Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
File:                     oo2gvpAdmDpDPYM1idFnv0hvZPw.mft (raw, json)
Hash identifier:          5PCNuoA3AXwGtY3rGQspvJPFPFQPBJ8HT+kTsnxrQuU=
Subject key identifier:   02:51:1E:A4:56:3F:65:94:E8:D7:EF:AA:23:7B:F6:EB:CC:6D:37:03
Authority key identifier: A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC
Certificate issuer:       /CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
Manifest number:          010E
Signing time:             Sat 23 Nov 2024 03:06:05 +0000
Manifest this update:     Sat 23 Nov 2024 03:06:04 +0000
Manifest next update:     Sat 30 Nov 2024 03:06:04 +0000
Files and hashes:         1: oo2gvpAdmDpDPYM1idFnv0hvZPw.crl (hash: Ow5g3ro+W7ZyWQGoSrwGKR/sr1tz1vRpiGXe8JWzC0U=)
                          2: DB27568209DA11EEBA18A082C4F9AE02.roa (hash: xkDRTRjpJ44DAm2KH+GLlFrHbbkGeE4AN4OlC0H4zYI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl
                          rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
        Validity
            Not Before: Nov 23 03:06:04 2024 GMT
            Not After : Nov 30 03:06:04 2024 GMT
        Subject: CN=6741469c-cf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:8c:bb:fa:1d:52:07:b3:59:c7:3f:25:d1:
                    aa:81:0b:ef:ea:e0:0f:f6:56:36:9e:cb:72:bb:28:
                    5d:99:9b:b1:a3:9e:ca:85:63:4d:58:05:ae:3f:99:
                    9a:e1:70:11:a1:66:4c:a3:07:14:da:76:75:b9:ad:
                    7d:84:82:94:49:d2:06:05:de:83:13:2d:4b:6f:38:
                    d1:44:fd:a4:72:1b:01:e6:7b:9c:73:bd:ce:68:26:
                    b7:1b:30:1b:9d:f6:2c:f0:f5:04:ad:ec:78:08:4f:
                    1b:40:20:d7:ca:64:38:69:03:48:53:d7:6f:86:bb:
                    3e:48:e4:6c:af:39:1a:37:92:e8:c1:95:9f:e0:99:
                    6e:bf:c6:85:1f:8e:7a:4b:fd:63:1f:c0:a1:59:da:
                    ae:3b:cf:21:3d:6a:40:ea:5f:6e:b5:a1:55:19:81:
                    bd:df:f6:f6:6c:6b:be:12:e7:66:21:53:69:67:24:
                    cb:b3:70:f3:94:eb:8a:06:90:8b:25:cc:0a:b2:a7:
                    4e:7e:aa:d3:86:4d:71:58:c5:24:d3:c5:f2:d6:42:
                    a4:18:ac:fc:c6:6d:04:ff:16:26:fc:0c:46:d7:d2:
                    4b:27:a4:24:f3:de:20:97:23:79:ac:db:b4:3c:c5:
                    16:b4:40:a9:30:e4:62:a1:af:33:d8:db:49:5a:f7:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:51:1E:A4:56:3F:65:94:E8:D7:EF:AA:23:7B:F6:EB:CC:6D:37:03
            X509v3 Authority Key Identifier:
                keyid:A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e9:eb:45:0e:72:0c:1c:9a:69:bc:b5:22:0c:98:ee:6b:13:
         3c:59:ba:ce:a6:76:b5:2c:f1:d6:e0:80:f2:c6:bc:5a:73:4b:
         04:46:e1:49:99:91:37:0c:75:ff:9d:fc:7a:aa:ce:05:9d:e0:
         59:71:aa:88:6f:ca:c9:11:9c:e2:44:96:32:d9:19:ce:c2:10:
         af:6d:d1:59:2f:ce:19:8f:fb:48:17:da:12:e5:f6:4a:96:30:
         d8:eb:6d:55:92:9e:d1:dd:68:e6:d3:c7:59:79:91:4b:a6:bc:
         dd:3a:dd:e6:d0:7c:16:6b:c8:3a:7a:23:96:52:77:34:6a:e6:
         8e:f7:34:23:a9:85:6c:74:ac:c3:ec:c1:cc:35:05:73:55:4f:
         48:4b:f6:58:94:d0:a2:cd:78:5e:76:20:9b:f4:c0:fe:b4:a5:
         dd:e6:6d:0b:1c:57:ad:82:04:5b:9d:21:40:38:eb:45:a3:05:
         77:2f:3f:0b:40:10:a1:b9:18:91:43:7e:04:5d:fa:01:80:ed:
         9a:a1:40:8b:19:75:ac:10:71:c8:6c:cb:6c:67:3f:3a:60:3f:
         f0:34:13:9a:ac:39:c1:6f:f4:3b:30:7e:ae:08:8f:78:32:67:
         38:6d:61:bb:9d:7a:26:7c:d5:2b:f1:89:fc:68:b1:f9:ca:f9:
         a8:fc:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org