Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
File:                     l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json)
Hash identifier:          DOB8kU4XdvhB+aoM2nKRZPIEPswQgJK7j5zTb5WhF2I=
Subject key identifier:   33:6E:65:7D:E9:EA:62:7D:7E:C8:DB:C8:6D:24:4E:FE:07:B3:4E:FF
Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
Certificate issuer:       /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Certificate serial:       09AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
Manifest number:          09A6
Signing time:             Fri 22 Nov 2024 19:47:37 +0000
Manifest this update:     Fri 22 Nov 2024 19:47:37 +0000
Manifest next update:     Fri 29 Nov 2024 19:47:37 +0000
Files and hashes:         1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: NgAew+e4UozGlcn1Wg0BvhWU2zGhwGieYBo1/SDiSBk=)
                          2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: JqF51wPgFYJ7/1JQa4bjka146YP84yRB+gx/lfzcoqw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl
                          rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2476 (0x9ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
        Validity
            Not Before: Nov 22 19:47:37 2024 GMT
            Not After : Nov 29 19:47:37 2024 GMT
        Subject: CN=6740dfd9-7c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e2:3e:63:75:8b:96:08:f4:a1:fb:a0:e3:dd:
                    f9:30:08:7b:fa:ba:fa:8a:ed:bc:bd:ae:22:93:04:
                    16:7d:59:27:1e:79:e0:69:b0:36:18:a3:c0:f7:4e:
                    32:96:89:23:b7:6f:cb:e7:fe:99:0c:62:cf:e4:25:
                    a3:8c:ed:de:aa:ff:16:10:e7:f5:db:7d:85:54:92:
                    75:96:7c:a1:98:51:4a:bb:71:a6:ed:64:df:dd:8f:
                    35:42:c1:0c:35:d4:c1:af:4e:f8:32:6b:79:9c:09:
                    f3:c7:1a:b2:f7:28:d0:fe:0c:f4:fc:00:3d:15:1e:
                    48:45:6a:2f:26:bf:ac:a4:8b:ae:23:f9:57:da:a6:
                    e6:e6:7b:11:3e:2c:80:5e:a9:81:7e:23:7a:46:c8:
                    46:3b:55:7a:8a:81:48:ef:09:89:09:3f:07:dd:8e:
                    41:b2:61:c7:18:08:6c:c3:79:10:71:95:b3:d4:4c:
                    fa:13:71:11:18:06:01:9b:14:aa:fa:94:72:03:33:
                    80:c2:cc:ce:d6:e4:56:16:20:06:f2:65:15:68:63:
                    1f:be:d0:32:f4:cb:35:44:17:c1:3b:01:d2:49:24:
                    f6:ee:54:7f:71:1b:b8:8a:0f:e6:99:73:7d:06:22:
                    a8:37:6c:0e:d3:6b:a1:1d:1a:fe:be:5f:19:1e:84:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:65:7D:E9:EA:62:7D:7E:C8:DB:C8:6D:24:4E:FE:07:B3:4E:FF
            X509v3 Authority Key Identifier:
                keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b0:c4:87:74:5f:35:a7:ab:b3:ec:cd:45:7c:f7:1e:23:1d:
         f8:f1:81:94:ee:b7:ac:83:0f:61:c3:73:1c:db:e4:11:75:af:
         d3:eb:80:cb:da:bb:5f:58:85:c2:ca:24:76:e1:e3:59:bb:9c:
         4e:b9:b9:85:9b:bc:b0:8e:95:aa:9a:c5:f0:70:f3:fa:14:16:
         4c:71:ae:2f:54:d5:7f:16:cb:15:c9:76:0e:1e:70:ce:b3:31:
         33:c1:d5:2d:44:f4:54:64:88:6d:89:86:a1:0d:04:6d:99:be:
         e1:1e:6f:32:43:2a:59:76:28:c2:90:c9:0a:9c:65:04:d0:7b:
         69:6a:81:e8:d4:28:e6:f6:b6:8a:24:f3:17:a6:d3:4a:6d:10:
         de:18:26:c4:c8:a6:21:92:b7:77:62:42:82:d3:0b:d0:5a:1d:
         f7:47:a1:81:4c:e0:a8:3a:b2:25:05:81:01:fb:c3:8b:ce:80:
         df:83:7a:e5:0a:cd:fc:b6:ff:25:15:12:28:48:bc:00:3c:48:
         89:2a:cb:31:5e:78:de:cd:f3:8a:9a:d8:d7:ab:6c:e1:2b:51:
         db:28:10:d8:8a:df:7f:51:a4:52:c6:59:f6:3a:5b:0e:f9:20:
         8c:86:c6:fa:db:37:2d:02:92:f8:f0:7e:f3:d2:c7:a1:64:89:
         c2:50:e9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org