Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
File:                     Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json)
Hash identifier:          BU3VPzzp7CZlykPTHweq6kR6FelTZDA+gXv4lzX6CUw=
Subject key identifier:   99:92:FE:27:7A:2A:9B:24:4C:C8:F2:F7:30:78:E6:6A:F8:4E:15:52
Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
Certificate issuer:       /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Certificate serial:       079B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
Manifest number:          0794
Signing time:             Fri 22 Nov 2024 20:51:02 +0000
Manifest this update:     Fri 22 Nov 2024 20:51:01 +0000
Manifest next update:     Fri 29 Nov 2024 20:51:01 +0000
Files and hashes:         1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: P3hEQRck5lx20BhGbfsnhRop9hftR0Xr59OCNOKojZk=)
                          2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: YgGSKjf+yqS6tfXBHbo08Az10kPo68dPDcKOBD0yFMM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
                          rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947 (0x79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
        Validity
            Not Before: Nov 22 20:51:01 2024 GMT
            Not After : Nov 29 20:51:01 2024 GMT
        Subject: CN=6740eeb6-f900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:88:33:fa:c0:14:51:09:b5:46:c9:f2:a6:3e:
                    d6:75:fa:f8:66:9e:b3:27:9e:92:e2:e5:ba:8d:c6:
                    c9:99:09:b0:00:5c:e9:8e:0e:9b:f4:da:e4:ca:d2:
                    92:4e:0d:8e:6a:96:06:2a:9a:2a:e1:e8:db:6a:c1:
                    73:77:63:40:d3:19:8d:4a:e7:71:92:59:73:87:39:
                    09:16:33:07:19:a8:5f:ad:c1:77:44:24:12:28:9e:
                    75:ce:bd:b0:bf:7e:36:aa:27:ac:df:47:12:9d:d9:
                    ae:f3:5c:0c:c8:2e:3b:da:47:27:55:03:64:2e:ee:
                    c9:2b:21:d6:77:92:66:a8:f7:94:c7:ef:ce:cc:17:
                    e3:d5:38:5a:be:62:84:63:7f:c7:69:93:fe:78:a9:
                    79:a2:54:bc:4e:b6:c3:14:f4:f6:0b:c2:1d:d0:32:
                    56:0b:57:ab:40:e6:e7:56:96:0c:81:d2:2a:50:9b:
                    9a:89:a8:64:68:70:4e:a3:5f:f5:41:36:c2:b0:1a:
                    02:cf:2c:8d:3a:63:c7:1e:d4:a7:16:c7:bb:80:c3:
                    85:47:41:07:f4:fd:f5:97:b9:7d:2d:05:fd:f0:4f:
                    9e:80:06:69:9f:f3:10:a2:18:58:5e:48:c5:52:14:
                    9b:d5:12:45:c4:10:e1:e0:05:f7:df:c9:18:f0:8c:
                    c8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:FE:27:7A:2A:9B:24:4C:C8:F2:F7:30:78:E6:6A:F8:4E:15:52
            X509v3 Authority Key Identifier:
                keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:c5:d6:71:b5:ec:87:96:d7:5c:8d:27:05:e3:80:8c:10:
         b9:5e:45:39:38:95:7b:02:28:98:ed:55:88:1b:92:88:3f:ba:
         90:b2:9d:b0:8a:d9:2f:b6:7f:1f:dd:16:ae:10:e8:dc:f9:37:
         d0:ce:ac:ad:5f:5c:32:a8:7f:d8:aa:39:41:b8:d1:10:92:27:
         c5:b1:ec:34:08:02:f6:93:6e:7f:c4:7f:07:fd:c9:54:c9:8a:
         16:00:9b:8f:d3:58:ca:b4:dc:81:40:39:1f:ad:b3:bd:3b:1f:
         4c:bc:c1:4e:2b:21:4d:72:74:40:d3:bf:3e:ac:c3:2e:e9:22:
         9e:e4:e2:97:dc:22:cb:3c:17:7c:0d:01:ee:9d:ed:a9:f7:85:
         4d:da:37:b5:35:95:23:07:7d:51:6f:ee:57:cb:84:46:26:fe:
         24:da:4e:46:18:b2:a3:d5:c3:49:03:1b:04:65:b5:92:a4:ee:
         29:3a:49:a5:5b:c5:10:cf:a9:6a:dd:80:44:db:3e:e7:29:37:
         a6:42:95:05:2f:b0:bc:27:65:75:d5:07:7d:2e:b0:d0:71:e2:
         a0:07:bb:01:f4:70:a1:db:d5:b0:5a:c3:55:03:58:08:c8:5a:
         57:a9:0a:c0:18:fd:25:36:3e:23:cf:d8:84:4c:41:2e:8b:21:
         ae:0d:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:20 2024 by rpki-client on console-ams.rpki-client.org