Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
File:                     V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft (raw, json)
Hash identifier:          shFGV0XDNLcDqYoZUV3MpJoQLnUqHrm/9BZUMkUpvyc=
Subject key identifier:   8B:21:C7:87:64:FF:E1:58:6E:D7:D8:24:F3:68:FF:6F:5F:8E:9B:3D
Authority key identifier: 57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1
Certificate issuer:       /CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
Manifest number:          0191
Signing time:             Sat 23 Nov 2024 01:53:59 +0000
Manifest this update:     Sat 23 Nov 2024 01:53:58 +0000
Manifest next update:     Sat 30 Nov 2024 01:53:58 +0000
Files and hashes:         1: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl (hash: XGxW7y8f1OJP8epeBGt4wVyzHlU//MgY7erBljZ5Uf4=)
                          2: 46B3DF5A46E111EDB39B8526C4F9AE02.roa (hash: TjnV5mFOYdxb90Wl7rBBpD16GWeK0cHfYitbTARm7mg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl
                          rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
        Validity
            Not Before: Nov 23 01:53:58 2024 GMT
            Not After : Nov 30 01:53:58 2024 GMT
        Subject: CN=674135b6-30a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:80:34:3e:6f:82:7c:f6:43:83:b6:66:9c:
                    58:90:9c:4b:4a:90:b1:80:2c:9d:9e:e3:6d:20:01:
                    85:da:9d:57:79:b9:4f:88:5f:81:fe:f8:54:06:2f:
                    7f:30:8f:f1:f5:0a:d3:14:f8:89:31:f0:66:10:cc:
                    67:4e:62:df:63:62:f8:93:88:62:49:3b:c8:18:f3:
                    ae:1d:fc:47:02:21:b2:b3:6f:cf:36:1b:00:e3:b6:
                    4e:d3:b4:44:cf:e2:50:45:4e:73:6d:ad:1a:8e:2d:
                    82:21:e5:03:91:af:0d:5a:3a:c9:d6:82:e8:a2:85:
                    08:23:a2:f2:a6:1c:ad:8c:21:a9:b0:ad:5a:50:b9:
                    e0:9e:f1:eb:ae:06:36:c7:ff:64:60:34:8f:8c:34:
                    c8:8e:77:f6:e8:a0:67:c1:bb:45:24:e4:63:ee:ee:
                    c8:9c:ad:7d:ca:bd:01:d1:95:eb:43:4c:b9:27:58:
                    d0:89:84:40:c8:2e:bc:dc:d7:ea:26:34:86:56:40:
                    93:fa:66:74:84:86:c2:4d:fb:41:8c:53:46:34:03:
                    93:b6:4c:98:5f:b1:c5:e9:ba:59:6a:52:e3:df:17:
                    2e:07:fb:a2:6b:51:5b:0a:c8:4c:e7:a5:b8:30:64:
                    6a:f5:5b:f4:ee:21:d9:58:b4:25:b6:34:d6:46:1a:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:21:C7:87:64:FF:E1:58:6E:D7:D8:24:F3:68:FF:6F:5F:8E:9B:3D
            X509v3 Authority Key Identifier:
                keyid:57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:59:7d:b0:37:5b:7f:99:88:98:ee:52:2d:9d:d4:59:f8:79:
         4a:35:ac:9e:42:56:0a:41:7e:29:9c:d4:74:fe:30:bb:f2:8b:
         8f:f1:e0:b7:43:08:e0:c5:45:9a:fe:38:25:c2:32:9b:90:50:
         c8:33:51:5b:cf:00:48:5a:eb:f6:9b:46:ca:98:c4:0d:a2:b9:
         95:8a:18:e3:61:13:49:1d:6e:21:62:66:29:35:e9:08:c7:23:
         e8:99:63:3f:ad:4b:fa:66:94:10:5e:43:db:c7:6c:b4:c7:7a:
         2d:ef:7c:d1:c4:c7:24:af:42:95:22:89:d9:34:69:e9:a9:f5:
         a1:42:be:65:2c:23:dc:89:82:d0:4d:06:68:5a:36:d9:e6:c4:
         a0:1b:9d:b5:e6:fc:13:92:15:2e:38:a1:a9:b1:ec:b0:b4:21:
         09:7c:69:d0:1a:3c:bf:f1:a9:eb:ce:2e:37:28:55:1d:14:9d:
         00:c7:97:3e:db:2f:5f:86:fc:f0:51:73:30:cb:4b:5c:31:e0:
         44:6b:f2:78:be:46:54:ef:af:ab:53:0a:5e:c1:99:94:eb:7b:
         60:25:09:ed:e5:d5:de:e1:85:1d:57:80:da:d7:b6:fb:38:79:
         4e:de:36:35:7d:83:af:7e:b5:ef:32:31:96:84:7f:b3:6a:25:
         ab:22:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org