Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
File:                     xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json)
Hash identifier:          oSiZhfEIlE/U8GVGugOzUh7i+Y+7D/UxnHcFGnASJNY=
Subject key identifier:   DE:BB:62:34:E2:3D:D6:BC:3C:C4:93:53:D5:A7:A4:50:4E:CD:A2:CF
Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
Certificate issuer:       /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
Manifest number:          08
Signing time:             Thu 21 Nov 2024 04:06:18 +0000
Manifest this update:     Thu 21 Nov 2024 04:06:17 +0000
Manifest next update:     Thu 28 Nov 2024 04:06:17 +0000
Files and hashes:         1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: Vg4m62bo7HZW8MuT8EIdjRph6dg/Dkvs0UFXtHHsLiw=)
                          2: A8AFEBE89F6A11EF89095367C4F9AE02.roa (hash: oDvaXMFE1ES45G6WiAkMxuIPDkIw1crX7ATSsqcotXo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
        Validity
            Not Before: Nov 21 04:06:17 2024 GMT
            Not After : Nov 28 04:06:17 2024 GMT
        Subject: CN=673eb1b9-2599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:85:24:0c:62:e2:0b:cd:a3:fb:ea:e9:f4:
                    2b:98:9c:ef:ca:d4:09:d0:cd:53:52:69:6b:4e:7e:
                    a9:99:e5:43:d4:71:1a:16:43:39:f9:79:35:6e:36:
                    2d:96:66:08:90:4f:b4:2f:bc:05:2c:b7:f1:ec:04:
                    78:9f:42:d9:c2:76:a5:ab:ea:f7:8d:80:ca:8b:96:
                    e4:b4:dd:ed:f1:96:05:bb:ae:81:8a:30:e6:84:46:
                    15:f5:42:ee:b2:35:4b:12:0a:1a:a4:ab:95:55:ba:
                    0a:ff:97:34:28:2c:18:29:bf:a8:e9:6c:09:cf:26:
                    69:b9:8e:13:1d:53:9a:60:ab:cf:9d:0e:44:1b:ea:
                    b8:27:b3:f4:6f:fa:a2:4c:db:00:ff:ec:6d:42:84:
                    41:33:74:83:ea:63:be:31:76:c3:9f:73:e8:e8:19:
                    f1:35:bc:74:8e:97:4a:1e:81:95:5f:c2:45:8f:f3:
                    c2:10:25:9e:0b:6f:fa:4e:3b:09:fc:97:42:55:dc:
                    35:12:ae:41:ef:e1:7c:d9:87:e8:25:94:00:d2:77:
                    d5:4b:e0:ab:86:dc:04:c0:72:3a:63:0f:be:01:d2:
                    49:5c:45:99:7c:e8:2c:41:fa:bb:1b:24:55:d4:67:
                    b3:c3:23:d4:6d:00:b2:b7:9c:3f:a5:58:2e:59:f9:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BB:62:34:E2:3D:D6:BC:3C:C4:93:53:D5:A7:A4:50:4E:CD:A2:CF
            X509v3 Authority Key Identifier:
                keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:ae:15:59:e7:5c:b1:58:bf:f4:ba:9b:d8:f2:e2:77:e8:
         a6:89:f2:78:1f:53:24:fc:c9:4e:14:f1:00:40:88:61:5d:d0:
         a9:99:18:12:63:e2:95:fe:bd:aa:09:c3:c1:91:77:cf:0a:7c:
         03:03:4d:38:b9:4e:83:65:bc:7b:8f:ad:b2:03:6d:8a:ad:82:
         be:a2:cf:46:ce:ac:00:a0:c3:50:44:15:79:94:32:5f:a5:48:
         d7:a5:f9:65:d6:70:4b:09:5e:72:f2:25:52:3e:17:13:dc:73:
         e9:18:6b:aa:31:2c:42:78:4b:83:05:b7:1e:71:9c:d7:51:38:
         49:b0:b6:56:fb:0d:cb:2c:ee:81:4e:8a:cf:56:de:cd:4e:37:
         8a:e0:b8:2f:85:e1:82:97:85:ab:1f:ee:05:cd:b5:88:50:ee:
         fe:f7:38:6c:eb:87:cc:6d:0f:0c:bb:10:fb:1d:0b:e6:e9:be:
         23:1b:c3:3a:06:89:51:40:72:20:30:fb:17:15:03:3d:ed:7e:
         80:1d:8c:28:f7:d5:88:fb:12:0c:0d:b3:c8:95:72:eb:c9:57:
         63:24:21:36:6b:53:73:98:1c:53:09:c2:00:88:96:12:72:e0:
         0b:9f:dd:8f:24:bd:5e:31:60:57:a7:be:5f:bd:42:75:e5:5f:
         16:36:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:54 2024 by rpki-client on console-fra.rpki-client.org