Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
File:                     9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json)
Hash identifier:          RplNkN/rj4i1wx9R6jo97crXbz8vcaFuchwtmfupcJI=
Subject key identifier:   58:EB:E8:DE:45:F1:D2:3B:F8:BB:38:65:8C:B4:63:D6:DF:CF:0C:F5
Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
Certificate issuer:       /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
Manifest number:          76
Signing time:             Sat 23 Nov 2024 04:45:42 +0000
Manifest this update:     Sat 23 Nov 2024 04:45:42 +0000
Manifest next update:     Sat 30 Nov 2024 04:45:42 +0000
Files and hashes:         1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: +WwHvt1if85gyEuN7T5Wjr8ITAoc5gwAXXFR46K7APQ=)
                          2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: OsYm03YOb1sFS9q082zuXs6miPfh1tqBo5SwMn83UWQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
                          rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
        Validity
            Not Before: Nov 23 04:45:42 2024 GMT
            Not After : Nov 30 04:45:42 2024 GMT
        Subject: CN=67415df6-b0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a0:c8:f6:a7:ca:18:df:03:02:20:00:c6:00:
                    23:d9:43:f7:29:b4:20:00:b5:d3:1c:b6:18:68:c1:
                    66:a7:08:6f:f2:43:35:75:af:6f:a6:a8:13:f0:14:
                    03:aa:12:2b:22:a4:a6:75:cf:d1:64:7f:9a:72:6f:
                    88:85:31:cd:1a:4d:ce:e7:2c:e1:78:9a:ca:69:71:
                    7d:21:39:17:71:0d:82:c4:5e:7f:17:fa:86:95:ed:
                    91:7c:ce:7c:1c:70:36:2b:31:4c:bc:b2:74:24:a7:
                    d3:00:36:df:c2:28:bd:8b:23:08:44:84:a7:36:fd:
                    a3:b4:2b:83:96:e5:18:bd:c8:34:2d:0b:55:2f:12:
                    14:2f:16:35:3d:ec:bf:69:28:45:f8:09:99:73:75:
                    4a:4e:fb:55:ce:1b:75:8e:1e:7e:61:20:7e:81:d9:
                    47:fe:99:0d:6d:12:53:1d:24:31:e9:49:e3:42:ea:
                    65:d1:85:be:e9:86:db:1f:bf:da:ed:06:d1:ee:57:
                    3d:df:b9:b7:3f:91:5a:1d:81:28:d6:fa:5b:e3:70:
                    44:44:a8:88:84:2a:91:ab:5f:21:9e:99:e8:f2:57:
                    a9:29:87:10:df:ce:c8:40:c6:41:9a:06:82:5a:1d:
                    4f:11:95:4e:49:9e:2d:23:99:6f:8a:f9:17:c9:ca:
                    9b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EB:E8:DE:45:F1:D2:3B:F8:BB:38:65:8C:B4:63:D6:DF:CF:0C:F5
            X509v3 Authority Key Identifier:
                keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:25:52:7f:67:05:30:da:fc:86:2e:a7:72:ad:e2:2b:9f:56:
         f5:83:a7:a1:08:e8:72:92:6e:63:cb:9c:4e:64:ae:67:3d:13:
         4a:3e:f6:95:16:27:1e:b3:bf:e3:81:36:52:f6:89:82:98:90:
         10:d0:c9:c8:24:e3:ee:94:e8:97:57:68:78:8d:ef:94:ce:67:
         a8:b7:df:8d:78:af:1e:f3:18:33:19:62:71:f4:bd:66:29:e5:
         3b:f8:5d:a4:04:4d:df:56:e0:f6:6a:41:15:a5:59:b8:cf:69:
         0f:0c:d0:64:fd:59:96:0d:1d:27:ff:7f:eb:5b:c2:e6:91:fc:
         39:2c:04:54:c9:1a:ee:b0:14:05:99:c4:45:96:0e:dc:c3:52:
         05:d0:1d:13:d5:f4:7f:c3:57:e6:d9:c4:08:6d:34:2a:2e:81:
         2b:9a:fb:92:7d:aa:61:98:16:b4:b4:b9:2d:70:ea:96:11:bc:
         07:f5:d1:a0:d4:96:d8:ba:8f:9b:0b:77:1d:81:88:24:c5:0c:
         ee:90:db:83:e7:15:1f:00:0f:ca:f5:7e:7b:67:03:94:19:2b:
         4a:8f:44:04:5b:9e:4a:3f:2f:06:3b:db:b5:ca:72:ea:d4:19:
         57:23:37:32:a1:d2:fe:8f:92:b9:42:ca:2b:ee:82:58:8f:e8:
         11:99:ce:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org