Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
File:                     W9MkppvSbt2t9RKc0Y93odgFI7Y.mft (raw, json)
Hash identifier:          WogdC18sOIhZbCUervjOH6ET7nUPEtX/OPz/WlhhcNo=
Subject key identifier:   88:00:6D:67:C5:E9:3B:48:BF:1A:C3:17:5E:CE:17:3A:04:6C:90:AF
Authority key identifier: 5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6
Certificate issuer:       /CN=A91B0380/serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
Manifest number:          21
Signing time:             Sat 23 Nov 2024 05:47:04 +0000
Manifest this update:     Sat 23 Nov 2024 05:47:04 +0000
Manifest next update:     Sat 30 Nov 2024 05:47:04 +0000
Files and hashes:         1: W9MkppvSbt2t9RKc0Y93odgFI7Y.crl (hash: 3C5U7pH1CuC7ELVP+UJuqQ+SbM3VVR8SftArge4mEec=)
                          2: 09FB57587C7411EFB8CF8A27C4F9AE02.roa (hash: EfqdiAfFoa0ZonYMj3ssTP4hOkGO4+MLqEbn+7K2Sak=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380/serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
        Validity
            Not Before: Nov 23 05:47:04 2024 GMT
            Not After : Nov 30 05:47:04 2024 GMT
        Subject: CN=67416c58-8ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:f0:a3:2b:00:a0:77:17:81:5b:9a:f3:48:
                    8d:60:cc:72:11:42:82:2e:a0:69:22:02:92:d2:3d:
                    bb:0f:cc:12:0c:1b:b3:e5:0e:82:28:90:cd:bc:b2:
                    01:14:3c:47:d7:90:d6:81:90:71:0e:14:04:84:ec:
                    41:51:36:8b:20:99:77:ea:ec:c6:06:8f:f1:4e:53:
                    07:d3:14:e3:95:9b:bb:de:09:6b:a5:61:74:51:3d:
                    6f:a9:dd:24:2a:ad:a9:00:fa:94:ad:90:a5:04:7f:
                    76:2b:8a:3f:f3:d7:38:9c:db:04:66:ac:36:46:3f:
                    f0:b6:8a:fb:45:03:c7:e7:2f:09:9e:15:80:53:c9:
                    6f:0f:86:d0:42:31:f4:d1:77:1b:6b:b5:c4:b7:e6:
                    72:a6:6e:04:93:71:11:58:4f:61:f5:75:a8:da:f8:
                    88:b8:64:84:af:bd:6c:88:91:1f:da:ef:ba:23:8b:
                    b1:b9:7c:e3:7b:53:3a:59:55:e4:54:4e:3c:af:0e:
                    75:e2:be:f1:3e:34:83:ec:03:30:32:f3:3b:09:65:
                    0a:ef:c6:36:fb:86:f7:b2:12:66:71:a3:f0:c5:d1:
                    1c:10:cc:3d:ce:f1:0a:e9:f1:c9:2f:2a:25:a8:17:
                    a4:c8:60:5b:a2:a6:bc:67:f9:01:d5:5d:6e:4c:2f:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:00:6D:67:C5:E9:3B:48:BF:1A:C3:17:5E:CE:17:3A:04:6C:90:AF
            X509v3 Authority Key Identifier:
                keyid:5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4a:eb:f6:c4:10:95:5b:39:d4:e4:36:b5:c6:e0:67:2d:9d:
         e7:72:1e:ba:d6:ed:9a:fe:92:7a:44:f4:30:b5:d2:d2:1c:73:
         ee:d0:ae:57:a6:d8:7c:7c:ab:ac:65:1e:34:93:1c:93:c0:d5:
         90:c6:d0:5e:e6:76:c5:f5:9c:7f:fd:f0:2d:7b:e1:9e:1f:b9:
         88:92:d5:6f:3c:21:60:9d:fb:d9:6c:7f:b1:c8:1b:b1:ab:53:
         57:ba:bc:45:01:61:36:c0:f3:07:ee:06:ce:d4:ca:e2:0c:3d:
         ce:b3:60:dc:30:d7:75:33:87:48:4d:48:10:19:4b:74:d9:75:
         5c:8a:29:fd:1b:b6:ab:a6:d5:4e:57:41:af:76:80:5e:a0:48:
         36:c6:1a:d4:27:cc:1a:57:a7:87:8b:6e:8d:d0:48:36:a7:40:
         b9:6f:81:b5:ab:7a:a0:6e:18:32:c5:73:63:b4:c0:01:da:93:
         03:4f:6a:32:bc:90:4e:b9:d2:c2:57:d8:c0:a4:4b:82:02:e7:
         40:4d:a8:4a:4e:c7:1b:31:c2:4a:eb:71:a9:b8:a6:8b:3c:5c:
         fa:4e:fa:75:f5:36:76:86:6e:b4:38:7e:02:90:b9:fd:b8:eb:
         f4:15:be:ea:f9:f3:78:70:82:19:11:25:92:50:64:2d:29:c7:
         3d:02:9d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org