Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
File:                     tljvayeSnHt_X7Jsue5qQSzoXdQ.mft (raw, json)
Hash identifier:          8s4U010p9wPhuITrBHF23no16+WdGQ2rscieIFjHH7Y=
Subject key identifier:   62:BD:37:02:3B:1E:73:FB:AA:53:DE:7B:2F:A8:E7:15:E8:C0:57:59
Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
Certificate issuer:       /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
Certificate serial:       074A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
Manifest number:          0738
Signing time:             Wed 20 Nov 2024 21:13:06 +0000
Manifest this update:     Wed 20 Nov 2024 21:13:06 +0000
Manifest next update:     Wed 27 Nov 2024 21:13:06 +0000
Files and hashes:         1: tljvayeSnHt_X7Jsue5qQSzoXdQ.crl (hash: wkY6ZYVmZDcPZ6RAvQ6Ud84OLadLsyJB/Xp9qp5Exj8=)
                          2: 0886DE60D4D311ECBE99375AC4F9AE02.roa (hash: 9Lj0MFHtpq+miySvaeL6uJyTFtWzTo11+QQQjG5cGhk=)
                          3: EFC0CAB2F81111EEB4681B75C4F9AE02.roa (hash: 85B0TnnfgM6Q+BLismdsB8Gb/c7sbiOxxQThWa5UTaE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
        Validity
            Not Before: Nov 20 21:13:06 2024 GMT
            Not After : Nov 27 21:13:06 2024 GMT
        Subject: CN=673e50e2-100f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:c9:a1:d4:51:2f:1d:0d:fe:4b:12:e0:48:
                    22:72:82:85:6d:fe:17:77:51:ec:d4:02:66:a6:d7:
                    d3:0c:c5:ab:5a:84:1e:49:25:0c:cf:87:b0:f2:b5:
                    22:47:d7:4e:c0:cb:e3:75:a5:8d:af:54:63:64:54:
                    8a:15:76:47:64:64:3c:25:c9:56:03:3d:91:e6:bd:
                    f5:2a:73:1c:06:f7:4a:d1:b5:02:6b:d3:70:fd:9d:
                    36:7d:3c:f2:ce:34:e5:d9:52:63:57:7f:05:65:db:
                    bd:da:f6:c0:b7:21:1a:cf:4d:14:e5:8b:31:9e:5a:
                    e3:63:32:fa:b3:3b:e8:07:a0:34:03:82:6c:0c:03:
                    10:9b:29:79:18:59:eb:d0:73:cc:d3:59:45:0c:0f:
                    5d:2c:e6:10:fd:55:4c:38:c9:4e:00:ed:cd:4b:79:
                    63:cd:2a:c7:d9:d2:06:8a:c2:36:94:b4:4d:48:a1:
                    9c:90:3a:65:9a:db:6b:e5:7e:5f:de:74:a2:fc:2c:
                    fe:a5:ec:f9:15:7d:c1:8f:e5:c4:35:5e:65:70:3a:
                    32:1e:f1:42:27:63:65:0f:62:d9:04:b5:98:83:d4:
                    b4:9c:bb:1a:e1:4e:1e:86:3a:93:37:22:97:0a:cc:
                    05:44:78:0d:37:02:c2:37:aa:6e:3a:43:30:72:b3:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BD:37:02:3B:1E:73:FB:AA:53:DE:7B:2F:A8:E7:15:E8:C0:57:59
            X509v3 Authority Key Identifier:
                keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:15:ab:05:02:9a:47:7f:bd:04:81:27:44:3a:14:59:42:88:
         3c:c4:ff:95:89:be:3d:2e:7f:4b:24:07:02:97:03:dc:7b:e1:
         37:cb:5e:fc:c8:36:ae:4d:0e:10:99:4b:c4:c6:75:3c:38:fb:
         d1:18:21:b3:a2:57:cf:95:bc:c0:47:88:c7:25:b4:ff:d5:9c:
         60:e7:d2:27:6c:5a:3b:a4:d8:1e:87:ce:30:34:7f:7c:d0:a6:
         aa:97:6a:62:ce:d6:89:00:f6:80:2a:e9:d0:de:17:84:63:d4:
         bb:24:73:40:06:a1:7b:e6:d9:9b:6b:fa:60:3f:0e:92:91:80:
         f6:11:bd:49:94:77:1a:43:6f:d2:6e:2c:06:38:c1:13:df:65:
         9e:39:2b:e3:ee:4f:15:31:b9:96:59:45:ae:33:34:5a:58:2e:
         0c:6f:66:89:f7:05:60:45:be:c7:cf:6a:cf:c9:e4:dd:47:9b:
         ed:6e:fb:0b:0c:32:0f:d0:1d:36:50:6b:1e:87:4f:4c:56:98:
         bd:48:bb:42:20:65:56:e9:2d:2b:f0:98:50:1c:7f:cc:dd:f6:
         b9:70:30:55:e2:cd:29:eb:60:1b:c2:4f:62:9e:f3:11:eb:bb:
         09:7b:e1:45:5d:40:1a:2d:38:ba:7e:cd:39:68:2f:af:2c:24:
         d1:d9:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:36 2024 by rpki-client on console-fra.rpki-client.org