Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
File:                     mmZSAdYWDzHXa50heh3_6tEsuoI.mft (raw, json)
Hash identifier:          ni3EZm3ike3coFXuph95LWjwGlW32IY6S5AiKnF/xVM=
Subject key identifier:   F6:2E:27:C0:09:22:60:03:19:E2:D5:CA:2D:B4:56:81:E8:52:24:95
Authority key identifier: 9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82
Certificate issuer:       /CN=A915180C/serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82
Certificate serial:       1D71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
Manifest number:          1D64
Signing time:             Sun 24 Nov 2024 16:02:23 +0000
Manifest this update:     Sun 24 Nov 2024 16:02:22 +0000
Manifest next update:     Sun 01 Dec 2024 16:02:22 +0000
Files and hashes:         1: mmZSAdYWDzHXa50heh3_6tEsuoI.crl (hash: stsf/ofHvr1J6TqMgjIDgV1hrtfc772JxDuXNsJKXt4=)
                          2: 5F313E6A99D611E6BB89D557C4F9AE02.roa (hash: quQxqNwWkulIRmJT2I6ZYZNStKYWsMI4R3sbyT8S9tA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl
                          rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 16:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7537 (0x1d71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915180C/serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82
        Validity
            Not Before: Nov 24 16:02:22 2024 GMT
            Not After : Dec  1 16:02:22 2024 GMT
        Subject: CN=67434e0e-9ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:58:b3:e7:ae:b1:71:3e:2d:d3:30:9d:63:29:
                    bb:3c:b0:b5:7a:28:40:39:3c:86:bd:2d:db:29:d3:
                    ca:73:3f:da:4e:19:89:4b:09:a6:54:35:99:49:a7:
                    5d:d9:48:17:52:7b:ab:49:c8:8b:c5:9e:46:67:79:
                    02:5d:54:e7:81:c7:cd:e4:58:ad:f1:88:a1:84:10:
                    46:0c:37:89:c3:9a:b3:24:34:65:ca:08:5c:e8:3a:
                    1a:cd:bd:9e:a3:e9:25:c7:90:c0:fe:ff:08:5d:a2:
                    16:e6:9a:59:04:d3:c1:cb:d3:d0:20:30:7a:a7:0f:
                    e9:b7:80:bc:3e:97:4f:0e:3b:cf:bc:9c:0b:76:f9:
                    9d:7e:8e:6a:07:de:59:ab:9f:f4:8f:3b:e9:1a:b9:
                    18:6f:4f:74:8b:34:6c:82:4d:b6:7d:aa:a8:8f:ae:
                    2d:7c:6f:52:c0:39:eb:23:6b:16:45:dd:7a:c0:69:
                    78:b8:6a:26:62:0a:09:69:99:fb:d8:aa:67:3d:5a:
                    9e:87:9f:91:56:12:27:41:28:aa:d1:b6:8c:c2:8b:
                    92:0b:bb:ea:45:a4:f6:7b:a9:52:20:ee:eb:7c:9a:
                    64:ee:4a:c1:3a:d8:d1:42:63:17:02:72:6d:e5:3b:
                    36:cd:37:a8:ea:c6:34:aa:b1:29:1b:87:2a:a5:1f:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2E:27:C0:09:22:60:03:19:E2:D5:CA:2D:B4:56:81:E8:52:24:95
            X509v3 Authority Key Identifier:
                keyid:9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d4:ed:2e:b9:5a:22:74:97:f8:51:66:1c:fb:c6:c9:46:08:
         9c:01:12:b4:e5:05:5b:70:1b:18:9e:a4:3c:f1:ca:ea:dc:6a:
         75:e6:56:1f:e3:4e:d0:32:2c:be:51:c1:d2:0d:b8:9c:72:bc:
         50:ac:a3:b3:f5:ed:b4:cf:74:1d:16:f2:42:72:81:11:60:33:
         b0:1a:a0:59:d9:93:76:f9:b7:ba:5b:2e:3f:1f:52:5f:e4:4b:
         1a:fd:b0:56:a8:d1:0a:99:b4:7b:af:00:17:3f:61:a0:9c:12:
         5e:39:56:75:05:e4:7d:16:56:aa:54:db:56:f2:ef:6e:78:70:
         2f:30:9f:b0:be:44:c7:9d:f1:fc:c2:db:c2:77:b6:d0:87:ee:
         8c:7b:ed:ee:5a:d3:23:ae:69:b5:3a:5e:ca:3c:c4:37:ae:b9:
         9f:cd:56:e5:59:bb:94:7e:84:6c:11:ce:4e:7f:48:bf:b6:66:
         3b:14:17:c5:6b:ce:7a:ee:43:ff:49:47:29:41:fb:64:dd:94:
         7e:3d:89:8d:1f:1d:2c:e5:df:26:3a:29:ef:96:e7:7c:90:50:
         13:9b:1f:26:64:ba:b1:c9:bb:a8:af:6f:ef:54:89:ff:47:c4:
         c8:7a:ab:24:68:fd:0d:78:df:3e:3f:7d:96:64:9f:d7:47:1a:
         57:6d:0f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:11 2024 by rpki-client on console-ams.rpki-client.org