Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
File:                     0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json)
Hash identifier:          vfbZ4ijDsqQHqDjYgc+VnU4PAu8sSf2hzhceGdWeYNw=
Subject key identifier:   14:A7:05:03:C6:A2:58:F3:9C:C6:73:E9:1E:75:31:71:B3:19:0A:FF
Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
Certificate issuer:       /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
Certificate serial:       0673
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
Manifest number:          066E
Signing time:             Fri 22 Nov 2024 21:55:01 +0000
Manifest this update:     Fri 22 Nov 2024 21:55:01 +0000
Manifest next update:     Fri 29 Nov 2024 21:55:01 +0000
Files and hashes:         1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: 3CC13AHclwHA9a05F4A8AjMIaOHDfyq20XUdBhPos9k=)
                          2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: PFrV9NPTBknSjdmlAsxffe/x4T1O4oXZWiMBMdvbqVU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl
                          rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
        Validity
            Not Before: Nov 22 21:55:01 2024 GMT
            Not After : Nov 29 21:55:01 2024 GMT
        Subject: CN=6740fdb5-6ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:39:62:6c:d4:ed:0f:11:58:52:ca:6e:d1:db:
                    ec:ba:93:9b:1b:9b:ab:4b:5e:86:3a:12:e8:84:8a:
                    5c:d7:d1:bd:d8:0c:82:2a:60:dc:20:fc:b3:08:0b:
                    78:29:e3:25:08:31:ec:23:ad:f2:59:c6:6a:9b:d3:
                    37:82:24:e4:ed:59:e1:d1:b3:1b:d0:cd:28:08:63:
                    f7:c5:2a:4c:07:fe:98:9a:32:8e:56:da:4a:6a:a0:
                    3b:af:ff:f4:77:58:08:a3:b4:d7:1e:e0:65:99:e2:
                    dd:83:c7:aa:35:fb:d3:cd:b0:65:79:65:3a:c3:d9:
                    32:b0:d2:6f:16:36:02:79:16:b2:95:d5:fa:87:40:
                    ba:1e:0f:ac:36:2f:de:32:28:9d:05:36:f2:de:98:
                    16:dc:3d:4c:4a:fc:02:fb:bd:49:f0:3e:54:b0:06:
                    1b:dc:8c:70:10:4a:3b:e9:da:ea:3b:7d:d5:0d:fa:
                    2a:f6:eb:75:ff:e4:1b:7a:f2:b7:92:53:5d:49:ce:
                    ea:51:d9:56:84:d1:3e:01:fc:07:72:1a:26:4b:08:
                    80:0c:7d:c3:4c:c4:d4:5e:f9:93:14:ca:65:f3:8f:
                    06:3a:58:d8:fc:3b:a5:a1:5d:b8:61:c6:78:fa:77:
                    a4:02:28:f4:a3:0d:a4:2f:95:2d:87:6e:0c:ac:c8:
                    ad:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A7:05:03:C6:A2:58:F3:9C:C6:73:E9:1E:75:31:71:B3:19:0A:FF
            X509v3 Authority Key Identifier:
                keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7c:40:54:4f:41:5f:a5:b4:a0:3f:3a:4d:82:ba:0f:66:5e:
         3d:a1:24:0c:b2:44:6c:90:ae:c5:36:d0:07:7b:65:68:42:74:
         4b:8d:0e:0d:21:5b:52:88:cf:d6:8e:89:6b:17:95:4f:fa:f6:
         1b:d3:5c:c0:6f:65:59:8b:d1:04:a1:42:37:b1:4b:39:3a:49:
         3b:c3:a0:ab:81:2e:d4:22:44:47:63:ea:9c:f3:70:45:b4:e2:
         bf:da:67:81:63:14:7e:9d:56:55:22:6b:8c:99:d6:fa:ad:dd:
         21:6f:6d:5f:07:e6:2d:fe:28:20:ea:13:35:89:c9:7d:85:9a:
         7c:53:1f:0c:f0:73:aa:d8:47:9e:af:ea:0f:0f:79:9b:3a:73:
         9e:82:cd:fa:cc:d1:c5:44:4c:52:cb:8d:ff:51:8f:64:1d:80:
         e3:15:03:40:8c:eb:d9:5c:51:56:63:5d:a1:ba:f6:7a:16:6b:
         5b:b7:13:5e:25:a9:a4:a7:d4:24:d2:dc:79:3d:0d:ea:f6:36:
         96:90:e6:bc:db:5e:67:4c:77:80:17:58:4f:ee:19:d4:89:ce:
         f5:d6:47:46:4f:cb:b8:39:d4:ba:10:5e:03:42:e5:d3:fd:b8:
         ba:48:66:36:fb:81:f9:a6:a8:90:a5:fb:9d:70:1a:ce:a8:3b:
         0c:24:ff:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:53 2024 by rpki-client on console-ams.rpki-client.org