Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File:                     aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier:          +aOUNGEd81tJnrC1ZGJ/hCggNXmSExmZyrP7D+o2bXY=
Subject key identifier:   37:0E:3F:B7:F8:DB:CA:F8:7D:24:2D:66:D4:C1:67:0C:D0:37:FC:06
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer:       /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number:          34
Signing time:             Thu 21 Nov 2024 05:38:52 +0000
Manifest this update:     Thu 21 Nov 2024 05:38:52 +0000
Manifest next update:     Thu 28 Nov 2024 05:38:52 +0000
Files and hashes:         1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: /IE8nS6JRluab0S1bxOCp1hNpO7uO70CTxSJaf01Tdc=)
                          2: 444375E25B9C11EFA181A044C4F9AE02.roa (hash: cZUk0GjwHyhCgvrA9p0spIEgaP2VdUy22G42gnbqnlc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
                          rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
        Validity
            Not Before: Nov 21 05:38:52 2024 GMT
            Not After : Nov 28 05:38:52 2024 GMT
        Subject: CN=673ec76c-ae02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:b5:8f:d4:ed:99:bf:0c:41:58:75:4c:48:
                    1f:d4:dd:39:a0:19:ce:af:77:46:36:c9:dd:0e:7c:
                    c7:71:9f:41:3a:0f:03:9f:8a:57:11:8c:0a:c6:a7:
                    6c:71:1a:bb:78:ab:89:d4:eb:e3:1c:27:89:6f:65:
                    56:4b:d3:f8:71:c8:44:ff:71:6b:84:7a:6b:ff:29:
                    3b:8e:2c:b8:9b:2f:4f:81:5f:af:da:4f:09:11:e2:
                    cf:4c:87:1d:0a:c6:28:bf:0b:97:1e:d8:a7:08:9e:
                    24:8e:49:c1:e7:e0:a0:23:50:46:b3:7f:50:4f:91:
                    25:9f:c9:17:07:33:f9:cf:ec:f2:74:ef:f8:5d:e3:
                    f1:39:57:de:f0:54:98:b5:09:1a:f7:c1:a0:ef:42:
                    7c:b6:ce:81:4c:2d:2c:bd:66:c2:55:4b:7f:f5:12:
                    6f:b2:cc:e6:14:dc:7f:76:da:47:66:ef:69:3a:9f:
                    28:16:87:da:6f:7c:81:b5:57:30:f0:0c:7a:02:fd:
                    8a:e2:1a:7d:c5:36:5d:be:a7:a2:60:87:2a:0c:db:
                    10:d7:b6:62:bc:38:50:d8:5e:ba:d1:26:63:b3:76:
                    12:28:5d:91:3c:ec:9c:1c:b3:48:f3:5a:61:72:ca:
                    cc:b9:d7:32:1f:ab:ea:3c:91:b9:17:66:64:4b:85:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0E:3F:B7:F8:DB:CA:F8:7D:24:2D:66:D4:C1:67:0C:D0:37:FC:06
            X509v3 Authority Key Identifier:
                keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:21:73:e7:26:1a:86:be:48:c0:70:2b:23:9a:51:97:cf:18:
         2e:6d:1a:b3:fc:f4:3b:be:b3:21:6a:bb:40:10:40:b3:e9:ac:
         43:9b:27:14:58:48:64:9b:ef:48:58:11:3a:3f:e4:26:f8:66:
         69:98:fd:52:fb:3b:5f:78:9c:4a:92:71:bf:ba:f3:c4:2e:ff:
         63:a2:df:85:da:67:c6:b9:ea:1f:51:5a:7d:b2:94:a1:13:53:
         4c:2e:a7:dd:cb:8b:87:06:89:a5:97:53:95:cc:e1:ab:70:56:
         e8:f5:7f:14:8a:cb:0c:c5:e6:e3:40:16:9d:ee:e5:81:2a:c0:
         93:8b:fa:96:ae:22:6b:aa:cf:8d:6c:26:4d:4d:47:0f:0d:96:
         ee:52:bc:73:02:2f:26:f9:88:c0:a4:2f:6a:21:81:93:af:77:
         81:99:db:ed:11:67:62:e3:7d:54:f2:5f:f2:71:07:0f:e8:84:
         3e:86:b3:d0:17:7f:77:14:a8:ce:41:77:ee:19:a1:ed:2e:23:
         e6:b9:34:57:fd:c4:0e:5e:57:a1:aa:ad:4b:f0:be:f9:51:a7:
         33:db:79:e8:e2:1c:b8:57:0d:a8:ae:d4:8c:62:ec:7e:58:85:
         b3:6e:59:15:77:cc:f4:6a:e2:c6:bb:37:21:25:27:3a:6d:ad:
         f2:9f:a4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:39:59 2024 by rpki-client on console-ams.rpki-client.org