Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft
File:                     tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft (raw, json)
Hash identifier:          NtQbxhnQUDOKoQasDdKDz7Lsrw3wY/5d6m5TsOTsh1U=
Subject key identifier:   C5:61:F7:43:43:29:5F:13:80:85:C5:29:99:2F:D0:59:B6:D0:D8:A1
Authority key identifier: B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64
Certificate issuer:       /CN=A912147F/serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164
Certificate serial:       0B82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft
Manifest number:          0B73
Signing time:             Fri 22 Nov 2024 18:51:38 +0000
Manifest this update:     Fri 22 Nov 2024 18:51:38 +0000
Manifest next update:     Fri 29 Nov 2024 18:51:38 +0000
Files and hashes:         1: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl (hash: GudoKB4HTjZSAfyluXNMpnEXVlWF5NEkYbf0MCKS2+Q=)
                          2: F648238E766911EC9EADC512C4F9AE02.roa (hash: 5HR8HV4Pjb49WKQhkhqMDo2vrU9gsv4/J0a+FK8ah0g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl
                          rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2946 (0xb82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912147F/serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164
        Validity
            Not Before: Nov 22 18:51:38 2024 GMT
            Not After : Nov 29 18:51:38 2024 GMT
        Subject: CN=6740d2ba-6596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c1:c7:fd:57:44:ee:84:3d:d1:fe:7f:7e:da:
                    34:80:3d:77:99:5e:9b:13:bb:9d:88:2c:93:b3:93:
                    fd:af:df:91:78:26:64:d5:2d:3f:52:d0:41:7a:e9:
                    d1:29:d0:c5:c0:27:a2:5e:67:b9:e0:a9:2c:7f:8a:
                    d0:74:f3:09:31:4e:80:89:a0:d2:db:61:68:21:d1:
                    28:bb:f2:10:89:25:df:47:2c:e2:b5:a0:ee:3a:14:
                    d3:0d:f1:19:d1:7d:d5:06:0f:bf:15:0c:f6:19:43:
                    b6:66:df:8c:41:6c:75:bb:1a:18:5e:2c:51:b0:d4:
                    fa:f6:8f:aa:ed:64:4b:29:e6:59:cf:ed:69:73:36:
                    55:7d:96:97:86:ab:58:3a:16:18:00:c0:bc:f6:e4:
                    1d:17:f0:1c:42:6c:6d:90:ac:35:1e:28:f9:a7:af:
                    1c:34:3e:9c:fa:14:d6:bc:4b:35:7f:50:a9:c5:31:
                    29:95:8e:34:08:81:4b:5b:a5:6c:8b:b3:c5:30:c3:
                    bb:81:18:5d:84:35:99:e0:ee:6d:cb:ba:47:06:a3:
                    ff:53:12:34:07:bb:51:06:a2:3c:d0:a6:d9:a5:a6:
                    61:32:05:6e:d9:20:cb:c1:3e:fa:3e:7a:8c:01:19:
                    cb:51:70:db:8b:ab:56:b1:28:8d:21:1f:a5:da:19:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:61:F7:43:43:29:5F:13:80:85:C5:29:99:2F:D0:59:B6:D0:D8:A1
            X509v3 Authority Key Identifier:
                keyid:B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:37:87:4c:a2:50:cb:09:e0:e4:c2:91:1d:73:bd:66:85:a0:
         da:98:1e:f9:11:27:aa:5b:38:30:03:58:4d:4b:56:37:40:68:
         00:1e:c9:66:27:43:d3:8e:26:8f:83:3d:9b:73:07:a7:07:ea:
         d0:34:49:16:cf:70:44:3a:7c:44:d8:9b:64:57:99:4a:70:82:
         7c:ab:af:32:f4:40:86:99:53:75:04:3d:76:38:00:ff:ed:05:
         b8:f7:c5:f3:a8:5c:cf:45:c6:a8:23:94:f9:23:d6:5d:79:1c:
         ec:c6:30:f0:06:94:c3:65:7c:b8:a4:26:28:2a:b0:94:cd:7e:
         8c:1d:fc:05:e0:2d:7b:fe:bd:5a:dc:b9:ea:5b:f7:e4:1d:fb:
         3b:27:6f:8a:9d:3e:50:c9:c9:dc:44:06:ac:55:5b:a5:23:78:
         39:46:0b:4a:af:73:32:f3:cc:52:ea:f5:c5:cd:e8:54:cd:7f:
         41:61:b7:01:70:38:2b:c6:e2:ee:cd:ca:ce:91:10:00:23:98:
         77:ad:00:17:b3:ed:a3:e0:b5:f0:0b:7b:00:6e:56:4a:83:c7:
         94:de:ff:fd:20:51:24:95:e4:74:38:d2:6c:fd:91:f8:dd:64:
         1e:35:66:6b:8b:15:a4:81:c8:d7:a4:b9:12:87:93:37:c4:f4:
         b9:50:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org