYMRYwFAYD
VQQDEw02NzQwYmUzOC1kYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArneoAQvZpeTiCuhzagB2LYXzn6DAI0pqlzEuwzUfPaYI1hiN0rIWUfcGrA/O
lqa0bqI4NacinosH47slllQ5UL/a+ELDpzXxS7qwNHRlMvIm9FSZyywM46XzW18J
DxtU3Hu9ComUhDajmdZWMTP5pPBzo4tEc42zgE02aYaF4sTtE0B6DpVh5njICjvB
UNDZ7IrNGrbHxQlmBjq4QHhM7GqlBxVttnNchH9zDSIyp3iRtzQWViBFunuEhwN1
3mHyf5RNV4nIknmkaDf861p2wON/b1ZX/D5vN3pyb40tZWJ4ZZ7B0T8vboGfvMlC
vNfoS7ShVd4AzNzwnNXPKDE28wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB/jvio
WEB5Be3K9fOFT6gqRx8AMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz
OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI
Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i
UndmcDFiUUcxWXJfZWRIZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5hHYNr1adOojmxdTdP/7X4YaZBnobyJWifvkqFr6jJrG5RbBKkops
9sqctn/yagpW1fy45DeGF1AHAQ0HXPQaB0IlTRFEYPPZ4GXuDHUJocyeFpVNYQA8
FNGVcJS7TjrSyhw/GTAcS8HH3v9nI4w+R9ihk//vGehyJ3lPj/DEjE5pViNZnGKR
l4WUm8ZR79K1LV21Zlzl4/r/MA/L0HGCVU9Ess5y0Zp63VhRTAU3kEsh90V7e7qf
PLzzRNw6vsJNuSN5FSD5Ozfxi35QvWxzb6BRCtv901k2Mmr6fsB1z9+ipQWHXVjN
Qr6vqcXUo8A7kRDry276z9LmxBfJw32A
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org