Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
File:                     2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json)
Hash identifier:          h6htnMIRUqBTS7TBaqNdTumfzCAXxhW3TqH497m2S7s=
Subject key identifier:   02:7C:CF:15:26:08:8A:68:EA:A8:03:36:1A:4F:A5:9D:AC:CD:8B:30
Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5
Certificate issuer:       /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
Manifest number:          F8
Signing time:             Sat 23 Nov 2024 03:20:40 +0000
Manifest this update:     Sat 23 Nov 2024 03:20:40 +0000
Manifest next update:     Sat 30 Nov 2024 03:20:40 +0000
Files and hashes:         1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: /llNWIICnkXdV4Pcqj27/K3OFwqznsZ1fgDipG+/Adw=)
                          2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: U86j7UjADgM2E45QTk1FhQ37u/QVFr1IVoMXiU/NlC8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl
                          rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5
        Validity
            Not Before: Nov 23 03:20:40 2024 GMT
            Not After : Nov 30 03:20:40 2024 GMT
        Subject: CN=67414a08-671b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:7a:2c:65:06:32:1e:c1:16:6b:bc:0b:9f:
                    ca:a6:ef:06:f9:29:da:6c:a9:09:d5:81:55:c2:30:
                    7a:67:5d:99:58:c9:d4:f4:54:64:83:0f:f9:e4:f7:
                    de:54:8a:d7:fe:28:44:5a:c9:7d:71:1f:2e:44:eb:
                    b9:8e:2f:6a:85:35:6d:0a:83:e5:f9:34:2c:8b:dc:
                    86:49:75:21:13:8c:f6:95:d7:f2:88:9f:ba:90:74:
                    0b:d3:ce:b8:9a:c7:ab:4d:f7:a9:2a:5d:66:13:8c:
                    f0:6d:0e:cb:c2:12:af:ab:e9:2c:65:39:b5:48:3e:
                    da:f5:30:42:c1:bd:3b:54:ed:a0:1b:0e:b2:76:9f:
                    9d:8a:eb:03:52:e7:2a:65:a2:b3:9a:29:37:63:a9:
                    3d:df:7d:6b:66:34:37:d1:ce:0d:91:cb:94:5d:1e:
                    35:a9:5a:42:fb:fd:e3:8b:01:23:da:70:bf:65:48:
                    f9:7c:ec:49:f7:ee:a1:1c:c9:18:7d:08:4b:bf:18:
                    8f:3a:7b:92:bc:94:f6:18:7a:15:2d:0a:7e:0e:e5:
                    ba:f1:d6:9d:7f:ac:e0:d2:a6:47:7a:b1:ae:29:b9:
                    8d:da:26:f4:9d:e4:92:32:2c:61:de:a6:35:2e:61:
                    40:44:6f:aa:30:2e:c8:b5:6a:fb:93:ee:30:dc:84:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7C:CF:15:26:08:8A:68:EA:A8:03:36:1A:4F:A5:9D:AC:CD:8B:30
            X509v3 Authority Key Identifier:
                keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:cd:50:f0:47:46:c0:fd:83:a7:af:46:fe:9a:05:99:f7:c9:
         f3:ca:29:ab:05:21:de:be:6d:e2:5a:36:35:57:23:3c:e5:80:
         1c:12:fd:21:a5:4f:5f:18:77:6d:cc:08:2f:d4:84:89:8e:95:
         bf:e2:4a:d7:9c:b2:15:16:35:5b:20:d8:a7:e9:c6:dd:80:94:
         3d:19:79:8a:40:88:3f:48:84:72:b7:d4:9b:8b:f0:a8:04:b9:
         c5:dc:65:35:6d:7c:78:96:87:6d:8e:0e:cf:52:1a:e5:8e:a2:
         f0:02:1d:99:82:0a:84:ec:f6:74:9a:da:04:d3:7f:ca:7e:79:
         25:e1:a2:44:38:80:b3:54:db:af:cd:90:7a:85:84:21:82:59:
         af:fc:32:73:47:ef:ec:fa:1c:5e:6c:49:29:a1:2d:84:13:6b:
         00:44:84:fc:6d:b8:76:00:b9:7c:dc:40:01:90:fb:33:3c:35:
         5d:4d:db:90:3c:0d:82:66:50:30:d2:65:2d:fc:2f:19:ae:b4:
         a3:c2:3a:2f:57:0d:27:03:97:56:0e:7e:92:0f:60:f8:b7:39:
         25:b9:a9:b8:fb:81:c9:df:d3:a3:06:d7:b8:db:45:07:98:05:
         ac:61:5e:17:33:77:cd:58:d1:7d:ba:96:98:8c:07:66:de:4e:
         16:0c:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org