Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
File:                     96B_epkcIaJc05qyCt5Po7XgXRU.mft (raw, json)
Hash identifier:          4Lwws20GxMpCtRKV6921qVbQbRx9OSNPYtek3wzRYNs=
Subject key identifier:   F9:C1:77:50:F0:BD:B6:8C:CE:40:F6:9C:50:9E:87:B6:D3:D3:FE:CB
Authority key identifier: F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15
Certificate issuer:       /CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
Certificate serial:       036D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
Manifest number:          0360
Signing time:             Sat 23 Nov 2024 00:35:16 +0000
Manifest this update:     Sat 23 Nov 2024 00:35:15 +0000
Manifest next update:     Sat 30 Nov 2024 00:35:15 +0000
Files and hashes:         1: 96B_epkcIaJc05qyCt5Po7XgXRU.crl (hash: bstULdjypNabD2SrM2skPWL7lh2bpFcmtatbrGs0TQs=)
                          2: B843A2DE29B011ED8AB64660C4F9AE02.roa (hash: FxAP/J/FPDNaLo9BONled54l0bbXYkJ639e/aSCdwDU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl
                          rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
        Validity
            Not Before: Nov 23 00:35:15 2024 GMT
            Not After : Nov 30 00:35:15 2024 GMT
        Subject: CN=67412343-b59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:29:4b:4c:3e:32:e5:d2:42:e7:75:53:b7:7e:
                    a3:41:17:9f:6f:08:43:87:90:17:29:9b:62:ce:a2:
                    a1:fe:1b:da:ab:87:75:3f:e8:dc:a3:0a:c6:95:9e:
                    ba:f2:72:f0:54:55:3d:99:85:5e:a5:2d:e1:08:1f:
                    8d:9b:27:86:42:a4:cc:2e:4d:31:b4:30:ce:ca:94:
                    af:d9:73:10:6c:20:ba:99:7c:6b:ee:55:86:4d:34:
                    57:bc:89:a5:f3:78:6e:43:76:65:42:d9:2b:ee:e2:
                    5f:57:38:d0:a9:89:36:2e:f3:d1:a4:0b:13:e3:8e:
                    d6:0d:51:08:7f:36:5e:ad:c3:6c:9b:d2:f7:39:a0:
                    b8:9e:59:56:2e:e6:93:8d:b6:95:2f:24:25:b8:20:
                    07:44:89:ff:d9:f8:b8:fe:dc:fb:da:ce:54:da:25:
                    dd:a5:32:b7:1e:9c:dc:33:03:28:cd:41:0b:e6:3d:
                    84:22:64:78:88:86:fc:23:a5:32:29:00:9f:7a:0a:
                    44:fb:6d:59:d9:0a:bd:9d:ba:31:7f:7f:97:d5:3a:
                    64:b2:a3:3a:4f:0c:c6:77:a5:75:3e:a0:7a:47:f7:
                    cb:5c:9b:c8:46:d9:8b:61:b0:50:b5:9d:e3:41:0d:
                    9d:70:5d:89:6d:a0:bf:08:0c:46:cf:d3:69:c9:f3:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C1:77:50:F0:BD:B6:8C:CE:40:F6:9C:50:9E:87:B6:D3:D3:FE:CB
            X509v3 Authority Key Identifier:
                keyid:F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:42:31:43:cd:71:6f:bf:d2:5f:2a:76:16:c4:40:16:1b:fe:
         e0:f9:6b:81:83:cc:70:fa:52:d0:e7:b6:5c:80:34:99:9d:17:
         b3:8d:05:5e:f0:c6:5a:ed:60:14:0d:6b:23:4a:1b:0e:c8:01:
         ac:b6:7b:c0:c2:d2:9f:8e:90:7b:a9:68:d5:ea:10:92:a8:62:
         5e:d8:74:d5:47:ca:39:22:7f:8f:1d:2e:09:4e:25:b0:91:4d:
         aa:d7:c9:ac:f3:02:34:ee:a6:30:b5:6a:d1:67:df:ef:70:05:
         63:44:81:52:74:7a:8f:22:df:bd:83:24:c9:7e:6c:b6:e9:80:
         dd:c9:ab:59:d7:ee:28:f4:c4:5f:73:5a:ce:cd:74:65:50:23:
         d9:80:78:61:b9:2c:7f:6f:46:5f:99:bd:68:53:cc:84:a7:cb:
         6f:20:73:0e:3b:90:74:a0:93:59:0a:27:b7:a6:a6:f6:c0:2e:
         99:64:60:f3:43:37:b6:ea:71:53:07:6e:aa:db:78:93:de:68:
         76:c6:00:f4:16:c8:84:b9:04:57:70:ea:d7:41:e7:72:a0:84:
         f1:bf:a2:f9:df:82:70:b0:a7:2f:c1:f2:aa:16:b9:e0:53:37:
         75:97:89:d2:69:d3:7d:73:66:b5:ab:a5:20:04:42:40:01:53:
         c7:cd:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:45 2024 by rpki-client on console-fra.rpki-client.org