Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
File:                     F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json)
Hash identifier:          E3vhQGgIbTMQpMo2MYLOG72xXv4AYRSfkZOMI9gam8k=
Subject key identifier:   8B:2F:63:2D:98:CE:AB:6C:0F:D5:54:B9:87:95:44:53:56:1D:AE:6A
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Certificate issuer:       /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial:       0558
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
Manifest number:          0548
Signing time:             Fri 22 Nov 2024 23:03:18 +0000
Manifest this update:     Fri 22 Nov 2024 23:03:17 +0000
Manifest next update:     Fri 29 Nov 2024 23:03:17 +0000
Files and hashes:         1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: ZRJVxXhGI3oZLlHSccY25Ra/X0zWeq3oGxbt7gsma4U=)
                          2: 73E21BB0FB3D11EEB154B874C4F9AE02.roa (hash: SrJwolZ/EXS7wbgb0oThQJECRbUxiA/ATq2Cgd2l02g=)
                          3: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: +yAPNF6ojlFOJLTYVaEQ9SmWRMBtqwGItUQsI9wXCmI=)
                          4: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: FU4aJFxj8CoUjnkiDQB/hpo0mTt04SzDs8mb97d7XQI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
        Validity
            Not Before: Nov 22 23:03:17 2024 GMT
            Not After : Nov 29 23:03:17 2024 GMT
        Subject: CN=67410db6-4749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:65:00:d1:a1:ec:50:5a:46:98:64:99:69:
                    80:61:3c:f2:53:49:a0:53:1e:9a:6a:84:26:09:60:
                    45:bc:c9:e6:f7:a9:81:bc:b4:ca:a0:01:e3:8f:80:
                    9f:c5:79:61:97:8c:0a:d4:be:d7:b1:b0:b0:de:76:
                    b7:8e:f8:23:04:17:37:fd:7d:f6:8f:c9:5b:31:9c:
                    52:dd:14:d5:c2:da:f6:cb:86:84:a8:8e:4d:07:69:
                    80:64:46:df:98:41:24:08:d9:7e:38:78:de:7b:5e:
                    28:ee:18:a1:47:ca:71:e0:f4:a5:46:e9:e3:5c:53:
                    c6:ea:2e:c0:0c:4f:34:1d:b3:1b:84:b0:42:63:ec:
                    0b:e9:69:0c:4f:63:b5:1e:78:ce:03:e5:ff:50:96:
                    2c:df:24:fe:2e:bd:fc:4c:4b:83:a7:07:aa:73:43:
                    be:83:ff:c6:d0:3e:dc:77:35:32:9d:98:19:fa:bc:
                    bf:28:a6:70:72:43:ad:88:a8:03:c6:e2:7a:38:59:
                    53:47:8b:09:7b:11:ec:61:91:81:13:7d:c8:a9:38:
                    0b:08:af:9b:b8:4a:e8:5d:4d:52:62:7c:e4:ba:80:
                    f1:83:63:04:7a:ce:72:ee:9b:e2:b1:06:0a:a0:3e:
                    ba:90:51:c6:69:33:ce:53:11:b7:13:c3:65:be:c0:
                    43:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2F:63:2D:98:CE:AB:6C:0F:D5:54:B9:87:95:44:53:56:1D:AE:6A
            X509v3 Authority Key Identifier:
                keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f5:84:93:bf:3d:6d:11:d4:da:42:24:b5:df:f9:c7:fe:29:5e:
         96:1d:0a:30:f6:7c:39:c3:b8:6d:34:17:28:f2:27:84:ca:e8:
         ec:cb:ed:33:8d:f7:66:b2:b9:44:c3:6c:f7:53:d7:7f:63:d8:
         20:af:3d:18:ee:13:31:8f:39:37:2f:be:66:46:23:b0:6e:be:
         2f:a8:b1:3e:c8:e9:a1:83:de:a1:13:dd:ad:5b:05:a9:a7:2f:
         bd:e4:d4:7e:34:0d:93:9d:c5:4e:10:48:1b:fd:90:4f:c5:fb:
         4b:fa:09:69:89:b0:6f:46:b0:6a:85:c1:2d:f4:f3:2a:7d:e6:
         e6:60:f9:a4:9f:4b:0b:85:94:57:1a:12:47:df:16:78:31:a0:
         fa:28:2c:11:f1:20:85:7b:35:82:26:c2:3f:fa:c1:ce:d6:cb:
         41:ca:12:13:8d:ae:5b:3e:f2:51:54:72:29:7e:63:ed:03:45:
         3f:f1:91:a5:ef:0c:55:ad:5c:9d:2c:05:65:48:64:43:6c:8c:
         98:13:34:85:45:60:1d:ee:ef:e0:4b:81:0b:28:a2:80:cb:d1:
         c2:dd:ff:71:e6:74:5a:f7:ed:ba:c8:b2:bd:a0:73:e3:df:1d:
         50:b6:69:35:f6:92:02:85:ad:49:ce:0e:f3:06:f4:67:c1:1c:
         31:db:78:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3
OTlBRUY3NjcwHhcNMjQxMTIyMjMwMzE3WhcNMjQxMTI5MjMwMzE3WjAYMRYwFAYD
VQQDEw02NzQxMGRiNi00NzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYhlANGh7FBaRphkmWmAYTzyU0mgUx6aaoQmCWBFvMnm96mBvLTKoAHjj4Cf
xXlhl4wK1L7XsbCw3na3jvgjBBc3/X32j8lbMZxS3RTVwtr2y4aEqI5NB2mAZEbf
mEEkCNl+OHjee14o7hihR8px4PSlRunjXFPG6i7ADE80HbMbhLBCY+wL6WkMT2O1
HnjOA+X/UJYs3yT+Lr38TEuDpweqc0O+g//G0D7cdzUynZgZ+ry/KKZwckOtiKgD
xuJ6OFlTR4sJexHsYZGBE33IqTgLCK+buEroXU1SYnzkuoDxg2MEes5y7pvisQYK
oD66kFHGaTPOUxG3E8NlvsBDvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsvYy2Y
zqtsD9VUuYeVRFNWHa5qMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw
MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot
N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQD1hJO/PW0R1NpCJLXf+cf+KV6WHQow9nw5w7htNBco8ieEyujsy+0z
jfdmsrlEw2z3U9d/Y9ggrz0Y7hMxjzk3L75mRiOwbr4vqLE+yOmhg96hE92tWwWp
py+95NR+NA2TncVOEEgb/ZBPxftL+glpibBvRrBqhcEt9PMqfebmYPmkn0sLhZRX
GhJH3xZ4MaD6KCwR8SCFezWCJsI/+sHO1stByhITja5bPvJRVHIpfmPtA0U/8ZGl
7wxVrVydLAVlSGRDbIyYEzSFRWAd7u/gS4ELKKKAy9HC3f9x5nRa9+26yLK9oHPj
3x1Qtmk19pICha1Jzg7zBvRnwRwx23hL
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org