Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
File:                     eVMBxo-H8Eofn0mb3y0p84RX-9M.mft (raw, json)
Hash identifier:          LnRbiDJ/NZxGRTKVM43N9x9su21MuQP+8XWnL91FSDc=
Subject key identifier:   B4:EE:43:94:50:E6:5C:8A:C9:EE:66:A9:8F:59:EE:2A:24:B5:2A:1D
Authority key identifier: 79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3
Certificate issuer:       /CN=A91D5749/serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
Manifest number:          0171
Signing time:             Sat 23 Nov 2024 02:11:48 +0000
Manifest this update:     Sat 23 Nov 2024 02:11:48 +0000
Manifest next update:     Sat 30 Nov 2024 02:11:48 +0000
Files and hashes:         1: eVMBxo-H8Eofn0mb3y0p84RX-9M.crl (hash: gJOZUh+G0UNIQESdwZ8RqWMkQlxJQvlvxOrIctRFdvA=)
                          2: FA57A19A72CE11ED9E7FF20FC4F9AE02.roa (hash: yJ4lShlDGyRUFuRYtdd4tf+gPrXiWJKg0kEkwM3sQJc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5749/serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
        Validity
            Not Before: Nov 23 02:11:48 2024 GMT
            Not After : Nov 30 02:11:48 2024 GMT
        Subject: CN=674139e4-f6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:e2:02:ec:3e:1c:03:c3:b1:e0:7a:f2:87:
                    9d:74:fb:7b:66:e7:0c:29:aa:6b:1a:9d:51:18:c5:
                    df:52:2f:6a:ed:78:64:eb:bf:21:16:30:e5:15:14:
                    3a:9a:f4:64:47:2f:f2:75:89:a7:8c:78:f7:98:fe:
                    f5:1b:62:86:87:bf:a3:7e:fe:b8:2a:21:1e:ce:63:
                    93:86:47:66:95:bb:e0:01:c8:8a:fb:0e:29:78:c2:
                    74:97:20:c1:e8:5b:56:5a:d8:12:79:59:20:32:e7:
                    b8:ab:f3:be:2a:04:df:74:0c:dc:9b:f5:69:b5:85:
                    cb:67:cb:86:7e:67:5b:2a:1c:cb:04:7f:e1:0f:78:
                    01:ec:08:7f:3c:1e:95:6c:b8:2c:6d:21:7a:cd:d1:
                    61:f2:b6:8e:14:63:1f:ff:03:de:2b:98:7b:0a:4b:
                    69:52:62:88:26:20:d0:04:ad:d9:56:6c:91:7f:1c:
                    f5:a3:c2:7f:d2:a4:df:42:04:e6:a5:a8:a2:d0:5c:
                    26:ed:08:f1:39:92:e4:e8:28:52:61:ac:e0:c2:2c:
                    bf:2d:63:d5:ae:bf:8c:a3:f7:4e:9a:c3:49:e4:8a:
                    9d:bb:4c:30:62:e2:d4:aa:99:da:77:23:68:e4:c3:
                    90:1f:94:6a:ab:bf:85:43:8e:1b:40:30:2e:6f:2d:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EE:43:94:50:E6:5C:8A:C9:EE:66:A9:8F:59:EE:2A:24:B5:2A:1D
            X509v3 Authority Key Identifier:
                keyid:79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:5e:63:6e:56:7e:1e:53:61:e7:81:3e:7a:94:cd:43:45:
         e9:65:ed:62:b1:63:4b:a5:3b:e4:21:dd:2e:3f:8a:d0:3c:84:
         1a:9c:98:54:2f:00:32:a1:7b:c5:c3:2a:c9:b2:03:25:0d:da:
         69:92:ee:f0:21:e9:30:40:3e:ff:c4:d1:3b:1f:27:41:c0:9b:
         70:2c:2d:ff:39:e5:b5:e3:07:54:1b:97:16:55:f1:c9:2d:82:
         4c:22:46:43:0b:2f:a5:64:02:bb:94:aa:ff:29:5d:51:7d:83:
         6f:20:5d:86:2a:ad:aa:b6:c0:38:6b:f4:ee:6d:97:97:12:d9:
         c8:f5:b3:0e:93:c7:5d:2c:2d:de:9e:86:c3:53:ff:ec:c1:30:
         5a:11:d9:14:25:03:a5:64:1e:88:4d:b9:0c:22:cf:75:43:3a:
         3e:66:4d:1e:93:c8:32:cd:1c:90:52:b3:c4:f6:7f:f4:d6:c5:
         62:b0:2a:86:be:9a:2f:5b:a5:45:eb:70:ff:c1:85:ca:77:f2:
         8d:0b:ce:42:a9:e6:e5:15:d6:97:26:d3:22:a5:d3:6c:b5:c3:
         5f:66:3b:6a:d3:cf:81:a2:84:8f:a5:83:7d:ae:80:05:6a:b9:
         c8:8f:d0:01:03:6b:00:a0:54:b2:f8:1b:9d:e9:72:25:4f:50:
         6e:f5:9c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org