Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
File:                     dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json)
Hash identifier:          z+X3R6TXmjXthZET7vTmqS9yWw5Rpuo4J8sKAXX/kS4=
Subject key identifier:   77:A7:F7:8E:A3:F5:D7:97:DE:4A:1E:8E:01:33:A5:D5:CB:C8:F3:86
Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
Certificate issuer:       /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Certificate serial:       1D57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
Manifest number:          1D3F
Signing time:             Fri 22 Nov 2024 16:08:52 +0000
Manifest this update:     Fri 22 Nov 2024 16:08:52 +0000
Manifest next update:     Fri 29 Nov 2024 16:08:52 +0000
Files and hashes:         1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: E+32JKBoWiLMVX5fWPyY3K02Fa3lkKNo75ljQ2aeyhY=)
                          2: 79AE82F8171711EBB12F2574C4F9AE02.roa (hash: n/NMyqDI06S8XiVUDvMprWnoGUCP8JkT5dCu21/kF7c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
                          rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7511 (0x1d57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
        Validity
            Not Before: Nov 22 16:08:52 2024 GMT
            Not After : Nov 29 16:08:52 2024 GMT
        Subject: CN=6740ac94-85a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:67:9f:8a:72:97:48:22:42:45:20:68:01:
                    14:95:fa:58:21:0b:dc:ab:e8:eb:61:cd:d2:48:4a:
                    ca:0b:38:c4:60:34:5a:74:c7:db:1e:57:2f:9a:50:
                    ec:b9:11:a0:39:27:f5:f7:42:a5:9f:c6:a1:0b:0a:
                    1d:ab:58:1e:07:a3:e5:64:0d:52:09:9b:b4:83:02:
                    73:c8:d9:ae:6d:1b:28:38:fd:5d:6e:7b:df:c4:12:
                    12:8d:f1:92:b3:29:a5:54:f1:3e:cc:95:65:90:2d:
                    c1:5b:3c:12:6e:0b:28:71:d9:c1:42:29:09:06:e9:
                    f4:a3:15:57:a7:fb:4f:94:3e:3b:57:be:03:de:9e:
                    e6:c0:a4:69:96:13:34:3a:86:41:fd:32:dc:0e:b7:
                    16:cd:10:33:17:89:4c:39:4e:74:ef:26:a8:c1:fd:
                    40:6b:34:0b:2c:83:69:4d:9c:87:55:ab:f7:b1:5e:
                    c6:d6:33:1f:79:ba:a6:0b:14:ff:6f:72:e6:c2:47:
                    d6:7d:d3:ec:90:17:fa:2d:3f:eb:0c:f2:91:89:f1:
                    72:fe:00:66:05:2a:67:05:98:97:f0:8f:85:0f:0f:
                    da:7b:17:bb:3b:6d:4d:66:39:02:60:3d:d3:43:94:
                    95:c5:8f:fe:9d:d8:63:38:48:e7:b7:c9:b7:b2:13:
                    0a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A7:F7:8E:A3:F5:D7:97:DE:4A:1E:8E:01:33:A5:D5:CB:C8:F3:86
            X509v3 Authority Key Identifier:
                keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ef:09:1f:83:f9:fc:72:dd:c2:d7:dc:73:fc:5e:fd:9f:bb:
         90:f0:30:82:80:76:1d:80:81:a6:66:74:3a:b2:9b:ac:fa:86:
         d1:d3:a8:84:6b:ef:18:af:64:f9:a9:f7:59:e4:75:19:3b:3a:
         e5:09:c4:68:61:2e:09:9d:39:04:66:04:35:d3:2a:f2:5d:79:
         7d:18:9f:54:a3:c6:1b:96:98:e2:1b:db:45:af:7f:3a:f9:85:
         27:07:c0:93:5c:af:51:db:65:2d:7b:34:ec:b8:4e:bb:a4:f6:
         76:40:c9:39:6c:f7:ba:e1:d4:f2:0f:59:2c:e4:6c:a2:29:0d:
         8e:95:35:83:f5:9c:ae:20:41:f0:1e:4c:36:73:79:88:c9:58:
         3c:fd:5f:51:bc:0d:c2:30:e0:f0:ff:1b:7b:b6:d6:65:33:60:
         dd:74:32:bd:4e:58:bc:b7:a7:a5:b2:5d:ef:c5:ca:d6:e1:78:
         cb:24:83:91:83:a5:c0:c5:b3:16:16:75:67:a5:84:6a:d6:73:
         78:ac:92:1d:68:b4:c0:4a:28:70:5d:a8:9e:23:bb:70:0d:06:
         18:d0:fd:99:d6:fa:9c:de:88:39:7d:af:ac:88:7a:b7:b6:52:
         0d:b7:da:58:79:bb:b5:57:25:70:89:96:ee:62:13:34:1f:41:
         e9:b3:29:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM2MzMxMTAvBgNVBAUTKDc0RTQ4MjYwNjM1OEIyRTgxMjU4QUFGMERCRTRDN0M5
NjNEODdFMUMwHhcNMjQxMTIyMTYwODUyWhcNMjQxMTI5MTYwODUyWjAYMRYwFAYD
VQQDEw02NzQwYWM5NC04NWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw9Jnn4pyl0giQkUgaAEUlfpYIQvcq+jrYc3SSErKCzjEYDRadMfbHlcvmlDs
uRGgOSf190Kln8ahCwodq1geB6PlZA1SCZu0gwJzyNmubRsoOP1dbnvfxBISjfGS
symlVPE+zJVlkC3BWzwSbgsocdnBQikJBun0oxVXp/tPlD47V74D3p7mwKRplhM0
OoZB/TLcDrcWzRAzF4lMOU507yaowf1AazQLLINpTZyHVav3sV7G1jMfebqmCxT/
b3LmwkfWfdPskBf6LT/rDPKRifFy/gBmBSpnBZiX8I+FDw/aexe7O21NZjkCYD3T
Q5SVxY/+ndhjOEjnt8m3shMKAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHen946j
9deX3koejgEzpdXLyPOGMB8GA1UdIwQYMBaAFHTkgmBjWLLoEliq8Nvkx8lj2H4c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYzMy82MjkwOUYzOEEy
NDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1Z1NXS3J3Mi1USHlXUFlm
aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RPU0NZR05Zc3VnU1dLcncyLVRIeVdQWWZody5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzYzMy82MjkwOUYzOEEyNDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1
Z1NXS3J3Mi1USHlXUFlmaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJ7wkfg/n8ct3C19xz/F79n7uQ8DCCgHYdgIGmZnQ6spus+obR06iE
a+8Yr2T5qfdZ5HUZOzrlCcRoYS4JnTkEZgQ10yryXXl9GJ9Uo8YblpjiG9tFr386
+YUnB8CTXK9R22UtezTsuE67pPZ2QMk5bPe64dTyD1ks5GyiKQ2OlTWD9ZyuIEHw
Hkw2c3mIyVg8/V9RvA3CMODw/xt7ttZlM2DddDK9Tli8t6elsl3vxcrW4XjLJIOR
g6XAxbMWFnVnpYRq1nN4rJIdaLTASihwXaieI7twDQYY0P2Z1vqc3og5fa+siHq3
tlINt9pYebu1VyVwiZbuYhM0H0HpsynD
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org