Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
File:                     gJihpKZXp3CvvWalja3gGT9aHog.mft (raw, json)
Hash identifier:          SQ4udfaypne2Ro7drQY5RGlLTjO3WQeEAED/72mHi6w=
Subject key identifier:   F4:03:63:64:61:20:70:A4:22:23:DC:DD:A5:AE:1C:F8:F7:FE:1D:6C
Authority key identifier: 80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88
Certificate issuer:       /CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
Certificate serial:       0501
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
Manifest number:          04F9
Signing time:             Fri 22 Nov 2024 23:14:17 +0000
Manifest this update:     Fri 22 Nov 2024 23:14:17 +0000
Manifest next update:     Fri 29 Nov 2024 23:14:17 +0000
Files and hashes:         1: gJihpKZXp3CvvWalja3gGT9aHog.crl (hash: ZWGN7HMzbj3C8IA98/htv5M8HKrj6jkEJgnVo22ovIg=)
                          2: 9718BA74EA9E11EB8575F62AC4F9AE02.roa (hash: h42qy5TQroXCH9xLmGazsIgcWrGIwp/6nGKvDVykOx0=)
                          3: 81C83A9ADD9711ECB450D332C4F9AE02.roa (hash: RVkiqV7MRqC0U6mkN+vNh20U5JgvPkFLHzROcSU7tCo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl
                          rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
        Validity
            Not Before: Nov 22 23:14:17 2024 GMT
            Not After : Nov 29 23:14:17 2024 GMT
        Subject: CN=67411049-0387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:bb:bc:0d:64:c5:53:5b:cc:87:6b:0f:94:
                    d1:f1:30:df:25:8d:7d:7d:2a:02:7b:60:80:68:33:
                    1b:64:31:53:22:49:8e:c5:df:dc:dd:3e:99:09:74:
                    ab:cd:1d:af:60:b6:24:27:de:be:3f:bf:f9:8e:5d:
                    d2:0a:fe:40:7f:5c:a1:9f:b8:34:81:db:8a:db:5c:
                    44:f9:ac:a4:0a:5e:ab:63:29:87:2f:80:d3:41:dd:
                    05:99:52:44:19:6a:f4:a1:f3:83:d1:00:9d:4c:5a:
                    53:a0:6f:13:37:ac:e7:af:e7:f2:2c:b3:e9:ab:a8:
                    02:e8:21:12:3f:cb:a0:e2:76:c6:b2:e3:59:1f:80:
                    43:48:0a:68:97:02:b0:d5:7c:41:55:96:20:6e:27:
                    61:07:eb:ab:78:70:43:77:3b:4c:b0:c3:4e:1b:09:
                    49:9f:8f:5f:71:6c:77:12:53:77:a4:35:d0:29:36:
                    c2:40:61:3e:51:81:76:c5:f4:27:eb:67:b5:85:95:
                    ae:bf:da:a2:b7:24:26:4a:c0:85:da:f3:b3:3e:b4:
                    ec:37:d4:68:a9:93:a4:9d:5d:00:fc:36:9f:53:2c:
                    95:85:12:d2:86:2d:86:c2:c4:5b:eb:34:87:43:02:
                    24:81:a4:3b:ce:ac:a7:cf:4e:38:6e:0e:f3:0b:39:
                    d8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:03:63:64:61:20:70:A4:22:23:DC:DD:A5:AE:1C:F8:F7:FE:1D:6C
            X509v3 Authority Key Identifier:
                keyid:80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:63:db:52:75:dc:9b:11:56:c0:a5:04:67:d7:99:cb:0e:95:
         4a:77:1f:7b:16:8a:fa:4d:42:d3:9b:7c:ba:67:8f:ca:97:b0:
         4d:fc:69:6f:51:41:bd:e1:ff:ff:08:e4:f8:98:17:e2:f5:b4:
         50:11:63:b4:27:9d:0a:f9:a5:b9:db:f0:9b:16:d6:2e:79:fa:
         d3:91:87:94:e5:65:81:ce:ff:d8:a9:56:97:89:2c:cc:a8:94:
         84:d8:25:84:e3:ba:0b:3e:03:f1:86:61:91:9d:3e:d3:f4:26:
         3b:8f:8e:53:fa:76:4a:18:c1:da:07:c6:e0:65:10:c9:1b:37:
         e9:1b:f4:00:79:9d:76:fb:97:99:12:f5:55:d5:d2:36:ca:e7:
         90:16:aa:d2:4c:d8:24:c9:7a:41:ba:c8:5a:0e:68:05:90:33:
         27:b7:c4:8e:30:da:a5:d1:de:6d:58:c6:33:8a:4d:4c:b7:1d:
         ac:15:97:75:06:57:94:61:6b:e4:0f:87:03:ca:e7:f4:2c:32:
         95:e7:27:62:d8:a9:b4:bb:7f:13:32:29:c5:9b:f4:6b:cd:6b:
         0e:23:82:2d:01:7b:ca:02:c8:08:ca:69:25:fa:53:78:a1:bd:
         f9:cf:75:fc:31:1b:9a:3f:e6:d2:d9:ae:09:af:89:d2:aa:b9:
         e8:a9:7d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org