Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
File:                     ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json)
Hash identifier:          n2RAiUbL5w+qf9zNnZrU8Msb78JUKUzRD0lZVTiieHI=
Subject key identifier:   0F:A1:54:41:16:6F:1E:E1:D2:34:63:F7:DF:23:17:E4:27:3A:8E:7D
Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
Certificate issuer:       /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Certificate serial:       06A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
Manifest number:          06A0
Signing time:             Fri 22 Nov 2024 21:46:45 +0000
Manifest this update:     Fri 22 Nov 2024 21:46:44 +0000
Manifest next update:     Fri 29 Nov 2024 21:46:44 +0000
Files and hashes:         1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: xCXn/gpubK9QlLKLjfE/DTbCIph9dIDeR1RsRTVthWU=)
                          2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: SHGtx48jizWMPTmbjinGpFJTeIxTYjm6SPEzGcA5GIM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl
                          rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1700 (0x6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
        Validity
            Not Before: Nov 22 21:46:44 2024 GMT
            Not After : Nov 29 21:46:44 2024 GMT
        Subject: CN=6740fbc5-2460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:71:8a:9e:02:97:f6:b6:46:09:4c:cb:b0:
                    53:25:13:44:6c:1c:5d:01:48:60:4e:78:c4:95:6e:
                    2d:b1:d1:5c:94:2e:b0:fb:dd:42:a6:47:90:3f:85:
                    f1:1e:85:19:36:a2:c8:0d:83:e0:1b:45:38:eb:a5:
                    8d:ab:bf:e0:2a:80:f2:c9:b1:ad:ef:61:a3:9e:f0:
                    79:de:00:32:18:68:69:1b:57:a8:b5:74:43:5d:23:
                    08:ce:67:ac:46:0e:8a:8f:fe:c5:6b:44:16:62:37:
                    2c:ff:a6:3e:f1:88:1d:ab:1a:34:19:7f:c5:ee:a9:
                    3e:10:68:7b:62:d9:2a:85:fd:4f:e6:ec:c1:41:df:
                    b0:da:6f:79:51:85:d0:d8:48:eb:a1:8b:71:72:0a:
                    82:75:67:6d:88:ae:b5:ce:a1:70:4e:b0:fd:e4:bc:
                    ce:a6:2f:fe:89:07:89:32:7a:64:af:7f:fe:fd:3d:
                    cd:51:d8:ef:44:42:b0:7b:5b:18:c2:40:a8:5c:2c:
                    75:f0:e7:d0:53:db:e1:c4:20:6e:3f:f2:fc:1a:0e:
                    9e:80:22:f5:7e:c6:ba:26:d1:c8:a3:8b:d0:47:83:
                    2d:8c:58:b8:5d:11:7b:58:a5:a2:b1:85:a1:41:29:
                    54:89:1b:f4:11:22:1e:02:ca:7c:a9:91:a1:ba:2b:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A1:54:41:16:6F:1E:E1:D2:34:63:F7:DF:23:17:E4:27:3A:8E:7D
            X509v3 Authority Key Identifier:
                keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:10:68:f9:66:d4:7d:81:7f:a5:e5:ea:ce:50:b1:09:ae:27:
         eb:a8:db:52:4a:2d:ec:bd:8a:e3:df:73:96:40:67:a2:51:7f:
         66:35:e5:e5:48:53:5b:2a:7b:cb:e7:c7:8f:aa:98:f8:2f:ff:
         35:93:c7:16:5d:1d:d8:5e:31:c3:f7:e5:93:51:60:05:40:64:
         13:f3:bd:d5:0e:e7:80:ba:f2:67:68:23:06:5e:39:ec:19:e4:
         c6:fe:d4:5e:0b:b7:59:d5:4e:46:92:ef:76:dc:c8:f7:68:76:
         9a:93:c7:2f:85:73:ed:60:65:38:ac:5f:ed:9e:21:cd:dd:2b:
         4e:ad:36:b1:59:49:36:0b:6c:05:c3:b0:2a:c6:72:c5:f5:3c:
         19:20:fa:33:7f:8d:07:56:e6:b9:91:a2:65:d2:00:27:28:95:
         54:6b:01:f5:6c:02:7f:04:19:d4:a1:7b:68:27:c6:43:c6:ee:
         57:e1:4f:ad:5b:83:50:47:47:62:42:42:ea:0b:0b:0b:6e:0c:
         cc:cf:1a:ec:69:81:89:8e:d0:df:a8:b7:9e:1f:f8:1f:a4:17:
         6c:73:62:bb:6a:4b:7a:d2:78:b8:17:b2:1b:e5:25:07:23:d4:
         83:0c:43:98:5f:20:e1:b7:d3:42:87:a4:76:b1:90:b2:20:51:
         1f:2e:39:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org