Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
File:                     iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft (raw, json)
Hash identifier:          kgNyrHZRh80L2Bc8e+7T3ZM5ySY+6sU8ma/JBKqA/Go=
Subject key identifier:   B7:E9:45:09:4B:FD:07:E6:BA:FA:B4:55:19:86:4F:7C:15:5F:0D:C7
Authority key identifier: 88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF
Certificate issuer:       /CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
Manifest number:          6E
Signing time:             Sat 23 Nov 2024 04:56:56 +0000
Manifest this update:     Sat 23 Nov 2024 04:56:56 +0000
Manifest next update:     Sat 30 Nov 2024 04:56:56 +0000
Files and hashes:         1: iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl (hash: Siey2BrPzplIcsLn8Qogu2veqZvMsU+P5aZVJKBFemY=)
                          2: 5DB3B5AA145C11EFAE012A55C4F9AE02.roa (hash: XVpTX+9SjXHhDtMpPyvxEeJ7NxK4ba3tAPiaJxOtkLM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl
                          rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
        Validity
            Not Before: Nov 23 04:56:56 2024 GMT
            Not After : Nov 30 04:56:56 2024 GMT
        Subject: CN=67416098-267b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bf:21:92:34:8d:75:61:cd:09:cc:97:20:91:
                    e8:84:74:23:a2:79:be:37:9b:62:cf:c4:dc:eb:a2:
                    ca:41:b2:bb:7c:dc:6c:8f:72:dc:9f:f5:6c:ba:2f:
                    57:bb:74:ca:ec:b8:74:e0:3d:5c:08:c8:99:95:c2:
                    cf:7f:0a:5a:10:f0:98:3e:50:e2:6b:12:51:9a:97:
                    7f:82:1c:a0:98:2e:b5:a7:1e:77:3c:38:a6:e3:85:
                    4a:ce:9e:d7:24:d9:5b:f9:66:60:79:f9:8c:87:59:
                    74:06:5b:d3:cc:06:1b:81:ca:d5:60:4d:49:29:97:
                    be:fa:84:3b:9c:56:1f:37:2d:84:a6:6e:f6:14:fc:
                    65:c4:e9:0a:1e:6a:5c:af:11:be:2b:7a:a7:cf:8a:
                    e6:6e:30:38:7f:3d:de:96:3f:3b:6a:f7:a9:29:96:
                    66:bf:bd:ff:1e:9d:ae:04:a1:7c:3b:2b:c0:1f:a8:
                    e3:99:ca:3c:70:87:5f:03:11:36:dc:fe:c7:af:1b:
                    0c:d1:06:cd:2c:5d:37:a2:7b:86:ae:6d:93:2d:8f:
                    bd:c1:b3:f3:60:01:cc:0c:5f:ef:72:e4:0a:99:75:
                    ff:0d:f2:a2:9f:b9:b5:ee:57:70:47:20:67:d7:57:
                    6c:8c:df:51:fc:a2:7b:dc:a9:9d:47:f5:68:0b:8a:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E9:45:09:4B:FD:07:E6:BA:FA:B4:55:19:86:4F:7C:15:5F:0D:C7
            X509v3 Authority Key Identifier:
                keyid:88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f7:bf:af:6d:5f:dd:8a:92:c4:94:00:16:c5:e2:14:7e:3f:
         fe:a0:32:5e:9e:d4:1b:06:42:77:c3:f7:b4:d8:e0:b8:4d:55:
         58:70:96:f9:66:23:2b:84:89:14:63:7a:3c:18:be:4e:fd:b7:
         f4:d1:be:4d:00:46:f5:56:be:68:f8:83:e5:fa:c1:19:0f:40:
         75:b3:e5:e6:65:b9:28:82:1d:f4:98:c0:7b:ea:14:50:60:11:
         df:11:07:26:e9:62:a7:0a:53:16:5f:ca:13:39:e3:62:ab:da:
         db:9d:79:05:c6:49:da:c1:16:fa:76:93:f9:ad:41:06:f1:ff:
         58:17:b4:e1:fe:b7:a4:be:e0:8b:d3:90:79:50:3e:1d:7f:75:
         90:4f:5f:69:66:82:d3:75:60:62:9c:bb:ae:41:a0:11:e5:3d:
         90:a0:66:5e:0f:43:01:e7:2b:10:c6:93:af:9b:10:d2:2f:ec:
         e8:4a:17:05:65:fb:70:41:46:9e:c7:ac:a5:05:b4:33:60:c7:
         31:e9:f5:63:b3:85:8c:04:8f:66:40:d6:46:1c:bf:17:d9:ff:
         0c:59:de:b9:9b:88:47:f8:32:2a:aa:dc:a4:f8:9e:9b:9b:0a:
         9b:b2:be:d2:4f:6d:00:76:4d:dc:7c:8f:d5:ed:48:f2:58:e2:
         b7:fe:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org