Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
File:                     vWukX_AnbCxgSgM7B82k5MDfFdc.mft (raw, json)
Hash identifier:          e2HmOoGWAxiybVnhCS96EWjOWXQWSxwfAFlAFrM48lA=
Subject key identifier:   C9:2B:A8:E4:14:80:43:49:E2:92:54:BF:FB:59:C2:A6:70:DF:93:53
Authority key identifier: BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7
Certificate issuer:       /CN=A9159B6F/serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
Manifest number:          8C
Signing time:             Sat 23 Nov 2024 04:32:34 +0000
Manifest this update:     Sat 23 Nov 2024 04:32:33 +0000
Manifest next update:     Sat 30 Nov 2024 04:32:33 +0000
Files and hashes:         1: vWukX_AnbCxgSgM7B82k5MDfFdc.crl (hash: zfJHb1mQUoc2pIPUF1NvTYb2tSoKOhvpKuf0Quz9svY=)
                          2: F56322CCD09C11EE94431F80C4F9AE02.roa (hash: DVWQ8pjie4PgUnM+EU2BlSGqAJ0vFyGEnz0Xvb4kBgY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl
                          rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159B6F/serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7
        Validity
            Not Before: Nov 23 04:32:33 2024 GMT
            Not After : Nov 30 04:32:33 2024 GMT
        Subject: CN=67415ae2-714d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:d1:77:34:9c:3d:2c:ad:22:26:e1:b1:b1:
                    c7:15:05:a4:f8:43:34:fb:7e:44:a4:9f:10:91:2c:
                    c2:24:db:fc:77:f1:ee:54:bf:9b:8a:a9:54:09:2c:
                    7f:79:15:a6:5c:dd:36:55:09:14:36:a5:57:2f:26:
                    0f:28:09:dc:cc:95:f8:a6:74:11:dc:35:85:9b:31:
                    fe:23:7c:71:7d:a6:32:00:aa:d4:ed:24:1b:6f:bc:
                    cb:da:d3:35:8b:f1:74:31:ad:d4:cb:2f:74:99:89:
                    e8:20:73:ff:66:18:ca:1c:74:3b:25:c4:f6:27:53:
                    25:fe:f7:b3:33:ed:66:86:d0:02:85:f8:7c:88:02:
                    0c:fc:f0:a4:87:26:3f:ee:29:1a:5b:ac:d1:6d:44:
                    da:b8:5f:97:3d:d4:fd:e4:19:e0:87:d7:24:66:2f:
                    27:67:39:51:85:7c:bb:a8:33:85:7a:7b:7a:a6:a2:
                    5e:ee:38:8a:4a:88:be:dd:76:15:01:86:7e:68:d7:
                    2e:a6:2f:ec:18:f6:f6:ec:05:d9:fb:13:eb:a7:57:
                    fa:8a:41:4c:57:d8:3b:0f:78:16:57:b8:e7:37:0e:
                    1e:f8:f5:32:36:c8:5e:4e:f6:7a:8e:4e:10:c0:b4:
                    01:7a:68:54:29:35:1f:c6:9f:e9:22:f9:7d:ee:c8:
                    6d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2B:A8:E4:14:80:43:49:E2:92:54:BF:FB:59:C2:A6:70:DF:93:53
            X509v3 Authority Key Identifier:
                keyid:BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:81:61:bd:5f:82:9c:a8:65:62:a7:da:64:25:8d:a0:eb:
         c9:90:4a:47:ea:ea:d1:4b:0c:6b:b5:fa:26:ba:2d:5e:ef:0c:
         7b:7e:11:a3:7e:3e:36:32:4e:37:37:20:e6:aa:76:ce:06:11:
         80:57:7d:39:1f:83:ea:cd:5b:7e:a6:3a:0b:86:fc:18:0e:6d:
         05:77:de:2a:45:d4:e7:b2:7e:16:1a:ba:d5:78:8a:7b:59:aa:
         7f:e8:71:f5:68:f5:22:4a:8e:56:c0:04:7d:58:f5:c1:59:d5:
         cf:09:65:a4:dc:73:d7:6d:a4:60:e2:c4:87:90:a3:61:93:9a:
         b4:1a:31:d9:57:57:29:f0:0b:9d:10:ab:98:9e:b8:cf:81:00:
         e3:4f:93:83:8d:43:57:84:23:db:b9:52:54:60:f0:aa:21:61:
         3d:ee:f7:dc:db:21:9d:95:25:b4:a2:02:a1:fa:01:d8:59:de:
         58:c8:f6:cd:76:d0:35:4f:6c:34:35:ff:1b:6d:e9:8b:15:01:
         72:05:18:db:c0:ad:a0:c7:18:30:de:ef:b1:aa:7f:a5:92:ca:
         98:a3:85:4c:0c:4e:85:41:07:7f:95:79:70:72:74:80:75:42:
         84:35:96:5f:fc:b4:d0:2e:1d:a9:e6:70:5b:c8:2b:2d:89:f6:
         a5:85:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:25 2024 by rpki-client on console-fra.rpki-client.org