Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
File:                     zXuGlWvtndYhW-SF8McVuSDJp3A.mft (raw, json)
Hash identifier:          6E8AkM/mA3ga7HMe2cZAme6g488uZBbXV5tZEbzpcm8=
Subject key identifier:   46:00:26:E1:E7:EE:23:93:5F:4C:8F:5E:E1:A0:05:3E:BB:93:B4:51
Authority key identifier: CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
Certificate issuer:       /CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
Manifest number:          8B
Signing time:             Sat 23 Nov 2024 04:34:44 +0000
Manifest this update:     Sat 23 Nov 2024 04:34:44 +0000
Manifest next update:     Sat 30 Nov 2024 04:34:44 +0000
Files and hashes:         1: zXuGlWvtndYhW-SF8McVuSDJp3A.crl (hash: mDlvXnoZXtknwvdfT0cBXWwjcA8/mSgFKCMgvxDlN4c=)
                          2: 60DF983AD54F11EE93ED1E3BC4F9AE02.roa (hash: KzdO+S8UaZA+5dqwU3YevT9OI76OGpIsZ7GNNEbB7Sc=)
                          3: 601B8CF6D54F11EE93ED1E3BC4F9AE02.roa (hash: 9rjLofEU8o84/eDpG2+v1chrVfPs+sqWqIrHcUhxjLs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
                          rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
        Validity
            Not Before: Nov 23 04:34:44 2024 GMT
            Not After : Nov 30 04:34:44 2024 GMT
        Subject: CN=67415b64-aec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c4:0f:3d:8a:44:8e:60:c5:b3:33:45:76:3c:
                    4f:cf:1a:43:6b:bf:1a:0e:68:46:0d:95:09:33:e7:
                    f3:12:22:9e:7a:ec:b4:e8:13:49:c7:c8:c6:d9:96:
                    7c:03:0a:87:ca:49:ae:00:71:98:1f:f3:88:75:91:
                    51:2e:24:26:f8:da:ca:2f:aa:c6:a5:20:6f:86:5f:
                    e8:7b:47:8e:72:14:d0:ca:0d:d8:97:b5:56:cb:ad:
                    35:c8:e8:1a:b9:a2:db:b0:ec:12:4f:a1:2d:c9:0d:
                    b3:e3:9e:f2:40:ef:c9:e4:cc:41:00:f1:0b:6e:a6:
                    eb:d8:8c:d5:c4:35:03:27:45:cd:73:16:25:39:00:
                    6f:23:e4:f5:9a:7a:f5:de:d9:78:2a:51:aa:f3:59:
                    aa:a4:31:07:47:cb:26:1d:f5:1f:f9:a5:dc:e6:3a:
                    b5:de:df:40:6b:d6:f9:2b:57:00:c8:a1:c7:4e:b1:
                    c6:6e:a0:d6:a7:40:10:3a:b7:aa:d0:80:9a:2d:58:
                    18:f1:63:31:3d:e1:e8:55:fb:94:0e:b3:b8:0c:83:
                    4c:69:27:31:48:08:fd:da:06:9a:07:79:00:6e:8f:
                    a0:16:8b:11:e3:2c:32:d8:1e:e5:21:69:be:47:15:
                    6f:ae:09:74:9d:40:5d:ea:48:d9:91:73:30:4f:20:
                    cd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:00:26:E1:E7:EE:23:93:5F:4C:8F:5E:E1:A0:05:3E:BB:93:B4:51
            X509v3 Authority Key Identifier:
                keyid:CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:bb:1b:16:74:df:f3:40:9b:97:0e:96:e9:39:9c:ca:b8:85:
         f7:db:35:3e:95:9c:5f:86:2e:69:36:42:e5:d7:52:e8:59:fb:
         de:5f:c5:b1:59:ba:51:fb:82:d2:a5:ab:64:41:e8:e1:1b:29:
         fe:d7:1f:73:3c:b8:c3:2f:af:69:5e:b3:da:5f:f5:9c:74:37:
         0e:9d:c5:ce:35:12:dd:29:12:3f:91:48:d8:5f:8a:3b:cd:ad:
         c3:70:62:16:5b:e1:18:a3:5d:14:20:f3:79:a8:76:30:da:28:
         26:7e:20:5c:8a:43:46:f3:60:23:1d:ac:df:ac:33:72:de:58:
         67:41:5e:b5:0f:cb:8e:18:17:65:5c:ec:2e:ea:7a:45:e9:48:
         0f:e3:bd:a4:9e:ca:56:62:7d:72:6f:24:97:86:62:15:ac:19:
         19:62:20:5d:8c:80:b2:96:d2:39:03:9d:79:4e:60:72:0e:ef:
         93:0d:a3:db:d7:f2:6a:24:93:3a:35:e5:fb:06:2d:2f:0c:72:
         90:9c:40:30:5c:8b:54:a1:f9:c2:e1:b1:c6:02:83:0d:73:f3:
         bc:e3:c4:5d:cf:4e:6e:e2:e1:d5:e4:da:6b:f8:70:05:c5:bc:
         63:73:c1:08:43:20:63:5a:3e:b1:55:6f:ac:c7:da:af:66:09:
         19:44:29:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:27 2024 by rpki-client on console-fra.rpki-client.org