Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
File:                     EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft (raw, json)
Hash identifier:          z/Gx+BbdN0fgL9ZlFfSZXvV2mmxUjF69QybgQd4C4L4=
Subject key identifier:   61:C6:8E:73:5E:5B:42:A5:D8:D3:5B:EC:8B:98:84:77:AE:80:00:E1
Authority key identifier: 11:43:4E:13:D2:A7:0B:13:51:82:F5:C9:CE:0E:59:95:BB:84:74:3C
Certificate issuer:       /CN=A913D208/serialNumber=11434E13D2A70B135182F5C9CE0E5995BB84743C
Certificate serial:       0408
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
Manifest number:          0403
Signing time:             Sat 23 Nov 2024 00:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:52 +0000
Manifest next update:     Sat 30 Nov 2024 00:00:52 +0000
Files and hashes:         1: EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl (hash: BWpTIlQAOxRrrtYDUS7cEBFjH4Z6CbYdUVH2aFiDLwk=)
                          2: 9C0D9C2C4DF211ECB01A1042C4F9AE02.roa (hash: euIKkIRKbSZJaptoVkA1FWABetsVY2G8OnEmaHh59oI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl
                          rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1032 (0x408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D208/serialNumber=11434E13D2A70B135182F5C9CE0E5995BB84743C
        Validity
            Not Before: Nov 23 00:00:52 2024 GMT
            Not After : Nov 30 00:00:52 2024 GMT
        Subject: CN=67411b34-2ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:43:3c:fc:88:51:3d:a1:0d:cf:a0:2e:ca:
                    53:62:9e:c3:03:e5:8b:68:bd:b1:dd:69:b4:02:e5:
                    43:1f:a0:1d:33:47:c2:79:7e:69:53:01:7d:90:1a:
                    75:ee:b5:df:90:8b:55:21:27:bb:a2:58:73:0d:4c:
                    e9:96:b4:ec:04:ae:8d:51:1f:e6:4b:37:0d:69:fd:
                    2f:e1:8f:47:a8:d8:33:b4:1e:90:e7:b9:fb:90:73:
                    30:73:cf:32:6e:c2:f1:b2:9a:57:b3:4b:b5:ea:74:
                    18:38:6e:8c:7a:f9:36:fd:a2:d1:33:a7:32:69:6a:
                    53:1d:39:9a:4f:cc:15:83:34:b6:89:b6:86:a9:92:
                    ee:05:83:8a:e6:3c:1c:bb:63:0c:fb:5c:9e:59:85:
                    14:a4:e4:54:8f:dd:5e:37:f0:4a:e7:8e:26:80:ca:
                    50:d3:ab:f2:9c:9b:be:9d:68:77:80:54:78:cd:b0:
                    49:04:96:82:37:e1:eb:04:b5:ef:82:a2:dd:a4:e2:
                    ff:25:a2:80:e9:52:64:53:92:6b:59:7c:ef:25:2f:
                    dc:fd:8f:2f:68:82:69:b0:86:66:3d:2b:18:91:e4:
                    1a:a1:12:ba:2d:ff:cc:15:01:62:63:89:17:02:8b:
                    ac:5a:e2:93:b2:e3:a1:84:36:88:ed:b9:9c:2e:73:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C6:8E:73:5E:5B:42:A5:D8:D3:5B:EC:8B:98:84:77:AE:80:00:E1
            X509v3 Authority Key Identifier:
                keyid:11:43:4E:13:D2:A7:0B:13:51:82:F5:C9:CE:0E:59:95:BB:84:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:de:92:7e:73:92:4f:ff:12:20:ac:91:8b:c8:f8:07:aa:a7:
         59:42:5b:74:05:0c:16:d7:4f:b0:8f:49:a1:5b:6d:a1:95:98:
         e6:de:c5:d5:9f:a8:06:d8:9e:25:b7:aa:c1:88:75:60:04:15:
         94:06:87:81:97:eb:bd:c8:af:2d:cd:16:9d:95:aa:1b:c6:45:
         40:2f:83:b2:dd:24:fe:5b:77:a8:99:8e:b5:fc:13:04:e5:2d:
         21:f0:bc:8b:cb:3e:18:98:aa:19:e5:2a:5f:8c:64:5a:79:63:
         6e:88:61:7e:c8:62:4f:35:f1:e0:cb:77:61:0f:2c:4c:84:46:
         7a:28:ba:db:63:91:79:14:54:89:06:e7:e7:b1:ab:48:d1:df:
         91:d1:32:ec:de:1e:50:68:a3:99:1c:fd:49:a1:d3:db:dc:72:
         dd:70:3f:09:83:13:c6:09:9e:6c:f2:cb:c6:52:b5:5f:59:ba:
         77:37:06:82:ca:10:e8:d4:69:8c:6b:25:22:53:6a:de:a3:a6:
         3d:3e:7b:65:82:4a:8a:96:d6:5f:56:99:8f:c6:8e:a8:f2:74:
         73:16:bd:38:42:98:e8:8b:c3:e1:f1:42:67:82:4a:9d:96:f6:
         d2:3a:c4:e9:f8:67:f3:b5:9f:64:d1:c7:51:90:7b:c4:44:e0:
         c0:c8:32:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org