Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File:                     vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier:          Q2ijI9tebRsAiB6FCPw3NV7mptspKu9RR41kMhlyKf8=
Subject key identifier:   27:4B:02:12:5D:80:CB:9A:6A:04:35:23:7F:9C:6C:4E:36:6F:C0:98
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer:       /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial:       0376
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number:          0F6C
Signing time:             Fri 22 Nov 2024 18:20:13 +0000
Manifest this update:     Fri 22 Nov 2024 18:20:12 +0000
Manifest next update:     Fri 29 Nov 2024 18:20:12 +0000
Files and hashes:         1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: DPmOGirFjNe9V56OhFCrD4owe+sie90fO9JqGhfi+TM=)
                          2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: Cu7mP4ScFcEgh99akamYEaBRClwxLE+oM+a0PvnQM0M=)
                          3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: jmM2MyWVgkGoSl8m7eT/QohnLLhAgCt5V5ifbC8tFnE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
        Validity
            Not Before: Nov 22 18:20:12 2024 GMT
            Not After : Nov 29 18:20:12 2024 GMT
        Subject: CN=6740cb5c-5923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:1f:fd:f9:df:87:30:a6:45:43:c2:13:bc:
                    7f:bb:be:d5:ac:c8:ad:93:d6:d3:4a:74:94:1a:23:
                    15:96:5f:11:a9:4f:51:1b:b0:c1:07:87:4d:a0:47:
                    ec:22:22:df:99:6b:3f:76:06:0f:06:2e:20:61:71:
                    a1:43:91:ef:2a:32:cb:8f:7a:10:d9:59:73:ca:9d:
                    b9:06:94:8c:af:2d:db:e7:e1:e3:fa:22:3c:00:b7:
                    32:0c:2a:10:70:57:53:92:7e:5b:dd:1d:43:ff:e5:
                    57:ce:4e:e3:97:12:1e:61:88:35:33:f6:13:b2:98:
                    e7:ba:9e:40:20:71:6c:73:93:86:b0:24:ae:69:8d:
                    9f:92:8b:48:5d:fa:d8:6c:5a:06:93:a7:17:6c:b9:
                    f9:08:50:61:7c:16:7d:11:8d:e4:70:fa:a6:6e:b8:
                    e5:e2:7c:41:e7:1c:f0:0a:46:85:93:67:d2:2d:2d:
                    3d:3d:cd:13:34:4e:39:dd:0a:d9:7c:e7:64:1e:f0:
                    6e:43:3e:d8:60:3a:b9:20:e0:59:d7:08:d5:04:33:
                    d7:4e:84:54:97:27:46:d5:41:74:c1:d5:c3:a9:0a:
                    01:3e:88:c2:26:13:07:15:09:8b:f7:5e:6f:cd:f6:
                    5d:e6:a5:a3:36:c5:23:46:aa:38:ba:72:c1:a4:a2:
                    00:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4B:02:12:5D:80:CB:9A:6A:04:35:23:7F:9C:6C:4E:36:6F:C0:98
            X509v3 Authority Key Identifier:
                keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c3:a3:a9:6c:1f:c7:86:4f:66:55:09:3e:3a:9a:3a:5b:c7:
         57:4c:87:0e:3b:1f:90:5f:c8:15:bb:44:ef:58:37:a0:81:0e:
         f8:80:f2:ec:d0:a1:f5:71:9f:38:3e:af:bf:3f:6a:15:5f:2c:
         67:e1:94:63:9c:6e:e8:12:5b:ec:e0:fe:63:68:f9:6b:44:29:
         92:52:28:b3:76:9c:4e:4f:95:ef:48:35:c8:01:23:ca:d6:e1:
         c1:6e:af:e0:ba:71:52:c8:ce:a8:c3:d6:27:f0:80:2b:53:8b:
         bc:c0:0f:2d:a4:be:55:4c:97:1d:78:f2:c5:ad:6a:6f:c1:6f:
         37:bc:29:2a:cc:03:40:a7:81:38:67:94:d6:14:d5:4a:ec:56:
         a4:4d:27:8b:d7:b9:3a:0c:c9:2e:dd:31:b7:12:76:2d:00:5c:
         20:32:67:6f:01:0c:46:59:cb:7f:ff:c4:a4:1e:63:ce:74:bb:
         14:97:e5:ab:9d:be:e0:e7:96:28:a3:ff:3c:98:44:c7:04:57:
         c4:68:af:88:cf:f7:7a:98:00:3a:9d:22:3e:d0:5c:8f:65:ae:
         c8:b7:fe:36:97:64:2b:4a:08:e7:08:01:90:4e:ab:0e:45:fc:
         7a:5e:fa:89:a2:53:45:b7:61:2d:f1:c0:eb:1c:5a:79:82:f2:
         78:60:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org