Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
File:                     1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft (raw, json)
Hash identifier:          OjAnVIUX5wl2NnIiQhDAhaRkfEk5/tIW10Xc/t4vciE=
Subject key identifier:   DB:7E:55:F6:B7:40:75:2E:0B:25:11:E0:71:98:4E:32:A7:B9:BA:6C
Authority key identifier: D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11
Certificate issuer:       /CN=A911F5C7/serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
Manifest number:          14
Signing time:             Sat 23 Nov 2024 05:58:10 +0000
Manifest this update:     Sat 23 Nov 2024 05:58:10 +0000
Manifest next update:     Sat 30 Nov 2024 05:58:10 +0000
Files and hashes:         1: 1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl (hash: Fg+//baNT6oYF7HPV7Ta+eCRsnvmRdpz0QTopJJAGKU=)
                          2: E6721B6E908211EFAC47F726C4F9AE02.roa (hash: wJxQyf0eIMTbf6R3S1EMRdfJGjX/18WoSajNIY4aU5s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl
                          rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5C7/serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
        Validity
            Not Before: Nov 23 05:58:10 2024 GMT
            Not After : Nov 30 05:58:10 2024 GMT
        Subject: CN=67416ef2-8313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a3:ff:18:54:bc:13:a1:60:32:0e:03:92:25:
                    86:8e:2b:e1:40:69:64:68:5c:e9:e2:2b:a5:ef:e5:
                    26:78:05:99:57:c6:12:95:df:30:ce:73:94:a8:fb:
                    cc:1e:ff:3b:dc:df:30:61:12:b5:64:fe:f9:80:ad:
                    37:ea:d2:af:6a:67:af:39:0c:1a:ae:41:ea:c5:74:
                    a3:8d:eb:60:b1:b5:11:3e:67:09:3a:50:51:82:dd:
                    2e:15:e0:b3:a4:cc:42:a6:6f:49:a3:55:e8:70:ba:
                    20:b6:48:b4:ac:07:18:c5:c6:f8:96:2d:de:95:99:
                    68:3c:3d:8c:96:30:e3:56:9f:3c:f4:7b:97:4a:c9:
                    52:cb:1b:8d:da:d5:c3:81:af:27:b5:0b:4b:ca:12:
                    84:61:44:a4:32:a6:43:b3:74:69:cc:b5:a4:ef:53:
                    8e:b1:01:eb:69:a2:b1:ca:6c:1b:03:81:dc:91:6b:
                    71:00:e8:33:f2:2f:a3:4f:39:09:46:74:af:56:f0:
                    fa:48:6c:8f:6f:07:48:7c:b6:a7:d4:d8:c7:9f:80:
                    fc:3b:8f:af:e5:8a:6d:ea:9c:1b:e1:b1:32:ae:7a:
                    62:46:61:3d:1b:ee:96:5e:04:d0:6c:bc:34:10:6d:
                    2b:71:7c:e5:70:8a:45:47:fa:1c:67:28:69:76:3c:
                    9c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7E:55:F6:B7:40:75:2E:0B:25:11:E0:71:98:4E:32:A7:B9:BA:6C
            X509v3 Authority Key Identifier:
                keyid:D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:95:18:d7:01:95:ab:1d:07:a5:69:64:da:3a:52:e3:67:b5:
         c3:14:67:65:32:b0:85:11:b5:ff:56:c9:7f:77:b5:c6:0f:90:
         50:b9:38:e3:fc:ac:9c:38:91:ad:a2:50:1e:1b:97:85:66:6c:
         e1:e9:75:5b:a6:e3:3a:e9:97:4c:db:61:36:ef:54:6f:f8:1d:
         58:dd:78:96:3d:ac:0b:02:34:75:7b:dc:e3:8a:a0:d5:96:ac:
         a9:4e:1b:36:b9:b0:96:e7:2f:08:f4:bc:16:69:cf:00:91:cf:
         c9:19:9d:b6:77:f1:d0:f5:43:74:ec:96:15:bf:9e:33:83:85:
         18:35:54:e4:67:88:e9:34:eb:aa:b7:a1:3e:56:b4:fe:23:de:
         60:c4:c7:15:d0:ae:ef:ce:a3:f2:3f:18:72:c3:93:8e:76:2f:
         85:ea:dd:6c:da:ff:ee:ea:67:a3:ed:5e:e8:31:d9:89:c7:11:
         f6:73:de:e6:fa:12:d7:7b:6c:60:4e:61:be:1f:5a:b4:9f:f1:
         6a:3f:07:1c:52:fc:64:8c:f5:7c:2f:65:af:f8:16:e4:5a:91:
         bf:4e:f2:f8:4c:f6:1d:bc:3e:ec:29:0b:bd:01:b4:f0:6c:6d:
         5c:12:9b:bd:46:8a:6b:5c:20:20:b0:43:5c:a5:1c:68:bf:5d:
         8f:c0:e7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org