Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
File:                     B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json)
Hash identifier:          /fvOhmInSmvhJDaUUBiyxf6B/5tFj5TZ5uEKcmE8A+E=
Subject key identifier:   6C:C2:64:24:13:21:7D:CF:90:0E:1F:A0:41:C0:5D:17:2F:24:B0:FF
Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64
Certificate issuer:       /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
Manifest number:          FC
Signing time:             Sat 23 Nov 2024 03:18:01 +0000
Manifest this update:     Sat 23 Nov 2024 03:18:01 +0000
Manifest next update:     Sat 30 Nov 2024 03:18:01 +0000
Files and hashes:         1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: R1dcRNcCbZ93tBhhE0c5ksdV+x8GHnnr7/cmGOomC+M=)
                          2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: 81gMp9DGHYjkYLUL7/F49o0KJ2c+VbzZxj1jqOt4vVU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl
                          rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564
        Validity
            Not Before: Nov 23 03:18:01 2024 GMT
            Not After : Nov 30 03:18:01 2024 GMT
        Subject: CN=67414969-22af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:fb:91:4c:5a:0c:25:02:b9:79:20:50:4b:
                    e6:0a:12:62:3a:f2:1a:b4:6c:18:a0:0a:d1:a4:76:
                    6f:86:b3:11:6a:2d:9b:67:bf:ae:a5:5f:cd:37:ff:
                    96:cf:4d:81:19:e1:a3:ea:b0:47:26:b5:eb:71:44:
                    59:20:06:e4:95:66:b4:10:6e:d4:f2:8c:46:ed:e5:
                    7c:51:99:f6:2e:f7:1f:d4:dc:30:b0:db:8d:b2:79:
                    cc:54:55:47:9d:a1:2a:c0:99:25:6e:09:58:f6:fb:
                    db:4e:6e:66:80:5e:fd:dc:b8:94:25:2f:27:53:68:
                    0d:00:c3:66:9e:19:05:f7:d9:dd:f3:1a:62:fc:ad:
                    5e:09:64:7d:eb:20:ec:b7:15:05:ca:3e:2a:cd:c1:
                    ce:1e:8d:96:a2:11:a4:96:69:c1:42:bd:cf:0f:c7:
                    91:52:fe:22:68:fb:74:d5:10:4d:46:05:6a:9c:f4:
                    dd:4b:bf:aa:26:2f:29:12:69:69:c5:70:e4:bc:27:
                    20:4f:5e:a4:c0:cc:ed:40:47:05:b0:ce:b8:e0:a4:
                    ec:cd:ec:6b:2b:fd:04:21:58:6b:82:24:44:fd:39:
                    f7:69:ac:69:03:94:3b:cc:e2:d6:d0:48:d9:ef:ff:
                    44:13:aa:2c:ab:30:da:50:fe:9b:7d:bb:d8:64:0e:
                    af:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C2:64:24:13:21:7D:CF:90:0E:1F:A0:41:C0:5D:17:2F:24:B0:FF
            X509v3 Authority Key Identifier:
                keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:90:73:aa:c7:64:40:49:4b:3f:4a:3f:79:78:56:77:7c:6e:
         b3:39:d7:a7:d2:c8:53:af:c9:c3:37:bd:34:33:97:3c:81:0e:
         20:1e:e7:7b:fd:6d:72:92:b7:3a:e1:79:0e:0a:7c:4f:76:61:
         27:56:60:e0:fc:79:13:5e:2b:62:64:2b:fd:eb:40:f3:82:93:
         98:33:ae:92:81:81:a0:92:02:de:e7:e6:22:05:83:3e:13:ae:
         97:01:2e:b3:ef:0c:a7:1c:96:d7:72:10:53:53:c2:20:f2:a1:
         9d:d4:20:f1:53:aa:f4:67:49:81:96:05:dc:f7:ff:59:01:f8:
         69:d1:53:08:54:05:04:1b:87:0e:83:d7:8b:a8:8e:21:c0:cc:
         cd:fc:93:45:c4:ea:82:bd:fa:10:ea:c2:69:60:24:a9:ea:f9:
         fb:43:96:94:e7:a7:51:d9:c0:72:20:a9:7f:04:29:0a:f1:24:
         d6:ea:5c:92:34:b9:25:d8:5a:01:de:c6:f9:9b:c2:43:33:69:
         5d:3a:0e:cc:5c:75:3f:ac:77:51:cc:82:a6:58:c8:95:9c:8d:
         8f:78:12:8e:5e:00:2d:34:b4:e4:fe:77:43:7d:70:d4:e8:a5:
         c3:9c:d5:e8:a1:ba:6a:00:21:64:62:b0:70:ee:f1:60:e4:b6:
         0c:d2:7c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org