Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
File:                     J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft (raw, json)
Hash identifier:          NIFvYrr+R+csnHP9nvEGpu6EcI1VG37SgSxba28+wz8=
Subject key identifier:   D0:21:59:28:1E:2B:97:1B:42:24:E6:A3:26:8E:04:3B:63:4B:3B:8D
Authority key identifier: 27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC
Certificate issuer:       /CN=A91C2610/serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
Manifest number:          07
Signing time:             Sat 23 Nov 2024 06:06:50 +0000
Manifest this update:     Sat 23 Nov 2024 06:06:50 +0000
Manifest next update:     Sat 30 Nov 2024 06:06:50 +0000
Files and hashes:         1: J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl (hash: hM0E5j5rrH7v+EOVxbED1NtlpHb+qw4UoLdG57mCxf0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl
                          rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2610/serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
        Validity
            Not Before: Nov 23 06:06:50 2024 GMT
            Not After : Nov 30 06:06:50 2024 GMT
        Subject: CN=674170fa-6af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:e6:f1:82:be:af:39:10:36:ac:07:21:a6:
                    9c:12:01:b3:b4:24:47:21:76:33:40:61:97:f1:05:
                    7a:96:16:09:aa:68:6b:ad:01:8c:86:96:74:06:a9:
                    20:e0:1c:48:67:d7:c7:c8:48:7f:b3:7e:0a:41:31:
                    16:9b:45:32:97:70:3e:7c:fd:4e:3b:80:2a:07:b1:
                    80:1e:ff:43:4c:a7:be:19:ad:72:d2:6d:55:3a:b1:
                    fa:52:68:a6:89:95:39:b8:af:dc:08:3c:51:95:2a:
                    3c:27:08:99:29:59:01:af:b7:e7:78:0f:b8:b3:d3:
                    14:a3:17:aa:49:e0:72:59:32:4e:3e:e9:5d:7e:23:
                    d6:93:fb:e9:1a:5d:82:a0:94:c6:9f:eb:03:5d:34:
                    86:0f:40:e3:39:50:31:de:48:b0:b7:a0:00:d7:79:
                    dd:1b:4a:2b:02:3a:f6:7a:19:69:ad:47:2a:68:54:
                    1b:da:ad:3c:65:91:83:be:90:e8:d0:27:cd:43:65:
                    fa:ab:7c:28:fd:03:b1:61:de:59:d8:80:fa:f2:af:
                    ee:64:e3:f3:8e:6e:28:1e:82:22:04:d1:9a:cc:55:
                    53:34:fb:b8:4b:46:ce:59:66:f2:ce:16:4e:9a:51:
                    b9:ce:4a:d8:8c:7b:8f:fd:36:3d:c6:77:5f:d4:3e:
                    7f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:21:59:28:1E:2B:97:1B:42:24:E6:A3:26:8E:04:3B:63:4B:3B:8D
            X509v3 Authority Key Identifier:
                keyid:27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:86:07:c9:6d:7f:74:e4:3d:57:3b:54:17:0c:28:a0:00:41:
         b2:58:71:8c:7c:bf:8e:80:8e:b1:c2:63:97:b5:d9:18:f6:04:
         ab:06:05:18:70:37:24:93:ed:d2:86:7c:86:78:8f:c3:c4:4a:
         08:97:ec:69:49:e8:ed:12:21:d0:d9:96:be:04:cf:26:88:36:
         ea:2b:42:00:43:6d:5e:f5:83:10:6a:4b:4e:b4:2b:47:05:9c:
         e9:c7:dc:73:13:3a:84:3c:6e:c8:38:60:5d:fb:54:6f:28:59:
         14:d9:bb:2f:be:96:17:a6:28:8b:94:78:d2:cc:64:8a:a6:ca:
         24:53:70:63:1d:49:da:0a:45:af:d8:73:05:7a:64:32:a1:55:
         ab:c3:89:c6:e5:85:b1:22:3e:6e:b7:5e:9f:72:33:e7:ab:79:
         c1:46:f7:c8:0b:44:19:97:c2:60:1b:61:ef:f9:b2:55:69:b1:
         89:9c:86:a5:d9:17:83:96:73:2f:0f:77:e4:ef:54:92:e4:14:
         f4:97:26:71:db:47:35:a5:1a:87:43:70:86:c7:29:da:b8:cb:
         6e:fe:74:cb:d9:50:ba:d7:07:88:3c:8e:fd:6e:79:90:b0:d3:
         07:61:10:f2:6a:42:d9:a8:5f:b7:8d:22:84:be:47:12:e9:86:
         0c:b5:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org