Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
File:                     mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json)
Hash identifier:          49zHJii9GmdEb0kByrT2V9HiLNBzQDQjzcVVodVcmdI=
Subject key identifier:   51:E6:F7:9B:E3:BF:DB:6E:85:A3:11:D4:AA:6F:A8:6C:42:E2:48:53
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Certificate issuer:       /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
Manifest number:          0155
Signing time:             Sat 23 Nov 2024 02:34:31 +0000
Manifest this update:     Sat 23 Nov 2024 02:34:30 +0000
Manifest next update:     Sat 30 Nov 2024 02:34:30 +0000
Files and hashes:         1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: okCPOmXGt8+4/0sLZLGPHwqwfzS253OGn0mZugavOaA=)
                          2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: 46Rei/bZZJIVATTcdxCQjd0v0xlUhPPipw2D8+sS4KM=)
                          3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: Ay7zs1vbUvuiGBUzSAIsAQOZ+4xjHzR0vqWfzaWXybU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
                          rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:34:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
        Validity
            Not Before: Nov 23 02:34:30 2024 GMT
            Not After : Nov 30 02:34:30 2024 GMT
        Subject: CN=67413f36-f248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:61:7c:ec:0e:93:8a:9f:12:34:db:9e:90:
                    a1:78:53:2e:83:9b:36:67:38:17:84:5e:3f:4c:c6:
                    57:57:2f:36:54:09:00:84:8d:11:12:a8:d6:07:1b:
                    19:c3:2c:ca:b4:91:6d:76:04:ee:7e:c7:f8:d1:40:
                    fe:d7:ae:eb:22:75:fe:c9:a7:00:06:ed:b0:91:4b:
                    99:c7:e6:c7:48:4d:63:2a:ef:0a:41:7f:1f:35:3b:
                    9a:c4:27:03:b3:2d:c0:ba:97:f2:ec:d2:3b:30:7d:
                    8b:30:f3:8a:d5:47:ce:19:40:ff:1f:1a:30:6b:e4:
                    4e:22:b6:c0:e9:4a:81:e4:9e:8b:94:8d:b1:01:8d:
                    32:55:e7:c3:55:4e:ab:53:37:b2:10:83:7c:c2:f1:
                    2b:8c:ba:97:b6:79:3c:f8:8c:94:a7:52:4b:04:04:
                    1f:4e:4e:e9:7c:da:58:0a:ac:5d:2d:ca:37:93:9f:
                    49:c4:fe:9c:49:52:40:9c:db:31:a9:f0:c8:1b:b0:
                    2e:f5:88:9e:9f:74:12:e5:da:e2:59:85:bf:d5:b5:
                    22:30:c5:68:63:5b:aa:fc:21:81:9b:3d:65:59:ac:
                    5f:e4:62:e2:5b:28:14:22:9e:48:1e:13:a8:80:6a:
                    7c:2f:2a:3e:de:37:25:b6:60:d5:46:cb:fb:56:1e:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E6:F7:9B:E3:BF:DB:6E:85:A3:11:D4:AA:6F:A8:6C:42:E2:48:53
            X509v3 Authority Key Identifier:
                keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:fe:70:88:d1:b3:b9:22:e4:d9:1e:b9:03:6b:45:a9:7d:95:
         3f:b2:33:16:4f:a8:8f:1d:a2:d9:51:4d:44:68:1e:ba:e8:be:
         6f:60:8a:b5:97:b0:d1:04:9e:e5:77:20:8d:e6:eb:19:89:dc:
         5f:37:24:97:44:4e:7d:1d:af:22:96:b3:73:47:79:71:e3:06:
         1b:56:10:06:02:8e:4f:0a:86:07:2e:77:75:e9:92:32:c1:b8:
         c9:af:5a:bf:df:ba:65:1d:77:29:aa:80:6e:1b:4f:d5:2f:e8:
         14:22:8f:16:0b:f6:45:43:23:36:07:0b:e9:aa:42:1b:d3:a1:
         03:8a:4b:18:ce:f1:3c:48:e4:63:b0:73:3e:f6:45:97:42:46:
         55:7f:68:71:b3:72:fb:b8:93:fe:07:37:d4:52:df:88:91:be:
         5e:ca:ff:52:ba:36:6f:4e:d2:2f:65:68:5f:3d:2e:4f:95:94:
         ad:41:f1:10:d7:c3:03:6a:ef:a1:86:0e:99:0e:6b:25:4d:87:
         70:fe:70:81:5c:3b:49:ee:7a:57:1e:8c:3b:d3:42:bb:ac:af:
         2b:33:54:2e:e1:33:22:d2:fe:cf:cb:3a:35:58:52:5a:51:9f:
         3c:02:0d:8c:0d:91:30:da:ce:22:45:9d:4e:cc:7c:2d:39:b4:
         5e:53:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org