Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft
File:                     l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft (raw, json)
Hash identifier:          HocMGelfVBf8JlttUjL8Y4qUSfuBkW1HEucUbc7ZT7M=
Subject key identifier:   CF:C0:E7:95:71:3F:E0:8A:B2:E2:F6:E3:8E:79:9B:9E:3A:43:18:4C
Authority key identifier: 97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6
Certificate issuer:       /CN=A9175762/serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6
Certificate serial:       057E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft
Manifest number:          0579
Signing time:             Fri 22 Nov 2024 22:50:12 +0000
Manifest this update:     Fri 22 Nov 2024 22:50:11 +0000
Manifest next update:     Fri 29 Nov 2024 22:50:11 +0000
Files and hashes:         1: l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl (hash: BvGkpgxKK37aGFyIBU4DqVdW3MmF+mtIQK9xrRmaw+Q=)
                          2: 9DD99914B85311EBA5D4171FC4F9AE02.roa (hash: cWcNQqrDkKG4hgGb9AK50/XNtpWiCDtJKNxDo16v5qQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1406 (0x57e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175762/serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6
        Validity
            Not Before: Nov 22 22:50:11 2024 GMT
            Not After : Nov 29 22:50:11 2024 GMT
        Subject: CN=67410aa3-9b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2e:35:15:4f:ef:11:11:87:65:5c:b2:59:59:
                    cf:d9:65:4b:22:89:29:d3:1b:70:95:09:7a:c5:29:
                    4e:86:27:12:3b:46:ee:fe:fc:73:b4:bf:df:57:c6:
                    17:41:d6:17:fc:0b:80:56:7d:82:20:30:88:7c:2a:
                    16:48:22:e3:7b:43:66:2b:87:d8:80:67:5f:91:51:
                    73:b4:f3:03:12:39:a6:09:61:a4:60:2b:36:50:8e:
                    0e:8c:29:7b:4d:f3:b9:5d:b5:ba:30:05:88:4c:9e:
                    fd:24:4f:41:72:89:32:05:f8:d3:57:03:78:60:5d:
                    23:5b:51:4c:5b:38:07:b3:00:fc:f7:cf:90:e9:34:
                    d3:70:ad:84:11:2e:6b:de:41:ef:47:f1:41:7b:31:
                    32:07:24:80:1b:80:18:b8:a3:15:c1:85:09:9d:6c:
                    e3:5c:f0:e0:db:d0:d9:05:64:d2:66:bd:a4:b8:a1:
                    ff:c0:d4:d2:58:2c:0e:91:a8:63:fc:73:05:fa:df:
                    06:70:dc:7c:57:a6:ce:51:3d:76:42:3a:3d:23:50:
                    13:46:2d:7e:c8:ef:5d:04:fe:ff:98:d5:fe:01:1d:
                    6e:ff:45:a9:3e:bf:98:31:2f:9b:d5:a8:cd:ad:90:
                    31:fd:e3:82:18:d3:87:01:69:9e:ee:09:c0:9c:7f:
                    62:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C0:E7:95:71:3F:E0:8A:B2:E2:F6:E3:8E:79:9B:9E:3A:43:18:4C
            X509v3 Authority Key Identifier:
                keyid:97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:02:cf:41:0e:73:1d:e3:6d:74:fc:cf:dd:06:5a:0f:54:21:
         bb:5a:23:e0:c9:e3:5d:e7:cb:96:54:b0:8b:21:f0:84:1b:e2:
         ca:97:ca:33:84:a5:75:4b:f7:b3:b7:be:71:f2:52:cb:5d:d0:
         8c:d4:d1:62:3e:08:d8:4d:72:2c:c6:fe:49:5f:f0:76:ae:36:
         74:52:c0:60:5e:8c:5e:b3:0b:46:e4:31:c2:fb:db:3c:a4:fa:
         b7:b6:23:32:aa:d6:27:a1:14:0f:3e:ce:99:7e:ff:3d:e4:ca:
         9e:05:95:a3:eb:bd:d7:f2:85:af:85:e8:b4:f8:bd:9a:b7:76:
         19:8f:a8:4d:4b:01:6a:27:38:2a:64:7c:ed:48:e0:e0:15:66:
         b7:be:78:91:ca:9e:2c:1c:95:c2:0e:27:e0:30:a7:a9:3f:14:
         67:ef:ef:43:2a:b0:dd:75:db:45:5f:48:1d:67:02:d7:30:f1:
         e9:ba:c7:7e:63:6d:a1:69:df:50:dd:de:7e:65:5e:7b:61:81:
         30:0a:99:8d:e3:6d:78:e3:c8:0e:81:db:46:d6:93:1c:b4:94:
         90:d6:63:41:dd:b3:ea:7a:91:3a:98:a0:b4:9b:e2:16:80:ce:
         ec:2c:a8:62:b0:0c:c6:c0:3c:78:02:a9:6f:17:df:8b:94:e0:
         27:5d:fb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:29 2024 by rpki-client on console-fra.rpki-client.org