Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
File:                     bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json)
Hash identifier:          1axXutZOz3DPbMbDXIVyRT9sT9+nuRyXeAQjg2OltqY=
Subject key identifier:   44:3F:AF:F0:C9:33:51:82:AE:41:E0:6F:BD:A0:19:3D:A1:6B:27:5E
Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
Certificate issuer:       /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
Manifest number:          62
Signing time:             Sat 23 Nov 2024 04:58:47 +0000
Manifest this update:     Sat 23 Nov 2024 04:58:46 +0000
Manifest next update:     Sat 30 Nov 2024 04:58:46 +0000
Files and hashes:         1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: LfZKEzJzyagCFtDhGDAJiKhpJZwU5dLDG9g+g7GmiPg=)
                          2: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: XL79ufKKtjs3RC/HFtRum1LG/m0heNTfnq14ISz+Hk4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
                          rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
        Validity
            Not Before: Nov 23 04:58:46 2024 GMT
            Not After : Nov 30 04:58:46 2024 GMT
        Subject: CN=67416106-2ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:39:b9:be:e5:53:fc:72:be:9c:bf:ce:99:
                    bd:34:9a:76:9c:2b:74:2d:4d:8f:68:41:6b:81:5f:
                    bc:d9:70:51:5d:2b:32:d8:9c:3a:59:28:8d:81:12:
                    7e:80:d6:0a:4d:e6:d0:a1:dc:35:b3:52:97:48:49:
                    a5:79:e5:1b:e2:5a:bc:b5:c4:44:a8:f4:9b:be:47:
                    d9:ae:44:7b:f4:d8:53:e9:22:ca:23:f1:ce:d8:4c:
                    46:36:28:41:5c:d5:f5:80:7f:da:52:d9:a0:f2:83:
                    66:65:6c:07:f5:85:bc:44:a6:1f:db:aa:9d:cc:55:
                    1f:c6:f4:b9:0a:09:34:2a:c0:42:2c:2c:e3:e6:55:
                    31:44:51:49:15:cb:55:a9:eb:01:15:ec:58:58:a0:
                    e2:99:04:24:ae:4c:11:98:28:df:66:09:c7:22:96:
                    4f:43:a5:40:20:f1:36:3f:2a:01:27:a9:94:dd:ef:
                    d4:9c:32:a2:d9:e6:5f:de:5b:07:de:1c:6e:2c:b5:
                    f0:d1:1c:54:76:69:f3:9e:41:82:c0:11:ea:e8:55:
                    f9:9b:b1:06:ec:69:91:86:0f:1f:59:5b:71:8f:5c:
                    d1:c5:cd:58:d7:49:5d:12:54:53:46:3a:7d:ae:b9:
                    c4:8f:f7:cf:f1:b9:ed:94:80:97:53:e1:54:29:c9:
                    97:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3F:AF:F0:C9:33:51:82:AE:41:E0:6F:BD:A0:19:3D:A1:6B:27:5E
            X509v3 Authority Key Identifier:
                keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fd:a6:19:06:37:be:d6:ff:34:1f:fd:69:20:71:61:0b:c8:
         df:12:39:01:6a:0c:ef:6c:95:7f:14:c0:f0:31:c7:56:52:37:
         38:47:39:41:de:db:ec:e7:a4:aa:15:1d:a5:de:4e:4e:65:6c:
         7c:a6:d3:77:61:bd:d3:fa:cb:fd:2d:79:d9:3f:1d:8d:f3:42:
         7f:6c:8d:09:30:64:dc:78:fe:10:21:c2:07:3b:d7:90:c6:69:
         a0:eb:85:78:c1:46:9e:29:c6:9d:f9:8e:7c:7c:76:bc:d7:90:
         be:c7:36:27:f1:ac:f7:aa:9f:25:15:45:50:ed:af:1a:ac:28:
         5d:e8:80:d1:91:fa:cc:da:e2:5f:cb:0c:39:91:af:6c:b9:8a:
         a4:0a:4a:9c:d3:47:53:9d:ba:53:7b:f4:1b:e5:cb:21:77:94:
         22:24:9e:da:0f:99:b2:db:86:7c:ec:90:17:7a:33:f9:72:7e:
         e4:31:ab:70:45:e9:dd:70:0d:dd:f9:a4:a9:7d:84:94:61:7d:
         88:1b:ca:34:1a:f1:ec:e7:f6:17:ff:15:e5:f4:4e:e3:d8:e7:
         38:b6:ba:fc:98:20:28:82:5a:6b:38:d2:ac:2c:21:d7:2c:f1:
         3e:fc:0a:4c:78:9d:a9:49:94:c0:87:39:0e:0b:b9:aa:79:a2:
         58:c7:0a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:25 2024 by rpki-client on console-fra.rpki-client.org