Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
File:                     fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json)
Hash identifier:          Qk6vzKaPBMZ85/IFseDI4f1DFwsTvS1ULpEDxccQX8s=
Subject key identifier:   41:8D:CC:CC:8B:22:D4:90:BC:0A:3F:0A:44:45:59:C3:7E:6D:49:37
Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9
Certificate issuer:       /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
Manifest number:          0127
Signing time:             Sat 23 Nov 2024 02:54:02 +0000
Manifest this update:     Sat 23 Nov 2024 02:54:01 +0000
Manifest next update:     Sat 30 Nov 2024 02:54:01 +0000
Files and hashes:         1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: TuR7Evo8dPwHSKhKDnyEh/JOoiWrSbvNoJ5MBBWAqzM=)
                          2: 12671028EDB211EDBD7A5059C4F9AE02.roa (hash: n3ouhPei4NotgM38MNTkKFy/IQI2+nN1IBqN3B6eYFY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl
                          rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9
        Validity
            Not Before: Nov 23 02:54:01 2024 GMT
            Not After : Nov 30 02:54:01 2024 GMT
        Subject: CN=674143c9-425f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:b1:a7:9d:4c:f3:95:b0:df:68:dd:37:20:
                    f2:db:6e:40:c8:5b:ad:60:28:ae:4f:ca:5e:bf:9a:
                    08:c4:fc:8f:2e:12:e6:c3:e9:de:39:c1:8e:aa:37:
                    49:83:44:43:37:5f:03:83:39:db:27:68:c8:b6:b7:
                    86:76:f4:e2:cd:0e:2a:3b:ee:75:a5:bb:3c:e4:22:
                    8b:f5:1b:07:d8:83:18:a4:65:ef:f5:8a:48:04:f7:
                    2d:ca:19:83:05:a3:bc:e2:b1:2b:ab:90:67:bd:a1:
                    79:6f:e1:df:6d:f8:42:2d:5a:9f:2c:3b:f5:2e:fd:
                    f3:a4:9e:12:4e:a7:08:9a:0f:82:6d:ed:84:2a:8b:
                    ce:be:cd:ec:2e:a1:4e:26:61:bd:5a:93:06:f4:22:
                    bd:e7:ef:4a:f3:14:8b:38:77:ab:b1:2f:16:58:b5:
                    aa:e5:8f:30:d7:d2:0f:87:c3:5a:ab:96:b4:ab:de:
                    70:8f:36:ea:5c:17:1e:65:8b:92:14:4c:99:3d:92:
                    f6:dd:b9:c9:04:28:0e:f5:b9:6b:eb:19:39:0f:64:
                    42:b6:ea:4c:df:24:22:4e:21:74:5c:08:c6:3c:2d:
                    9b:9a:b5:fd:86:3e:cb:3f:6a:30:95:60:33:1b:f1:
                    eb:d6:90:ff:93:d1:0d:5a:bd:e4:4c:c8:ef:20:66:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8D:CC:CC:8B:22:D4:90:BC:0A:3F:0A:44:45:59:C3:7E:6D:49:37
            X509v3 Authority Key Identifier:
                keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:1d:e8:aa:96:c2:f3:15:f3:3d:ec:3b:e1:19:dd:b8:c6:4a:
         79:0a:3c:fc:2d:32:eb:06:15:40:7b:c1:8b:10:e7:19:a5:5b:
         8d:e8:b7:ec:28:f8:c5:3b:3a:ad:6d:23:df:55:f9:17:3c:a3:
         91:6d:df:9c:f5:cc:b6:87:93:9a:ad:f0:87:72:1a:c7:3b:4e:
         de:51:b0:53:be:ea:a0:3e:c3:a6:80:7f:58:d1:07:fc:d8:17:
         c0:47:d8:8a:68:83:b5:4a:24:da:12:08:62:c2:72:b8:32:14:
         6d:65:6d:a0:98:6b:fd:95:bf:36:35:01:da:03:da:f1:c2:d3:
         dc:b5:5c:f4:9a:bd:7e:6a:c4:a9:c2:8b:d0:e4:d9:75:b9:68:
         5a:d8:a8:2d:80:7a:0f:5d:ad:0d:68:65:a5:cd:96:fb:03:20:
         e0:70:95:6a:56:fe:b0:e9:cd:6b:5c:f2:ea:0b:79:a9:5b:96:
         76:2f:24:58:25:b3:a8:45:e3:80:e9:3c:63:30:da:ab:03:3c:
         0f:a1:97:7c:03:4b:b9:e1:fa:da:3a:06:8d:ba:9c:00:08:84:
         8f:0e:5b:5f:dd:c4:a4:50:8c:f9:a3:4f:59:c0:e9:51:f5:d8:
         d6:18:ce:9f:bc:1f:88:f0:aa:88:0a:8c:97:c7:c8:3d:4a:89:
         a3:f5:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:43 2024 by rpki-client on console-fra.rpki-client.org