Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          yeqWqFXF6LDMOQl7RAsQ5N9Dx3L+gcWbibukQgZlqKM=
Subject key identifier:   D6:EC:E3:F5:A0:07:D6:7C:30:EC:B1:93:AB:04:B7:66:67:14:AA:08
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       3369
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          335D
Signing time:             Fri 22 Nov 2024 15:22:23 +0000
Manifest this update:     Fri 22 Nov 2024 15:22:22 +0000
Manifest next update:     Fri 29 Nov 2024 15:22:22 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: 2AohxYk+kkPows1JOri2MDEePF76mCVR5zG4XGq/Ngc=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Cbhj9KrYPhruE2DO+tG+S1gBEmTKHE45Wb/ySBI1jmo=)
                          3: A30DC17880FE11E985D53F55C4F9AE02.roa (hash: qgk+fzy5+bJ/P0TG94jLIDzU/wj1mkJDF7MO6OIp0JE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13161 (0x3369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Nov 22 15:22:22 2024 GMT
            Not After : Nov 29 15:22:22 2024 GMT
        Subject: CN=6740a1ae-a64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:2b:2e:46:c6:69:fb:06:a6:a1:fd:78:79:
                    26:d0:22:32:a3:88:ce:e4:d0:24:d8:52:45:b6:20:
                    13:01:d4:40:8d:94:27:33:02:a2:6c:49:61:e7:67:
                    c3:99:3b:e8:11:b9:7d:72:9e:93:e5:a2:63:9b:9c:
                    3c:f7:b8:06:c9:5c:a2:14:bd:b7:e5:e2:46:07:d5:
                    b6:5e:79:2c:69:42:9f:ed:23:3e:2c:cc:71:56:28:
                    6b:b2:5b:81:df:b4:ea:35:18:34:cb:db:55:b0:b6:
                    9d:0e:8c:6d:9b:74:90:be:77:94:21:a6:90:8f:29:
                    a7:4f:cd:3e:9a:72:2f:c5:00:e0:76:f6:5e:ed:37:
                    90:60:2a:b7:60:92:2f:3c:77:65:8a:fb:c5:2b:37:
                    a6:63:1a:49:83:8f:f7:e4:68:05:b5:1f:df:14:54:
                    8f:36:2c:ec:02:dc:d4:be:e2:1e:af:0d:ee:31:31:
                    0a:cc:e7:79:5f:17:f4:e0:a9:0a:ff:a7:de:3f:71:
                    cc:5f:5b:1c:51:85:c2:0b:77:46:bd:ef:14:4f:94:
                    0f:96:0f:7e:10:56:00:56:b9:77:12:e0:9d:77:7b:
                    d3:01:5e:56:e2:15:10:be:5e:f1:c7:17:75:db:8d:
                    6f:2d:6d:62:e0:df:b4:da:6c:4e:0e:5b:ae:1a:44:
                    77:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EC:E3:F5:A0:07:D6:7C:30:EC:B1:93:AB:04:B7:66:67:14:AA:08
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:00:f3:f6:77:52:90:e1:44:1a:0a:83:f6:21:af:c0:5d:1e:
         e2:97:85:b3:18:16:62:99:44:5b:e7:41:f1:37:e5:7e:d4:01:
         84:b9:f6:4a:e7:98:d9:9c:29:d9:43:14:4f:d7:a5:1d:b5:35:
         56:f1:fa:df:9c:3f:7d:51:ff:1d:2c:32:ff:df:7e:9b:af:53:
         0a:62:d8:39:a5:d9:ad:82:80:71:4b:8a:a6:e1:97:43:63:77:
         77:46:7a:37:7c:d6:e5:4c:96:00:93:b7:91:d1:ee:69:55:fd:
         b7:3d:fa:ad:a9:42:31:fd:99:14:ea:e6:23:28:0a:1f:60:4e:
         41:84:ee:90:c2:ed:c0:8e:90:4a:89:e4:e3:9b:de:37:8d:84:
         83:eb:a3:2f:f1:8a:7d:02:07:58:69:88:95:12:03:bc:2c:67:
         6a:be:bc:19:80:8c:e7:6e:47:4e:83:56:e4:bd:ba:33:88:44:
         e0:26:b5:df:f8:93:27:d5:56:95:50:e1:20:7a:fc:5f:e2:48:
         f8:2a:f9:65:60:ab:77:a4:9d:b8:32:07:34:4d:48:54:08:f0:
         1f:e8:35:ce:5c:35:fe:0d:02:0b:02:c3:aa:04:b8:85:14:2a:
         18:71:fc:2e:b2:13:45:54:02:01:d5:c8:24:f5:a1:93:93:bc:
         05:6b:2e:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICM2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFRjkxMTAvBgNVBAUTKEQzMkRBMzZFODgyMTgyMkU2QkQzQzgyQ0ZGQTk4NEU3
QTkwOUMzRjYwHhcNMjQxMTIyMTUyMjIyWhcNMjQxMTI5MTUyMjIyWjAYMRYwFAYD
VQQDEw02NzQwYTFhZS1hNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnnsrLkbGafsGpqH9eHkm0CIyo4jO5NAk2FJFtiATAdRAjZQnMwKibElh52fD
mTvoEbl9cp6T5aJjm5w897gGyVyiFL235eJGB9W2XnksaUKf7SM+LMxxVihrsluB
37TqNRg0y9tVsLadDoxtm3SQvneUIaaQjymnT80+mnIvxQDgdvZe7TeQYCq3YJIv
PHdlivvFKzemYxpJg4/35GgFtR/fFFSPNizsAtzUvuIerw3uMTEKzOd5Xxf04KkK
/6feP3HMX1scUYXCC3dGve8UT5QPlg9+EFYAVrl3EuCdd3vTAV5W4hUQvl7xxxd1
241vLW1i4N+02mxODluuGkR3HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbs4/Wg
B9Z8MOyxk6sEt2ZnFKoIMB8GA1UdIwQYMBaAFNMto26IIYIua9PILP+phOepCcP2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEVGOS80NEE4MDVFRTQ0
QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdpNXIwOGdzXzZtRTU2a0p3
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB5Mmpib2doZ2k1cjA4Z3NfNm1FNTZrSndfWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEVGOS80NEE4MDVFRTQ0QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdp
NXIwOGdzXzZtRTU2a0p3X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5APP2d1KQ4UQaCoP2Ia/AXR7il4WzGBZimURb50HxN+V+1AGEufZK
55jZnCnZQxRP16UdtTVW8frfnD99Uf8dLDL/336br1MKYtg5pdmtgoBxS4qm4ZdD
Y3d3Rno3fNblTJYAk7eR0e5pVf23PfqtqUIx/ZkU6uYjKAofYE5BhO6Qwu3AjpBK
ieTjm943jYSD66Mv8Yp9AgdYaYiVEgO8LGdqvrwZgIznbkdOg1bkvboziETgJrXf
+JMn1VaVUOEgevxf4kj4KvllYKt3pJ24Mgc0TUhUCPAf6DXOXDX+DQILAsOqBLiF
FCoYcfwushNFVAIB1cgk9aGTk7wFay6p
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org