Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
File:                     pZmI7E1t1bpqMPhmUatWLBimo04.mft (raw, json)
Hash identifier:          kySK+Sl9tnIrrRJ56TBJc24dtnmK5VLZ0AByfzXU1vU=
Subject key identifier:   F6:98:EE:11:D4:10:9E:F8:C0:BC:C7:49:A8:FB:72:28:68:02:3B:4E
Authority key identifier: A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E
Certificate issuer:       /CN=A9143FF5/serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E
Certificate serial:       0478
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
Manifest number:          0473
Signing time:             Fri 22 Nov 2024 23:38:17 +0000
Manifest this update:     Fri 22 Nov 2024 23:38:17 +0000
Manifest next update:     Fri 29 Nov 2024 23:38:17 +0000
Files and hashes:         1: pZmI7E1t1bpqMPhmUatWLBimo04.crl (hash: 6Iwgx9qJlm/2txpDOGPswGXIi9toOQeBAFmKuaMs7tA=)
                          2: A027E062300911ECAE581534C4F9AE02.roa (hash: krTyx4GXgFlPzZ2i1hVEEfK54ydEVTwtrf/GVqS5/WA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl
                          rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143FF5/serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E
        Validity
            Not Before: Nov 22 23:38:17 2024 GMT
            Not After : Nov 29 23:38:17 2024 GMT
        Subject: CN=674115e9-a424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d6:5c:e5:9b:91:11:61:e0:a3:21:3c:b6:76:
                    97:c2:49:8e:63:ff:1a:16:c8:85:c5:f2:77:7a:fc:
                    d9:a9:60:9b:19:28:4d:5e:51:eb:36:1e:05:1e:af:
                    c2:ff:87:3f:51:c6:36:03:41:72:68:e8:b6:c3:a7:
                    ff:a0:3e:18:6d:5d:f9:fb:84:0a:57:42:19:97:57:
                    e8:78:c2:5e:d5:4f:78:02:88:45:b3:d4:3c:66:25:
                    1d:6a:61:b8:93:d7:98:e5:50:ff:c4:d8:a2:ff:41:
                    7a:c9:2a:87:98:16:ef:43:55:9c:75:ea:66:18:66:
                    e9:e1:8b:75:eb:44:52:f0:df:a2:ef:21:53:f3:da:
                    2c:20:0a:35:e8:ad:7d:59:03:f6:a8:00:02:6d:87:
                    fc:84:1a:57:a9:1e:3b:99:f3:60:0e:99:9a:c7:7d:
                    11:a3:63:8e:26:17:5a:80:38:76:31:2f:ba:76:d2:
                    e6:92:dd:00:ef:48:db:3c:1e:34:3b:ee:1d:42:94:
                    34:fb:1c:dd:0f:8a:11:6b:18:5b:8b:c1:70:ae:7a:
                    3a:a3:99:45:48:58:58:0b:f1:ad:74:8a:74:5a:00:
                    fd:92:74:dc:93:c4:fb:bf:b5:10:a8:46:d2:c4:bd:
                    1b:6b:48:ad:5b:01:46:7f:0b:de:92:5f:a6:e9:53:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:98:EE:11:D4:10:9E:F8:C0:BC:C7:49:A8:FB:72:28:68:02:3B:4E
            X509v3 Authority Key Identifier:
                keyid:A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:da:a9:a3:d0:81:ba:35:8c:4f:cc:f5:02:02:74:f3:c9:db:
         ee:ee:d9:14:26:61:57:39:ef:c2:aa:5d:88:06:44:50:16:b1:
         65:c1:af:06:52:8c:69:61:d7:b3:2f:86:21:17:a3:e2:2d:17:
         7a:9d:2b:4f:43:1a:71:f4:3c:ee:22:fd:12:eb:4f:c5:c7:0e:
         8e:93:ff:e7:d3:4e:c5:cb:51:a6:4e:b7:f9:60:d9:e8:14:af:
         f1:7a:1c:56:a1:4f:10:c6:87:68:d9:55:81:3b:af:50:ed:fa:
         f4:1f:65:23:f9:dd:60:f8:6a:54:32:48:c9:51:a5:93:a4:2d:
         47:86:46:d5:84:4f:dd:a2:89:a9:0a:69:05:cf:bc:fa:a2:77:
         41:99:4d:2c:22:49:c7:99:a8:97:35:15:db:7c:bb:ef:04:bb:
         eb:8c:cf:71:b4:c4:42:30:1f:40:50:8f:09:ed:52:8b:b4:92:
         03:92:db:c4:da:62:41:77:22:03:69:6f:b1:53:5c:6c:7a:dd:
         cf:fb:7f:65:97:6c:32:49:52:f9:f9:7b:8c:b2:53:bf:f6:6d:
         19:88:cd:29:5f:15:69:e9:92:e0:61:ab:7b:a4:21:08:0c:bb:
         d4:4a:9d:8c:e3:5a:ac:6e:0d:67:99:67:17:12:b2:20:6d:97:
         08:a3:be:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org