Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File:                     08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier:          smonzIzaIxcleiZ0Ed9VOkeXN9JbFhpH+DRplmIAb38=
Subject key identifier:   77:81:80:E7:91:BF:83:B6:AC:A3:D7:B7:5D:CF:D2:A2:00:DA:51:4D
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer:       /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial:       0AD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number:          0AB4
Signing time:             Fri 22 Nov 2024 19:16:46 +0000
Manifest this update:     Fri 22 Nov 2024 19:16:46 +0000
Manifest next update:     Fri 29 Nov 2024 19:16:46 +0000
Files and hashes:         1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: 6aqsCHTenpZLqjD+5+RhBob8jluv7SDj0mfJMUuWLu4=)
                          2: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: SZfy2lzYI9darSjsTQEqARyS5q602BqtO3JRbHOsq3g=)
                          3: DE437646F8A911EB98242219C4F9AE02.roa (hash: ttCm1MPGwsxBxNTAWbkYeii7tkd0QoF3neo8cMILzsE=)
                          4: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: SP/lqoxG8K385fFbiDzYapHGnCnV/BlNMKEYD/Qv8r8=)
                          5: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: Ge3sA9vn4z8DktPLvZxRP3By2hr88qUHgnXklAjEj/I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
                          rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2772 (0xad4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
        Validity
            Not Before: Nov 22 19:16:46 2024 GMT
            Not After : Nov 29 19:16:46 2024 GMT
        Subject: CN=6740d89e-d9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d5:27:94:69:20:0e:48:fc:1b:b4:bd:10:11:
                    9e:55:6f:e7:76:ec:80:e4:c6:de:64:12:3c:9f:4c:
                    c2:b2:4f:1d:79:27:4b:d9:97:18:76:56:0a:0d:da:
                    1b:51:1c:28:7d:11:f9:cf:49:69:e3:54:15:11:b1:
                    f1:29:26:fa:7b:21:67:d6:8b:0e:c1:11:db:82:a9:
                    0b:b9:8f:2a:af:92:75:23:04:a8:ff:9c:67:a9:ee:
                    f7:bd:1c:af:23:41:a1:cf:7e:00:70:62:7f:77:b4:
                    0a:82:3f:33:0b:a2:f4:53:ca:ed:4b:55:15:b9:6b:
                    0a:de:b8:e1:56:d3:89:79:f3:1a:69:6b:37:3d:1e:
                    e3:f0:46:ab:af:d4:43:7d:a8:77:bb:ac:31:00:07:
                    0d:ee:20:61:9a:21:ee:b6:9b:89:81:e1:9b:45:8d:
                    c0:ac:c9:be:fc:fb:08:de:04:cb:29:1e:b8:7e:c2:
                    69:11:db:db:29:80:63:4f:a2:69:db:47:79:0c:0f:
                    14:03:78:79:7f:63:36:83:a0:3f:c0:8f:6d:10:d4:
                    ec:54:a4:f0:c5:a1:f5:4a:f1:60:f7:c7:60:06:69:
                    ed:48:42:26:58:d9:1e:f2:6b:a9:1a:ce:36:6c:b9:
                    cd:e7:5f:8e:ec:8e:e6:2b:ca:ad:13:8f:aa:83:27:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:81:80:E7:91:BF:83:B6:AC:A3:D7:B7:5D:CF:D2:A2:00:DA:51:4D
            X509v3 Authority Key Identifier:
                keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:32:dc:04:ac:38:72:b2:57:bb:3a:a7:d5:e6:28:69:5f:86:
         f1:30:ae:0b:a7:6a:a8:cd:ca:67:59:c6:f1:77:a3:17:c3:35:
         95:cb:cf:99:06:a0:61:99:aa:28:3c:96:3e:a2:ff:0e:5d:c0:
         32:44:11:53:46:76:31:d0:90:33:7b:7e:ac:20:c2:7d:d5:8a:
         8b:b1:72:f8:c2:2c:6a:f8:5b:9a:ac:4b:c7:ec:de:37:ec:f6:
         20:a3:6d:7a:be:af:00:c2:83:48:f4:bb:78:c1:08:c5:68:c2:
         76:c9:e9:0d:32:33:5e:58:b5:b8:28:6e:2b:b0:4b:4b:6b:39:
         fa:4d:e7:6f:90:98:1f:11:ae:e0:ed:0a:75:19:01:63:51:15:
         20:1d:52:e7:d3:0d:f9:70:81:d6:bb:14:ea:7d:3b:cb:a0:d0:
         b6:71:2d:8c:fc:ad:31:f3:2f:92:dd:c8:b8:56:ce:91:dd:45:
         7d:b6:f3:5d:fd:18:aa:c6:11:e6:53:e6:21:0e:5a:57:76:c7:
         ad:90:6f:63:1b:b1:9b:84:c0:b1:20:0d:d9:d3:cc:9a:45:1e:
         94:a0:3e:6b:93:a2:e8:8d:ea:47:2a:e8:dd:c6:fe:b8:a7:c0:
         34:3a:8b:5e:d4:52:2e:e2:77:3a:0b:cf:c0:f6:3e:59:c0:e9:
         0d:e3:c5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:26 2024 by rpki-client on console-ams.rpki-client.org