Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft
File:                     83Gv20AqO1w1Haymss4PSk0ag4A.mft (raw, json)
Hash identifier:          tw+Se4rIVzVluvBLVFqvgUrvs9sYjyrOtPTY7NZXUL0=
Subject key identifier:   3F:9B:A2:62:28:C7:B2:FD:03:CE:53:B3:79:DB:25:EF:34:33:EA:7A
Authority key identifier: F3:71:AF:DB:40:2A:3B:5C:35:1D:AC:A6:B2:CE:0F:4A:4D:1A:83:80
Certificate issuer:       /CN=A915FCB7/serialNumber=F371AFDB402A3B5C351DACA6B2CE0F4A4D1A8380
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft
Manifest number:          14
Signing time:             Sat 23 Nov 2024 05:57:11 +0000
Manifest this update:     Sat 23 Nov 2024 05:57:11 +0000
Manifest next update:     Sat 30 Nov 2024 05:57:11 +0000
Files and hashes:         1: 83Gv20AqO1w1Haymss4PSk0ag4A.crl (hash: 2ZSy7rMa6D2dLrSAgruM3tb+UaXcDkxV+uF5oF329K8=)
                          2: 500ACD668F7311EF9A3C6933C4F9AE02.roa (hash: o8H7c7fck40bt6N9kc+f53iuHqxqKbLfsu+Sc8AZSh4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.crl
                          rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FCB7/serialNumber=F371AFDB402A3B5C351DACA6B2CE0F4A4D1A8380
        Validity
            Not Before: Nov 23 05:57:11 2024 GMT
            Not After : Nov 30 05:57:11 2024 GMT
        Subject: CN=67416eb7-d6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:03:f3:d3:b4:4e:90:88:59:a5:17:f4:d5:
                    9b:47:06:c9:71:e3:0f:e3:41:36:75:f7:81:5b:96:
                    5a:98:64:d6:2a:62:dd:5d:f3:b5:77:9e:00:9a:c6:
                    57:c8:4e:4a:83:50:6e:1d:2b:47:b5:fa:46:00:e6:
                    49:c5:9a:63:5a:88:f1:3d:24:42:68:48:92:4b:a2:
                    e2:8d:74:40:46:14:32:68:a2:88:57:ee:0f:59:aa:
                    b2:58:79:82:30:fc:59:a5:be:f5:ec:91:52:3b:e8:
                    61:7d:47:42:7c:ee:67:47:c2:fe:6e:f2:a5:ef:a6:
                    74:eb:fb:f7:de:8f:20:98:dd:c8:85:45:d1:5c:9f:
                    1f:53:65:bd:14:a7:95:8e:18:22:fe:54:39:9f:c8:
                    65:c9:75:33:f8:df:b3:b9:91:8d:d9:8a:23:6c:dd:
                    b4:26:65:55:7a:e8:da:0e:3d:fd:0f:0a:e5:8e:73:
                    c0:76:a0:5f:f7:b6:91:bc:7a:6b:7d:02:ad:1b:0f:
                    61:1d:85:6f:9f:ca:32:e6:59:72:b9:c2:b8:8d:2a:
                    5e:44:72:2a:ef:5c:80:3e:82:85:14:20:d1:02:33:
                    7a:a4:9f:5c:f1:f3:ae:43:62:b3:d1:2c:6a:34:1e:
                    b1:61:6b:d9:65:15:ad:0d:3d:62:b2:78:e0:1c:20:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9B:A2:62:28:C7:B2:FD:03:CE:53:B3:79:DB:25:EF:34:33:EA:7A
            X509v3 Authority Key Identifier:
                keyid:F3:71:AF:DB:40:2A:3B:5C:35:1D:AC:A6:B2:CE:0F:4A:4D:1A:83:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:53:d6:3b:96:54:a6:5f:8f:79:ff:a0:a8:1a:7e:21:3a:2b:
         27:a5:6c:b6:5e:23:96:76:70:07:b1:fa:92:ce:fb:6a:82:65:
         73:3e:fb:c0:54:4c:d4:41:65:a5:7a:db:be:a5:ee:b5:16:8c:
         d1:ac:58:61:91:25:9a:8d:3d:ea:24:b3:0c:85:de:c5:ed:a5:
         d5:65:f1:35:7e:49:a8:8f:51:ac:7b:ce:7e:db:4b:66:17:53:
         07:44:67:71:c7:f7:db:4c:71:62:47:e9:e9:c6:fd:e9:0b:aa:
         3d:75:e9:81:f9:23:72:d1:da:6c:a0:fd:d1:2a:96:e5:c6:66:
         56:bf:6e:07:10:79:96:59:24:33:22:1a:16:c0:24:dc:bb:20:
         a9:ae:47:39:6c:7a:19:bf:f6:40:67:1f:a5:1c:f4:39:1f:ea:
         2f:e8:a4:8b:9c:23:a3:23:12:8a:99:b8:7e:4a:a1:63:08:f4:
         06:0c:fc:6e:89:31:a1:9d:cd:b3:d1:0b:f4:a9:a7:61:4f:cb:
         d3:b5:ae:3b:3b:51:a1:41:ce:ef:72:0b:6a:15:9f:44:ab:a0:
         53:9d:b9:32:0d:ae:0b:bc:e6:e4:3c:66:5c:54:ac:84:d6:54:
         2d:01:51:6c:ca:4d:49:50:68:6f:f5:f3:6f:e5:02:54:ef:c5:
         dc:e1:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org