Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
File:                     9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json)
Hash identifier:          ra45H5omxP/RHnHvGdZCyU2exvNQDxiBZlIWAUUUZZs=
Subject key identifier:   86:B2:A4:9B:DC:AC:C1:64:5A:A7:F0:26:98:34:58:B3:78:94:A0:9D
Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB
Certificate issuer:       /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
Manifest number:          0585
Signing time:             Fri 22 Nov 2024 23:26:12 +0000
Manifest this update:     Fri 22 Nov 2024 23:26:12 +0000
Manifest next update:     Fri 29 Nov 2024 23:26:12 +0000
Files and hashes:         1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: KkzMJkCbmPHVSD+6RDl6xlCeb2ijGQ4jijxyLqWDbKI=)
                          2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: fvo1aPGM+n05nvJm6qW9Z2hmGhNw4J6QEIdDkjbjrFk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl
                          rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
        Validity
            Not Before: Nov 22 23:26:12 2024 GMT
            Not After : Nov 29 23:26:12 2024 GMT
        Subject: CN=67411314-ab72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:8f:8b:60:4a:aa:03:d2:7a:c4:4a:fe:29:
                    b5:ef:d1:19:ac:19:54:ed:ab:e9:13:51:bf:92:d2:
                    1f:ad:1e:61:c7:f8:d7:d4:20:76:26:ab:03:f6:95:
                    af:e8:9a:fa:bf:73:46:c5:91:08:1d:73:4b:d5:23:
                    02:f5:2a:d4:99:bb:94:87:e0:87:4b:bb:9f:0a:ec:
                    79:38:51:2a:e5:4b:ba:2c:8b:67:53:15:82:9e:86:
                    31:b0:6f:1e:8e:2d:89:1d:af:04:1a:8f:7c:f7:fa:
                    f9:3c:be:36:83:be:7b:76:7e:6e:d9:7b:32:76:3e:
                    a6:07:54:50:7a:84:41:6b:80:7e:41:93:bb:34:54:
                    ee:79:24:6c:e2:70:1b:6b:c5:a7:69:27:20:00:0a:
                    ff:2b:57:ec:a8:3e:51:c2:09:50:79:c4:44:09:95:
                    04:2b:3f:09:86:76:f8:ed:62:1b:5d:a8:2e:e5:bd:
                    ef:bf:2a:a0:4b:58:5f:2c:a7:c3:5c:b5:3e:a0:9b:
                    c9:fc:fe:02:2f:b6:a3:44:4e:44:33:f8:16:9f:7c:
                    fd:aa:d6:60:5e:fd:81:56:9a:1e:d8:31:a8:a9:be:
                    a7:a2:cd:c5:98:52:3d:cd:91:e8:b0:b9:39:a0:6b:
                    7c:22:98:22:73:97:f6:51:3c:12:10:8f:99:65:c6:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B2:A4:9B:DC:AC:C1:64:5A:A7:F0:26:98:34:58:B3:78:94:A0:9D
            X509v3 Authority Key Identifier:
                keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:32:8f:b6:50:ce:05:0d:fd:b2:42:41:5a:b7:3c:8e:0f:ee:
         84:ba:dd:2f:7d:78:85:86:1a:25:a4:08:8d:93:53:3c:77:83:
         c6:b9:02:b0:13:e8:2d:3b:88:13:05:6f:91:bd:36:05:63:b2:
         91:92:d6:91:38:7f:5c:d9:b2:79:cf:00:67:1e:71:b4:9a:10:
         f8:44:a8:41:83:5e:2c:84:f5:4a:5a:c9:64:5d:10:22:e0:fa:
         3d:b9:2c:13:96:66:b5:d3:cb:97:2f:62:9b:08:d2:07:d3:c9:
         60:f8:1e:1b:4f:3a:f3:37:54:41:00:5f:7b:11:3d:ff:e8:25:
         85:44:b1:df:b7:f9:62:9f:a3:75:19:d2:a4:32:5e:2a:0e:a9:
         b8:1b:49:85:2c:c9:88:26:98:26:6e:07:be:da:98:e1:c5:e9:
         d9:30:8c:99:4a:7f:7c:11:66:83:b5:b8:69:d1:75:f6:c3:d6:
         21:74:ab:c5:ad:31:bb:c1:95:91:c1:13:8d:01:a0:9e:3c:b3:
         22:62:04:a9:e8:cb:7c:12:0d:65:47:9b:a1:fb:53:cd:40:5c:
         ea:9f:3a:54:60:f6:89:50:63:9d:a3:18:f7:48:06:5a:2e:6a:
         f4:ee:5f:49:bb:bd:9f:20:74:a7:af:b5:36:6b:32:6e:2e:c6:
         ea:9d:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org