Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
File:                     bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json)
Hash identifier:          cbH9Am27KaqWpuNClUKslPAcL+g4eH/J8sUY/nXmXlA=
Subject key identifier:   69:44:2A:46:A6:D4:FC:CA:FE:2B:85:C3:E7:E6:38:0A:D5:21:FD:86
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Certificate issuer:       /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial:       1315
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
Manifest number:          12F4
Signing time:             Fri 22 Nov 2024 17:03:34 +0000
Manifest this update:     Fri 22 Nov 2024 17:03:34 +0000
Manifest next update:     Fri 29 Nov 2024 17:03:34 +0000
Files and hashes:         1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: NJi8FZailFBKqKpzlBzpNZHNHsRWsQ9XWxkkyCxndSI=)
                          2: 7591212C3A1C11EFBDEB8F55C4F9AE02.roa (hash: wyoP5dUGVytAi+ATiud+GKq3Kxb7BLMoz3BFovbLysc=)
                          3: D96FDB32A57111EF9BA85A81C4F9AE02.roa (hash: ZpzFBlF6vram5w2RC46GaLw+r2L+pd9IKytshwmhbRc=)
                          4: C4E4B26C7F4911EFB795AB1BC4F9AE02.roa (hash: o+7i7IQFtZje0SAveczjIb9oLrkcj364HO7mmgl+Elc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
                          rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4885 (0x1315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
        Validity
            Not Before: Nov 22 17:03:34 2024 GMT
            Not After : Nov 29 17:03:34 2024 GMT
        Subject: CN=6740b966-aa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:21:92:38:93:b7:e9:69:d2:81:53:ef:2d:
                    a1:43:a1:2f:85:3a:25:f9:44:71:df:90:62:ac:fa:
                    7f:27:99:59:a6:0f:31:02:23:94:20:e1:92:d7:7f:
                    61:c6:5a:88:ed:4b:5b:4b:4b:8b:0b:14:c4:10:1a:
                    b3:d7:1d:00:57:74:4f:c8:a4:81:0c:f3:f9:79:7c:
                    fd:5e:76:4e:c6:7c:e3:ed:98:c6:7d:75:8c:4d:01:
                    ec:17:2e:d0:22:8a:c7:35:96:b5:da:42:36:2f:b8:
                    fa:c9:44:8c:ab:c2:b3:a5:47:e5:4f:f7:ae:09:eb:
                    3f:60:78:4c:9a:b9:96:e5:9b:9d:88:74:9e:17:3c:
                    98:78:d2:f3:e1:e1:3b:4a:c4:6f:44:c7:d6:ed:a5:
                    70:5e:32:bd:3e:57:c2:17:e9:35:ff:70:7b:5f:c6:
                    ba:1f:ee:06:ce:a2:03:6b:e3:63:29:19:91:c5:e0:
                    41:56:82:ac:43:cc:93:5b:c5:c9:7b:4e:5c:7d:e1:
                    3a:33:a7:6b:64:b5:6d:ef:67:ab:07:b7:bc:d5:7c:
                    44:96:07:c7:fb:a0:a7:6e:c5:02:26:09:ed:ae:82:
                    87:dd:45:21:28:e2:31:2e:f4:bc:b3:c7:a8:50:f9:
                    3c:1c:16:1b:df:c8:87:a5:08:f6:c2:c0:c1:17:c3:
                    37:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:44:2A:46:A6:D4:FC:CA:FE:2B:85:C3:E7:E6:38:0A:D5:21:FD:86
            X509v3 Authority Key Identifier:
                keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f4:0f:6f:a9:b8:2b:57:21:21:32:4a:86:72:63:f4:6c:95:
         3f:17:3b:e8:e5:7a:79:b7:d1:1a:ff:fa:9c:9c:fa:d4:81:fd:
         9f:62:1a:82:07:61:7c:c1:3d:e5:ce:cf:bb:1c:61:4d:43:c1:
         88:87:19:a5:75:f8:d3:2b:db:41:a4:54:9f:73:30:5c:ea:65:
         b1:61:a2:aa:cd:27:86:18:89:08:9b:1e:1e:b9:68:45:40:77:
         de:43:0b:91:b4:97:80:90:51:3d:f9:80:49:d2:d0:87:68:6a:
         48:36:a5:fd:6c:db:99:26:a5:50:42:88:48:8e:4c:47:13:02:
         c4:27:97:88:2f:9f:c6:14:0d:23:17:4f:d0:0a:4e:73:70:e9:
         8f:a9:c8:b9:53:14:0c:36:cd:fc:9e:d7:b0:29:e9:a6:1e:d5:
         2c:57:59:0b:7d:7b:1c:26:3b:43:9c:1f:bd:c9:7e:5f:be:78:
         8b:cf:cf:11:e1:ce:f0:3c:68:f3:3c:db:4c:cb:30:51:63:80:
         b6:61:25:1b:a1:58:74:59:8a:72:48:94:5a:f5:3c:ea:9c:b1:
         df:00:79:40:43:ef:41:b2:07:c0:6c:43:39:1c:99:8b:13:f7:
         19:c0:2e:74:36:e7:06:16:e2:c9:ba:9f:4e:03:40:55:6f:a9:
         61:a6:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org