Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft
File:                     hkxROVpl1d5w7NMKrSemn0ubIrw.mft (raw, json)
Hash identifier:          fmIY8Ey9zLJQ+QnTUhN2dLqe6KEJ7G0iM+p/Ztn+9gI=
Subject key identifier:   33:16:16:EC:BD:B3:86:5B:A9:85:3C:7A:95:5B:E5:BB:17:EA:AF:EC
Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC
Certificate issuer:       /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft
Manifest number:          C4
Signing time:             Sat 23 Nov 2024 03:54:20 +0000
Manifest this update:     Sat 23 Nov 2024 03:54:20 +0000
Manifest next update:     Sat 30 Nov 2024 03:54:20 +0000
Files and hashes:         1: hkxROVpl1d5w7NMKrSemn0ubIrw.crl (hash: fJ/2MI+4s+TjSSnyNc4t6vInkzvLRBftqvh5J3n/Lmk=)
                          2: BA3E92207D2311EEA3696814C4F9AE02.roa (hash: QCckKoHrm9e4eOGS9nr5xC5ujq5pBtfUnu0x7UGDanM=)
                          3: B9CAD7A47D2311EEA3696814C4F9AE02.roa (hash: fRtDuN/PZH7IUQwKVGV5NkTVNfXcpwMUrATdeN93WIw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl
                          rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC
        Validity
            Not Before: Nov 23 03:54:20 2024 GMT
            Not After : Nov 30 03:54:20 2024 GMT
        Subject: CN=674151ec-8927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:45:36:1d:0b:ac:01:22:41:e6:f6:c1:e2:6d:
                    20:1d:9c:20:e7:11:df:e2:10:d1:49:9d:6c:d3:f0:
                    4d:10:b9:3c:78:d0:78:e8:7e:b7:76:1a:f0:95:37:
                    a8:6a:1c:cb:d0:71:d4:58:19:86:41:b9:24:93:f3:
                    80:90:f8:d8:30:6e:08:bd:86:08:62:9e:83:8b:f3:
                    a0:da:3a:19:6f:7b:4e:fd:1d:aa:3c:92:85:45:c5:
                    70:59:d4:7f:29:2a:ef:9d:f3:d6:42:a0:9f:7d:49:
                    ce:46:51:19:78:22:f6:25:7c:82:f4:c3:3f:48:57:
                    0e:60:88:c8:59:c0:47:a4:56:95:32:88:19:c4:cf:
                    df:9e:57:90:a2:22:f7:24:58:eb:a8:b1:aa:f2:86:
                    2b:e9:c8:d8:b9:89:c9:05:1e:f8:89:40:87:84:fc:
                    eb:ed:7f:98:02:48:e3:31:d8:49:82:43:40:2c:e8:
                    55:e4:4d:67:f7:f4:78:b9:50:67:97:fe:6c:17:92:
                    30:7e:be:5a:29:19:41:53:1c:7f:aa:22:ca:b1:4d:
                    04:e1:b6:56:ca:65:ad:56:3c:76:7c:9b:5a:f2:5e:
                    b0:bf:bb:56:8b:0a:a1:af:f3:8c:06:32:7e:6e:b3:
                    71:0c:36:0a:18:1c:be:ff:8a:08:f3:71:42:4b:8b:
                    44:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:16:16:EC:BD:B3:86:5B:A9:85:3C:7A:95:5B:E5:BB:17:EA:AF:EC
            X509v3 Authority Key Identifier:
                keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:02:75:a4:91:39:48:86:05:f6:86:b8:35:18:88:fa:c8:ef:
         24:cc:07:ec:99:f9:3d:70:62:4c:d1:95:ae:f4:d1:12:25:ca:
         29:5f:ac:67:0d:88:75:56:ad:c3:c4:f3:c3:e4:58:63:04:34:
         31:e5:a6:d7:2b:ff:d5:68:1b:7f:ad:14:a1:66:d8:c1:e0:78:
         cd:2a:b2:c3:9c:d6:5e:13:a9:e7:5e:dc:6a:ac:15:6f:a6:86:
         94:3f:0c:35:54:30:a5:a1:bc:6c:e6:32:5e:84:40:70:c1:71:
         ad:2c:54:b2:c6:70:a8:80:cb:15:91:49:6e:b6:e3:c9:ae:61:
         bc:f8:18:1f:d6:f0:bd:77:99:73:5d:f7:f7:0f:66:49:65:de:
         dd:b6:99:e2:4b:9c:4c:12:3d:fb:96:29:1d:1d:c4:06:be:ea:
         c3:7d:52:49:fd:52:06:cb:cf:49:da:9f:66:4c:df:18:3f:9d:
         4c:c5:27:dc:97:ff:15:8b:fa:21:01:a6:46:6a:34:17:88:ab:
         c4:0e:71:90:3d:ac:23:a3:0b:2d:97:94:c5:cf:96:0c:de:b7:
         aa:19:6f:6d:a7:d9:12:46:b1:ac:26:0b:32:91:c7:ed:4a:4d:
         b0:ea:6f:2f:0d:02:8c:73:4a:04:f8:3f:0e:4e:eb:09:f4:8f:
         98:f0:8e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org