Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
File:                     cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json)
Hash identifier:          QsdSVwC8HTQS7ZMW9zgverNMJtTU8BTiCdjAmdQFNwE=
Subject key identifier:   6A:20:6A:42:DA:F1:D0:95:B5:CA:44:C0:86:D1:FA:BB:56:0A:4E:24
Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
Certificate issuer:       /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
Certificate serial:       02B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
Manifest number:          02B1
Signing time:             Sat 23 Nov 2024 01:03:45 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:45 +0000
Manifest next update:     Sat 30 Nov 2024 01:03:45 +0000
Files and hashes:         1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: OxKPIejLy7f32yfWMr8bicpEl2HzuSq7rUO8utlDh4w=)
                          2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: 9fQigC3wlL74leAFIK8l0szB2VeeXSwlgNExBhvCRPM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl
                          rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
        Validity
            Not Before: Nov 23 01:03:45 2024 GMT
            Not After : Nov 30 01:03:45 2024 GMT
        Subject: CN=674129f1-8908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:09:0a:f4:da:5a:62:de:b7:a9:95:a5:1a:a5:
                    b4:d4:49:9e:a1:54:da:01:53:4c:78:2f:bb:94:5a:
                    05:7c:ef:b5:dd:16:89:c9:81:fb:7e:53:0c:99:2e:
                    68:3e:06:87:93:1d:27:83:49:dc:e6:b9:c5:08:4f:
                    45:67:e3:bb:17:82:82:37:5b:a9:98:af:ad:2a:55:
                    70:6a:ff:cc:64:b9:15:9f:1f:41:53:75:fb:f4:36:
                    9e:7b:56:05:b6:0f:80:6a:1b:a5:0a:36:57:5f:0f:
                    4f:80:71:52:b8:3d:97:80:aa:0d:f6:19:5b:93:f0:
                    68:79:95:f8:a0:75:40:ea:de:af:9c:88:49:96:00:
                    c7:95:ae:a1:e0:53:6f:52:0d:c7:d6:0f:5e:77:69:
                    5c:90:fb:77:15:9d:f5:61:64:e4:01:2c:f1:4a:6e:
                    c4:ba:c6:e9:da:b2:af:32:f6:b0:3b:e6:39:62:94:
                    8c:a6:63:ed:4d:fa:ab:5c:31:fd:d7:8d:fd:07:da:
                    fc:91:e5:a7:ef:e1:c9:54:e3:58:af:94:29:57:8f:
                    cc:ce:63:de:8d:5c:27:29:28:df:1b:5e:70:8c:2b:
                    80:f1:bb:55:7b:ee:1a:95:88:ea:e1:b8:4b:10:10:
                    fd:34:35:01:ab:76:36:77:58:21:85:8d:f2:b4:07:
                    c2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:20:6A:42:DA:F1:D0:95:B5:CA:44:C0:86:D1:FA:BB:56:0A:4E:24
            X509v3 Authority Key Identifier:
                keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:fd:0b:6d:c2:27:55:6a:07:fc:42:fe:84:90:11:bf:67:de:
         b4:4f:42:a7:62:41:50:bb:a2:f5:24:05:ad:9e:b0:72:cf:00:
         3b:17:f2:cc:5a:5f:0a:89:88:f1:4e:7d:84:95:3b:91:5e:f7:
         28:e7:17:e2:02:83:77:75:5f:4f:9c:fd:9f:44:13:9d:b1:ed:
         5e:4e:1f:46:87:a9:c7:2e:a7:5a:1d:9a:47:8f:3a:40:47:5d:
         43:91:78:ae:87:81:a5:13:de:a1:7b:ef:38:98:4b:3b:62:e2:
         de:67:76:91:f2:48:cc:31:88:d1:68:b4:79:96:cc:fb:4e:21:
         49:54:c5:4a:de:94:b0:23:74:37:06:ae:5c:fa:57:31:eb:80:
         66:07:19:e4:54:37:19:fb:6d:4c:e2:58:1f:ab:fc:b0:09:61:
         41:9e:a3:62:67:04:b9:c5:21:dd:27:73:cd:ca:db:7b:2e:b3:
         70:15:e4:10:ed:da:8f:44:0b:df:6a:2d:87:83:37:ae:60:4f:
         47:3a:b0:4b:ea:2d:ef:34:5f:4c:c2:ad:00:18:33:dc:af:74:
         0f:d8:d3:ea:08:1c:1d:c8:f8:25:48:2d:e2:0c:b9:90:39:46:
         39:58:bb:4c:e9:06:13:0f:c2:1f:06:38:48:ab:3e:f8:87:1d:
         66:b5:63:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org