Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft
File:                     Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft (raw, json)
Hash identifier:          K6LP9889z5zTWymzceSxIK4ULRjniEzCBA0dCInMXXw=
Subject key identifier:   24:29:E7:DE:6B:A2:D7:6F:AA:E2:FD:53:58:63:DD:FB:36:B4:69:12
Authority key identifier: 19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B
Certificate issuer:       /CN=A915233F/serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft
Manifest number:          0158
Signing time:             Sat 23 Nov 2024 02:26:25 +0000
Manifest this update:     Sat 23 Nov 2024 02:26:25 +0000
Manifest next update:     Sat 30 Nov 2024 02:26:25 +0000
Files and hashes:         1: Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl (hash: e9VgMwQibt+AARbS+zx4A0Xp5oJgCHgCfDBEAxLYJcU=)
                          2: 272313529ADA11EDAA08043BC4F9AE02.roa (hash: Bdihagf5bO3xblXOGDbX+KOVteATqSpIS0l8qRs7zsg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl
                          rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915233F/serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B
        Validity
            Not Before: Nov 23 02:26:25 2024 GMT
            Not After : Nov 30 02:26:25 2024 GMT
        Subject: CN=67413d51-8f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:af:a4:14:22:40:0f:61:ce:b5:bc:53:ee:
                    5f:06:5c:cb:8f:9c:ad:7e:6b:fa:c3:23:12:4f:51:
                    58:1f:8c:6e:60:8e:01:51:5b:54:f2:ac:93:61:13:
                    c8:af:c9:52:fa:de:78:64:4f:05:aa:85:59:43:52:
                    eb:eb:a3:c5:7e:2a:64:75:74:67:de:96:9f:8a:46:
                    47:0b:d8:a1:6e:d7:e3:39:6c:1a:58:db:3c:15:4e:
                    76:e0:57:f6:7d:e1:60:94:c8:ba:e6:97:59:98:ed:
                    f1:8b:15:db:2a:94:cf:48:c0:49:30:b0:21:f3:75:
                    43:63:17:f7:e1:e4:0a:d2:27:36:48:31:35:84:ba:
                    60:d9:70:4d:7c:95:39:4e:e7:00:f0:1a:f1:28:f5:
                    80:46:02:3c:74:11:d3:d8:2d:23:9d:d2:9b:48:8a:
                    0a:a0:42:4d:2b:89:51:38:5b:4b:18:75:2e:69:3f:
                    a6:aa:4e:05:4b:7e:e4:9e:3d:78:a0:51:10:bd:14:
                    ea:69:b3:67:96:31:d9:67:05:5e:ee:92:14:77:8a:
                    a9:12:08:80:71:20:9f:7f:1d:66:aa:7a:97:8c:1e:
                    4f:3c:eb:8d:76:79:2d:ec:d8:aa:f9:47:6c:91:c3:
                    d8:a0:0f:e9:9c:3f:02:b9:3d:36:6b:ea:9c:70:d5:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:29:E7:DE:6B:A2:D7:6F:AA:E2:FD:53:58:63:DD:FB:36:B4:69:12
            X509v3 Authority Key Identifier:
                keyid:19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:66:96:ee:ef:2c:17:78:3f:20:f9:9f:2a:69:2a:5b:c8:7d:
         8f:01:5e:c9:d0:11:b6:b7:d2:0b:f6:93:cb:b2:f4:3e:10:b3:
         dc:db:b9:06:4b:01:7b:2a:0c:8b:39:04:a9:84:2c:ef:d7:86:
         ce:3f:dc:da:06:4f:36:21:1b:73:78:18:c9:83:23:3a:ec:13:
         02:18:33:7d:29:66:d0:d5:a6:c8:09:80:e0:ec:c1:ff:3d:e7:
         61:f9:82:49:62:d7:de:40:34:7f:7b:bf:a8:29:2f:67:0b:5d:
         54:f3:db:e5:15:0c:81:2d:8b:79:e4:26:04:5e:3f:27:3b:16:
         03:97:ea:f4:31:a8:90:3a:4e:73:37:77:8e:17:7c:cb:15:11:
         0e:98:f3:92:a4:98:00:fd:02:68:4a:06:1b:65:26:72:1f:6f:
         e6:4e:27:27:bc:5a:d4:93:22:09:34:8b:37:49:ce:c6:86:87:
         8d:61:09:40:21:21:94:f6:65:2d:27:74:0f:c9:0b:66:5e:d6:
         bf:cd:73:62:eb:06:0b:bd:27:56:5e:2f:3f:0d:e1:9a:93:ef:
         54:29:7c:fa:ed:ba:e7:f0:20:32:fa:76:ce:27:0f:aa:44:38:
         03:96:5c:dc:8d:6d:d3:e4:e8:99:34:53:fe:85:09:19:ff:a5:
         4b:7e:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org