Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
File:                     31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json)
Hash identifier:          vSmdZYjlZ3vUx/5XbJ/GnPbh00A6YAVYiafmkanFm7k=
Subject key identifier:   F1:5E:F6:3B:B1:86:95:47:39:8A:DF:6C:D6:BE:AA:4D:89:4A:19:D7
Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
Certificate issuer:       /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
Manifest number:          0114
Signing time:             Sat 23 Nov 2024 03:03:12 +0000
Manifest this update:     Sat 23 Nov 2024 03:03:11 +0000
Manifest next update:     Sat 30 Nov 2024 03:03:11 +0000
Files and hashes:         1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: jOVf6zvXZq/iDnS5K/5UWcgr/9WwpZVX3tw+m1LFmY4=)
                          2: 0FB9EB64042F11EEB364B741C4F9AE02.roa (hash: n6Qf/JiR4rtaPvENLh8Bod7Vpff68SamyHvj1NNpSA4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
                          rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
        Validity
            Not Before: Nov 23 03:03:11 2024 GMT
            Not After : Nov 30 03:03:11 2024 GMT
        Subject: CN=674145ef-5dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:71:6f:af:8e:78:5d:0c:a7:b4:15:0f:fd:
                    d4:b9:10:63:cd:0b:73:aa:f0:c8:e2:0c:1b:a1:92:
                    8c:4d:d8:b1:45:fb:06:15:25:09:a9:fb:35:b1:2f:
                    ef:79:cf:17:02:4d:36:e0:66:7a:68:da:01:79:1c:
                    fc:ef:b2:72:0d:2a:92:31:63:7e:31:be:0d:07:a3:
                    4b:e0:51:d1:58:47:0e:e3:c2:2a:2d:02:dc:dc:24:
                    78:50:e4:11:70:a7:29:18:95:e7:d2:de:65:32:2f:
                    17:f6:11:78:01:41:6e:21:f7:4d:9d:06:0a:4c:4e:
                    77:e2:10:f7:46:e3:57:f3:2e:70:1b:7a:01:75:b4:
                    11:8b:9a:95:ef:ec:54:67:a6:50:ee:65:9c:c0:2c:
                    ad:48:74:62:11:84:2e:7d:72:65:70:d7:dc:aa:4e:
                    82:67:f1:32:65:52:9d:4d:b9:82:3e:3b:51:5e:87:
                    e6:20:cc:fe:d9:92:ce:f7:d7:07:11:9d:d8:d9:d9:
                    05:b8:a1:10:65:be:04:78:43:87:99:f2:79:96:de:
                    28:18:28:46:ca:92:e8:84:a4:ea:2d:51:b4:51:0a:
                    7c:72:7e:6c:a1:ca:0d:34:68:73:ce:4d:f3:d4:5b:
                    3b:a5:83:b7:b3:6d:14:bd:8d:db:0c:06:ed:a2:a6:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5E:F6:3B:B1:86:95:47:39:8A:DF:6C:D6:BE:AA:4D:89:4A:19:D7
            X509v3 Authority Key Identifier:
                keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d2:f1:09:f1:72:1f:a3:b5:bf:61:19:97:3d:b4:1d:01:80:
         0e:62:43:97:4e:94:3b:07:65:5b:b7:a5:a1:f2:b9:17:18:29:
         57:29:1e:3c:7a:a1:d4:0f:3b:c4:36:ed:5e:14:91:e4:5b:c7:
         82:a9:f4:5d:d6:01:ce:67:65:e9:ae:c3:94:94:bf:35:18:bd:
         f4:db:6d:74:0e:2c:e8:0f:57:5f:30:27:56:f4:68:1f:db:c6:
         ce:ee:f4:33:3e:07:09:e0:40:9c:75:8b:d5:d6:8f:89:7b:18:
         73:ce:f3:a8:90:78:0c:58:66:28:8f:23:e8:fa:b6:f1:26:d3:
         08:82:63:07:be:55:67:fb:ed:3a:1d:42:52:27:09:86:dd:98:
         cb:88:0b:3e:ea:96:fc:33:39:be:7b:e1:af:a3:25:9c:09:d7:
         00:d8:aa:43:7a:7f:c1:1b:4b:4f:25:22:23:75:b9:e1:45:27:
         63:ac:50:b8:90:a0:aa:d1:b8:ae:21:34:c1:04:a8:f9:72:6e:
         e9:9c:f9:19:90:46:67:69:33:96:31:b9:bb:b1:72:34:88:6a:
         ea:75:ed:bf:1d:63:9b:95:6c:d6:ec:31:b3:20:9b:73:4d:00:
         92:6e:cd:f9:88:97:7c:c5:35:1b:8a:b8:67:4a:5d:ad:56:40:
         4a:9a:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:53 2024 by rpki-client on console-fra.rpki-client.org