Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
File:                     Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json)
Hash identifier:          MKWBVnAKXH2QF6SiGSJ8hqmM2VLi8zgKL1cRatMuVjE=
Subject key identifier:   EF:8E:6E:41:08:77:BE:0F:60:E7:8A:83:55:F4:28:BC:ED:17:29:5C
Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Certificate issuer:       /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
Manifest number:          0144
Signing time:             Sat 23 Nov 2024 02:35:20 +0000
Manifest this update:     Sat 23 Nov 2024 02:35:20 +0000
Manifest next update:     Sat 30 Nov 2024 02:35:20 +0000
Files and hashes:         1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: s+tXruLbVTOf6YGWHGT5yW/xK19gnETzJLiOZ84W9tE=)
                          2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: 63NoI3hjIPZDykrhVPErerfXonxNepl4GKrFBmEJjM0=)
                          3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: wVHle4DHj+Xgjwwiq8R+NOE0g124bZkko55edUj9vKE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
                          rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
        Validity
            Not Before: Nov 23 02:35:20 2024 GMT
            Not After : Nov 30 02:35:20 2024 GMT
        Subject: CN=67413f68-d303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:39:5d:92:68:74:e6:93:69:ee:4c:dc:e1:
                    eb:a7:cd:6c:96:02:d0:16:40:a4:5d:35:d2:e7:2c:
                    e1:da:c6:1a:48:74:39:e1:9f:5b:c1:93:50:c9:05:
                    bd:32:69:f5:02:55:b2:c1:25:00:20:e0:24:df:e3:
                    11:92:23:2b:b6:13:fe:fd:a3:c5:68:27:88:50:39:
                    9c:b5:2b:96:c0:50:b2:61:42:1e:22:c7:64:e1:a7:
                    90:30:d6:27:17:1f:90:b9:15:ef:64:a0:75:bf:28:
                    5b:bb:1d:38:4d:03:01:19:08:e2:55:43:99:df:90:
                    3a:f5:5a:f4:15:7f:c8:23:99:6f:51:90:b1:58:c4:
                    ac:43:91:1c:6e:c2:44:b6:d0:42:f1:c7:7a:6c:a8:
                    7e:49:58:02:37:87:a3:08:35:50:3e:71:ef:4a:e2:
                    58:db:fe:96:9f:bb:1e:98:13:5c:20:8f:db:4a:56:
                    b1:73:57:e1:cc:57:8b:f7:6a:5b:66:df:ca:54:b2:
                    00:6f:b7:4f:03:4d:a0:69:17:0f:ae:e0:b7:00:dd:
                    24:e0:48:00:4e:15:a4:8a:e8:a9:60:f6:79:1e:4d:
                    08:6f:12:7a:03:b0:7c:0d:85:44:3f:1f:e6:11:3e:
                    73:e2:ab:70:d1:d6:9e:ee:21:ee:53:81:7d:8a:c5:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8E:6E:41:08:77:BE:0F:60:E7:8A:83:55:F4:28:BC:ED:17:29:5C
            X509v3 Authority Key Identifier:
                keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:b3:12:9c:cc:83:9f:a6:c6:cb:e2:65:d7:0a:dd:46:6c:
         ec:7f:41:e3:b3:76:f7:4b:37:5f:70:d0:ea:dc:90:3f:fe:14:
         fc:c6:f0:bc:61:1a:c1:15:ad:eb:2d:52:4a:5b:eb:40:7e:35:
         4d:a3:ea:45:23:d2:68:5a:9e:f9:49:df:8a:f9:35:cc:12:72:
         6d:7f:ab:9e:45:2a:8d:82:e2:dd:77:fb:be:80:2b:9c:5a:02:
         37:eb:66:a0:92:0c:68:c1:f1:52:77:29:45:e4:7d:9b:7a:37:
         d1:3b:ee:d0:45:84:29:ff:92:ce:da:4b:e5:b4:0c:5d:96:62:
         46:67:1c:dc:17:eb:00:9f:d1:93:0c:53:9f:7e:56:39:4c:d9:
         27:93:31:c2:82:5e:85:b6:20:cc:ca:43:0a:31:a8:30:ad:9c:
         3f:14:43:47:b1:79:ab:14:0a:3c:28:6c:72:35:48:73:6c:3b:
         69:94:a6:c3:95:5c:3d:a7:b7:c2:37:da:25:53:3d:ac:bc:f6:
         a2:b9:cc:77:c9:fb:a0:93:0e:ff:99:45:5e:6a:b8:69:b9:8e:
         02:da:84:21:c2:fb:96:63:9c:da:3f:5c:80:62:69:65:ae:b7:
         3a:1b:a8:c2:8a:e0:49:11:a7:e9:2d:7a:0f:f6:68:d5:ad:a5:
         d8:fb:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org