Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
File:                     BWvvRscxWDfrrepBeAueQaP7fqA.mft (raw, json)
Hash identifier:          ksyQ62cZiFL7n1ODG9S/ZHCgwFQKVIRcdAXmdLKMtF8=
Subject key identifier:   56:58:8D:53:41:8B:68:6A:5D:90:CF:84:15:6A:0B:54:54:88:76:98
Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0
Certificate issuer:       /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
Certificate serial:       0216
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
Manifest number:          0213
Signing time:             Sat 23 Nov 2024 01:32:23 +0000
Manifest this update:     Sat 23 Nov 2024 01:32:22 +0000
Manifest next update:     Sat 30 Nov 2024 01:32:22 +0000
Files and hashes:         1: BWvvRscxWDfrrepBeAueQaP7fqA.crl (hash: +1AzBArZdGALxvgHTE5eabj9Onri4RcT+Sju3NTtMM4=)
                          2: 207B27560EE411EDA32ABE0FC4F9AE02.roa (hash: mcE/IJHhNlxSeNevkXhbHkK77FCAYAyssZWA6yEpRCo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl
                          rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
        Validity
            Not Before: Nov 23 01:32:22 2024 GMT
            Not After : Nov 30 01:32:22 2024 GMT
        Subject: CN=674130a7-76ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:4c:ae:ec:42:fe:5f:67:cb:fc:d8:fc:19:
                    98:39:77:47:8a:38:ee:d8:73:a1:b8:6f:af:3a:59:
                    b2:af:3c:28:98:15:c6:04:23:1c:55:e9:c4:0b:e2:
                    12:da:ad:46:8a:89:01:a6:4f:67:76:2f:29:b5:21:
                    cc:f5:d9:06:23:ec:ae:93:f2:68:b7:0c:7b:18:61:
                    d3:30:d4:2e:cd:2d:ae:1a:3f:fb:95:63:e4:43:e4:
                    f3:a0:06:70:18:31:b9:77:a9:db:9a:b2:a0:a2:8d:
                    a5:39:c7:54:ab:95:0d:df:31:65:0f:5a:cb:00:3c:
                    bb:20:52:c1:a2:9d:dd:6e:17:e7:7a:2d:23:dd:2c:
                    9b:6a:48:19:68:54:b0:1e:50:cc:7b:0a:9e:86:47:
                    b4:59:5f:36:62:30:0f:8a:ac:eb:60:db:01:f3:9e:
                    e1:d8:db:90:87:80:a4:91:0c:2f:f1:a6:6c:28:1f:
                    4c:27:fd:4b:f9:c9:1a:72:25:15:b0:77:0e:a7:61:
                    44:1c:4a:1a:b1:0f:74:df:68:1a:cc:31:76:c4:07:
                    cd:1a:a0:ed:79:88:ba:d6:40:12:27:02:a6:34:53:
                    82:b2:60:19:cf:e9:26:9a:1a:35:3c:83:1f:44:aa:
                    e0:18:c6:3a:94:0b:81:2c:fd:11:37:99:13:b8:fc:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:58:8D:53:41:8B:68:6A:5D:90:CF:84:15:6A:0B:54:54:88:76:98
            X509v3 Authority Key Identifier:
                keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:dc:46:f2:ff:43:85:15:41:97:34:3a:f5:40:6b:e1:75:68:
         c4:13:f5:3a:c9:4f:91:b7:59:d1:cc:3f:e0:4b:56:65:ef:53:
         4d:70:c8:05:0a:22:7d:20:47:c1:0e:f5:f8:28:88:f5:ac:50:
         e7:37:2d:1b:08:a6:6d:4c:f3:e7:2f:63:bf:d0:ff:eb:82:8c:
         13:26:99:16:63:ec:8c:e0:3f:ff:3c:ad:7c:14:22:47:c7:a7:
         9e:25:c0:b7:2a:d9:f4:cf:bd:fd:8b:68:1f:3c:39:49:27:be:
         40:ce:a9:29:06:98:72:87:86:f6:13:9b:f4:14:55:dd:2f:d2:
         e0:32:c0:c2:dd:cc:1e:cc:24:0d:3f:e7:8a:0a:98:86:b3:bb:
         7b:43:9e:5a:7b:ae:9a:37:59:a8:47:68:2a:9b:74:f7:2f:fe:
         85:d1:23:c7:29:c7:69:e7:64:cd:80:b5:84:d5:64:fa:8a:01:
         fb:7e:f8:78:7b:56:2b:bb:e5:53:87:41:a2:9b:dc:59:e0:34:
         6a:38:e7:7c:99:86:fe:0a:70:2f:33:c0:73:f8:51:c6:72:c7:
         e2:10:cb:42:16:34:a1:32:cf:31:a8:e9:cf:9c:5b:6c:de:d6:
         58:62:c7:fb:9e:83:d3:80:b2:6c:92:b2:28:34:e9:bf:d7:be:
         2b:d8:58:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:31 2024 by rpki-client on console-fra.rpki-client.org