Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
File:                     UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft (raw, json)
Hash identifier:          +xCi7ssBZrCopaKhHLI0nX5SctR5Jq96mUiB3iitUnQ=
Subject key identifier:   3D:7C:CB:43:43:E8:E1:37:E0:80:D1:26:EF:12:4F:08:44:E8:6E:74
Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
Certificate issuer:       /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
Manifest number:          66
Signing time:             Sat 23 Nov 2024 04:57:53 +0000
Manifest this update:     Sat 23 Nov 2024 04:57:53 +0000
Manifest next update:     Sat 30 Nov 2024 04:57:53 +0000
Files and hashes:         1: UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl (hash: vnzUDZ1pVzR1OODHLOe0QaCD91HHG+dcq/DjtsS6qUQ=)
                          2: 18141426114211EFA0FF3956C4F9AE02.roa (hash: wOKkXFecaGXCjByRcpDkGbc7Cdo2VuRpcxeBnTZ+uS0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
        Validity
            Not Before: Nov 23 04:57:53 2024 GMT
            Not After : Nov 30 04:57:53 2024 GMT
        Subject: CN=674160d1-e478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:40:70:e9:a8:2d:52:8d:c8:da:2c:a4:45:a0:
                    4b:8e:7b:62:33:90:87:46:2e:59:a2:8f:28:95:61:
                    95:48:ee:52:d5:0f:94:fa:f0:b7:03:de:04:bd:73:
                    4b:8a:ce:0d:d9:4e:36:74:14:be:01:03:7b:d0:1d:
                    6f:e1:08:0d:22:59:62:8e:e6:14:25:ca:a8:f4:4c:
                    b5:51:d4:5f:f6:14:2f:6f:dd:00:d1:59:40:14:5e:
                    f9:6b:0f:39:bc:ad:90:6f:37:1d:c5:09:e8:97:61:
                    1a:66:9b:a3:19:33:73:0d:92:56:00:97:32:f6:18:
                    78:0b:08:94:1f:5e:4e:7e:d2:ea:31:f7:bb:c1:ba:
                    9a:24:84:48:b8:b3:2b:e4:6e:7e:c4:5b:05:31:ed:
                    24:74:81:75:5a:1c:b8:2b:de:c6:45:7d:33:c9:fc:
                    ce:39:95:07:14:17:8b:da:c5:78:1d:b7:af:e6:31:
                    6f:fb:50:e4:a7:94:95:f2:9d:96:80:f9:f4:d1:b3:
                    dd:5d:eb:1c:70:cb:ba:9e:98:14:c2:93:b5:47:2c:
                    41:c6:4a:c3:61:08:75:c5:15:4f:cc:d4:46:57:e8:
                    b8:c3:76:c3:2a:fc:09:c6:79:f9:a4:e5:e6:27:89:
                    e3:e5:a2:7f:f0:a0:13:6d:05:35:e7:73:00:e2:19:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7C:CB:43:43:E8:E1:37:E0:80:D1:26:EF:12:4F:08:44:E8:6E:74
            X509v3 Authority Key Identifier:
                keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b0:e6:44:05:21:2c:73:99:13:bf:fc:db:e1:52:17:08:71:
         b5:c6:a7:86:ec:a1:63:24:76:35:75:d1:8a:98:bf:68:50:7e:
         a8:0f:1f:f8:fe:10:81:0b:89:6c:a5:2b:26:9c:d6:6f:f7:73:
         a8:f8:99:3c:e7:d4:e8:d0:d9:db:77:8c:ee:07:f7:ed:dc:47:
         d6:1c:22:44:77:ea:30:ea:d0:d5:15:d3:4d:b0:d1:7e:82:41:
         73:45:0a:a3:38:f7:92:5b:89:1f:cc:21:2d:f5:56:1f:3b:86:
         7d:6f:53:91:57:c5:ba:cb:81:84:e5:ba:4e:f4:37:89:9f:c9:
         fe:2f:ff:79:0b:ae:d0:3a:00:86:ae:56:00:15:d1:c0:e1:a2:
         d7:93:1b:34:6c:15:30:b0:4d:3b:90:50:67:6b:eb:53:d5:ca:
         a8:ff:4e:ed:36:3f:62:18:cf:72:38:a7:fe:48:71:2d:b4:2d:
         77:28:8b:b0:02:ba:ed:b7:22:0f:ff:ff:a8:16:a2:82:1f:1b:
         6c:33:de:8c:cd:7a:76:3e:8b:f2:88:8d:45:ef:6c:a1:b7:0c:
         09:bd:3c:53:8f:5f:e0:3c:4d:66:35:b0:cc:57:89:b7:95:68:
         4d:61:86:c5:d6:01:5f:a6:f7:02:cf:cf:df:41:fa:4a:ed:e6:
         44:9b:25:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:18 2024 by rpki-client on console-ams.rpki-client.org