Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
File:                     IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json)
Hash identifier:          LCGKsHvx/v3uBVL16/ni2Vr9chQpGGcBr2i7zAMsBO0=
Subject key identifier:   F3:08:D6:9E:9E:36:A5:1D:DE:A7:F4:A1:7A:31:41:5C:87:86:7E:3F
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Certificate issuer:       /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial:       0784
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
Manifest number:          0756
Signing time:             Thu 02 May 2024 22:37:50 +0000
Manifest this update:     Thu 02 May 2024 22:37:50 +0000
Manifest next update:     Thu 09 May 2024 22:37:50 +0000
Files and hashes:         1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: f0b4i3SFzGX9eorzQS4DXzZrsR8RMLb3SCJ7mU177BU=)
                          2: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: Gqxdee19gYRpq/7iwpjpXekbiJ6Xa1Y+QdRU7kjs52c=)
                          3: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: nC1WBHIp4+7rOVDK2SGvb6WbxsoSeuXt9b32LImOpZY=)
                          4: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: 8fs3YaYWIcjJ2lhMZaBhEZMi33VUKYw0lZXOUjkrASM=)
                          5: 116D9634E5DF11EA9E8E8D6AC4F9AE02.roa (hash: hnqMAC9ZqQrJRPkkpvwFD0cRkfBj2RbAjFwQo75assE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
                          rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 22:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
        Validity
            Not Before: May  2 22:37:50 2024 GMT
            Not After : May  9 22:37:50 2024 GMT
        Subject: CN=663415be-bd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:98:e7:2d:3a:2d:4e:d8:a5:b5:05:23:09:
                    e1:84:9b:d5:70:20:06:77:de:f0:f1:c4:f0:df:14:
                    04:5b:19:21:d6:db:a8:50:9a:62:d3:7f:63:f8:e2:
                    bf:35:52:a4:bf:19:89:13:ff:7c:f6:68:25:95:1c:
                    ee:0d:32:e3:c6:35:d0:d2:fa:58:c8:ff:32:93:7b:
                    26:eb:ff:f5:4d:6f:2c:07:0f:0c:82:2a:f8:9c:dc:
                    65:f8:82:85:cd:b8:d2:e9:28:f3:06:23:61:d0:48:
                    b2:c8:3f:35:6e:22:2b:fb:f2:84:b8:36:a3:60:5b:
                    9b:3e:1f:02:01:b9:62:fd:b6:b6:ad:bf:f7:2e:96:
                    22:cc:3e:09:1b:dd:35:93:59:6c:e5:f2:af:8e:c4:
                    99:49:f5:69:94:d3:e5:5d:98:f3:1d:8e:4b:a6:da:
                    ce:3f:06:ab:82:4c:3d:6e:54:34:7b:27:34:7d:48:
                    ad:21:34:5f:e1:ea:1a:d8:a1:37:40:c5:fe:12:df:
                    f4:54:0e:32:f4:fe:de:58:e7:5c:52:16:fd:d2:69:
                    dd:17:5f:93:dc:40:db:42:9f:32:1d:e5:54:08:6f:
                    75:9c:7b:a8:09:f1:01:d3:fc:04:31:a2:27:a8:21:
                    65:ba:fb:36:fa:7a:42:bf:d3:41:bc:1f:d3:83:31:
                    5c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:08:D6:9E:9E:36:A5:1D:DE:A7:F4:A1:7A:31:41:5C:87:86:7E:3F
            X509v3 Authority Key Identifier:
                keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:75:33:e1:7e:9c:ed:f9:c9:9f:99:dd:11:be:48:85:29:97:
         3e:85:f5:8c:aa:ea:67:8e:b0:77:fd:8a:9f:c6:c6:76:01:29:
         ef:34:ae:ee:24:ca:30:24:ac:9d:af:f2:62:a1:e3:d3:c8:60:
         d9:e4:51:ad:34:9a:17:fd:98:0b:08:51:5f:fd:dc:7b:39:64:
         22:83:32:b1:02:a1:09:15:1d:3e:1c:10:32:96:ae:a5:03:17:
         29:26:b0:04:11:d8:b5:73:f4:9f:38:f3:ae:f6:22:fe:0b:57:
         08:30:ae:d5:bb:d3:d2:7b:3c:d9:40:14:0b:a7:7b:2b:0f:9c:
         3a:ee:84:63:d8:48:6d:6e:83:20:86:29:60:e7:e6:9e:b5:31:
         06:a7:2f:b9:48:d0:69:dd:b9:db:60:8c:64:b8:bc:46:d2:8e:
         08:f6:ba:85:c5:4a:02:1f:bb:64:6c:b7:84:44:11:a3:95:3c:
         5a:b1:62:22:be:9f:e8:93:36:b5:69:e7:88:e3:96:15:20:59:
         61:bd:9c:39:37:98:30:c9:b7:52:72:dd:96:38:e5:95:6e:a6:
         3e:c9:4c:05:76:6e:71:f3:ee:43:26:96:74:0a:d2:ca:70:9b:
         8f:17:17:d5:b2:c8:07:0c:c9:df:e8:f5:2d:47:d5:13:f4:e6:
         b8:aa:af:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB
MTRERjUxMkIwHhcNMjQwNTAyMjIzNzUwWhcNMjQwNTA5MjIzNzUwWjAYMRYwFAYD
VQQDEw02NjM0MTViZS1iZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApyCY5y06LU7YpbUFIwnhhJvVcCAGd97w8cTw3xQEWxkh1tuoUJpi039j+OK/
NVKkvxmJE/989mgllRzuDTLjxjXQ0vpYyP8yk3sm6//1TW8sBw8Mgir4nNxl+IKF
zbjS6SjzBiNh0EiyyD81biIr+/KEuDajYFubPh8CAbli/ba2rb/3LpYizD4JG901
k1ls5fKvjsSZSfVplNPlXZjzHY5LptrOPwargkw9blQ0eyc0fUitITRf4eoa2KE3
QMX+Et/0VA4y9P7eWOdcUhb90mndF1+T3EDbQp8yHeVUCG91nHuoCfEB0/wEMaIn
qCFluvs2+npCv9NBvB/TgzFc8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMI1p6e
NqUd3qf0oXoxQVyHhn4/MB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1
REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0
MnloWWhyMXhISGloVGZVU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJdTPhfpzt+cmfmd0RvkiFKZc+hfWMqupnjrB3/YqfxsZ2ASnvNK7u
JMowJKydr/JioePTyGDZ5FGtNJoX/ZgLCFFf/dx7OWQigzKxAqEJFR0+HBAylq6l
AxcpJrAEEdi1c/SfOPOu9iL+C1cIMK7Vu9PSezzZQBQLp3srD5w67oRj2EhtboMg
hilg5+aetTEGpy+5SNBp3bnbYIxkuLxG0o4I9rqFxUoCH7tkbLeERBGjlTxasWIi
vp/okza1aeeI45YVIFlhvZw5N5gwybdSct2WOOWVbqY+yUwFdm5x8+5DJpZ0CtLK
cJuPFxfVssgHDMnf6PUtR9UT9Oa4qq99
-----END CERTIFICATE-----
Generated at Thu May 2 23:19:04 2024 by rpki-client on console-ams.rpki-client.org