Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
File:                     YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json)
Hash identifier:          DjyKXnmu+fH38XBKcV8uHDAl36dImuFVrW+gAXqSNe4=
Subject key identifier:   3D:65:AA:5F:7A:56:A9:5F:FF:F9:A0:52:7E:DD:91:48:8B:9E:A0:2E
Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Certificate issuer:       /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Certificate serial:       0385
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
Manifest number:          0377
Signing time:             Thu 21 Nov 2024 00:29:14 +0000
Manifest this update:     Thu 21 Nov 2024 00:29:13 +0000
Manifest next update:     Thu 28 Nov 2024 00:29:13 +0000
Files and hashes:         1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: CqhVrIXWsg2QemGC8npwcvS1ICXMliSDqrdqO+sq3OQ=)
                          2: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: 4ROYaEWNrV2vz012AOwl9KfhXGAAvoY7wptr4uiFLwI=)
                          3: EF6D0418235911EFB1B55375C4F9AE02.roa (hash: EwbtUt7APbeV80Zvx8Ghg7T4VGoQK0VpnCF/G2dq5KI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901 (0x385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
        Validity
            Not Before: Nov 21 00:29:13 2024 GMT
            Not After : Nov 28 00:29:13 2024 GMT
        Subject: CN=673e7eda-6f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7d:0b:6f:c8:6c:94:67:4b:15:2b:eb:0e:4f:
                    80:13:c1:14:ea:0e:46:da:4a:75:eb:25:32:12:59:
                    64:33:80:14:91:f5:5b:95:19:75:bc:9c:97:a9:c3:
                    ae:af:e1:4a:a8:ed:58:4b:1b:96:d3:0a:46:1b:d7:
                    cf:8b:1b:f1:f9:2b:fe:26:c0:c1:bb:95:7a:79:4d:
                    fb:63:f3:ba:04:59:33:48:12:d2:ce:3b:04:a0:cb:
                    5f:4d:5a:74:5f:fd:4d:6f:e7:0c:b6:e6:e7:88:db:
                    c7:47:e9:89:9b:70:56:dd:ee:ac:fb:49:ac:76:0a:
                    ba:82:79:76:aa:cc:ae:bd:c2:c0:dd:08:ec:a7:69:
                    e0:70:50:bb:26:59:e7:0d:ed:41:46:64:58:4c:c2:
                    29:8a:54:d6:2b:79:57:1e:ed:36:86:aa:c9:6a:c0:
                    80:c1:9a:73:f1:ba:88:62:b6:81:57:eb:0d:0a:10:
                    34:8f:6c:3b:37:37:a3:33:68:4b:8b:83:3e:2c:e0:
                    d1:a0:71:44:e5:dc:14:d8:1b:c4:35:f7:b4:f2:a0:
                    0e:fa:ad:70:c3:46:36:9a:c8:40:c4:00:be:ba:87:
                    86:67:50:7a:23:1c:3e:7a:d2:f0:41:22:37:54:ff:
                    75:27:6f:2b:b5:45:c8:c2:92:db:9e:4d:7e:20:00:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:65:AA:5F:7A:56:A9:5F:FF:F9:A0:52:7E:DD:91:48:8B:9E:A0:2E
            X509v3 Authority Key Identifier:
                keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:26:70:0f:08:b5:fc:4d:8d:c0:6e:f3:fa:1c:c4:74:e5:27:
         8c:dd:b0:c6:b4:68:be:95:47:c2:41:69:1f:33:48:4f:56:18:
         ba:ed:81:d2:69:fe:ee:d3:c4:7d:5f:c5:10:19:7f:42:16:e7:
         43:1f:43:b9:9e:7d:eb:ec:6d:eb:93:03:f9:e8:fe:b3:a8:3f:
         e9:d0:de:00:80:ba:e3:65:3f:9c:f9:68:d6:d6:b1:69:5b:20:
         89:0c:cb:35:26:d5:c0:fd:2b:51:71:6a:8e:b3:32:d2:4a:c0:
         ac:97:9d:af:2a:c9:28:b5:d5:f1:db:13:60:35:ba:c3:d4:7b:
         4c:d3:a9:19:5e:5d:16:20:cf:a3:b5:30:f3:c7:fb:fc:0a:a1:
         e3:91:22:16:7d:90:26:77:45:17:ce:2f:88:b8:6b:3a:ec:7e:
         1e:a3:8b:b3:57:86:8f:82:4a:c1:da:78:f7:d1:c3:7b:92:cc:
         3a:7d:12:3f:20:ff:39:f6:bc:fb:83:11:d8:ca:b0:c1:51:c2:
         3f:51:ab:6f:36:ef:ac:79:20:f5:c4:f3:be:d0:19:b7:a7:9d:
         ef:c7:7b:04:14:7e:e0:a1:46:c8:bd:36:ee:18:47:8e:3f:57:
         ba:58:07:32:28:ca:eb:db:56:e3:76:db:54:3b:63:96:78:86:
         ac:72:c2:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlCMDgxMTAvBgNVBAUTKDYxNENDRDI0Rjc4NUU5Mjk5MjE1OTE2NDA4Mjk0MDQy
RjE0NjMyOTQwHhcNMjQxMTIxMDAyOTEzWhcNMjQxMTI4MDAyOTEzWjAYMRYwFAYD
VQQDEw02NzNlN2VkYS02ZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmH0Lb8hslGdLFSvrDk+AE8EU6g5G2kp16yUyEllkM4AUkfVblRl1vJyXqcOu
r+FKqO1YSxuW0wpGG9fPixvx+Sv+JsDBu5V6eU37Y/O6BFkzSBLSzjsEoMtfTVp0
X/1Nb+cMtubniNvHR+mJm3BW3e6s+0msdgq6gnl2qsyuvcLA3Qjsp2ngcFC7Jlnn
De1BRmRYTMIpilTWK3lXHu02hqrJasCAwZpz8bqIYraBV+sNChA0j2w7NzejM2hL
i4M+LODRoHFE5dwU2BvENfe08qAO+q1ww0Y2mshAxAC+uoeGZ1B6Ixw+etLwQSI3
VP91J28rtUXIwpLbnk1+IAAnKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1lql96
Vqlf//mgUn7dkUiLnqAuMB8GA1UdIwQYMBaAFGFMzST3hekpkhWRZAgpQELxRjKU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIwOC8zNzU1M0E1Njg5
OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZTbVNGWkZrQ0NsQVF2RkdN
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lVek5KUGVGNlNtU0ZaRmtDQ2xBUXZGR01wUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUIwOC8zNzU1M0E1Njg5OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZT
bVNGWkZrQ0NsQVF2RkdNcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcJnAPCLX8TY3AbvP6HMR05SeM3bDGtGi+lUfCQWkfM0hPVhi67YHS
af7u08R9X8UQGX9CFudDH0O5nn3r7G3rkwP56P6zqD/p0N4AgLrjZT+c+WjW1rFp
WyCJDMs1JtXA/StRcWqOszLSSsCsl52vKskotdXx2xNgNbrD1HtM06kZXl0WIM+j
tTDzx/v8CqHjkSIWfZAmd0UXzi+IuGs67H4eo4uzV4aPgkrB2nj30cN7ksw6fRI/
IP859rz7gxHYyrDBUcI/UatvNu+seSD1xPO+0Bm3p53vx3sEFH7goUbIvTbuGEeO
P1e6WAcyKMrr21bjdttUO2OWeIascsKA
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:57 2024 by rpki-client on console-fra.rpki-client.org