Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File:                     BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier:          0Qb4Whzyn50N/tHCh7khHGZ8vts94rE6jaKoz2dNCsY=
Subject key identifier:   EC:18:E1:6C:B8:1A:59:AC:56:D5:71:1E:09:BC:51:2C:C7:74:F1:1E
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer:       /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number:          012C
Signing time:             Sat 23 Nov 2024 02:50:48 +0000
Manifest this update:     Sat 23 Nov 2024 02:50:48 +0000
Manifest next update:     Sat 30 Nov 2024 02:50:48 +0000
Files and hashes:         1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: nD8DGdITuOwCVvxZBLnJFxNmO6wFRt9Bx6iJvWfJ0Xo=)
                          2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: 5VwQvP2fVpjZvZxgLpSBhfWvfSymTIgG5SpcIoI9Jnk=)
                          3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: OJOp4QsqdIdHyogZJwwwl2CA1RHQVKJeYLhatS2OCss=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
                          rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
        Validity
            Not Before: Nov 23 02:50:48 2024 GMT
            Not After : Nov 30 02:50:48 2024 GMT
        Subject: CN=67414308-4128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:33:5d:4c:4b:ae:42:48:de:6d:d1:34:06:
                    cc:51:e1:49:cf:83:48:b3:91:f0:d9:ce:3d:6b:8d:
                    7e:43:9a:ee:e2:2c:5b:1b:ed:fa:a8:ff:83:09:66:
                    2b:b8:3f:7f:03:e5:25:6e:73:98:7a:3c:6b:d7:46:
                    c6:f5:9a:9f:e7:c4:a4:e3:b8:78:14:03:76:2f:18:
                    bf:62:e0:ae:5d:32:73:b5:e1:a6:5e:66:a2:9b:a0:
                    64:26:b8:41:4c:da:8e:4c:c3:4d:4c:da:68:93:2b:
                    76:3f:70:e7:9e:cf:cc:50:3c:ca:19:c9:55:0e:a6:
                    e3:f7:c8:a8:2a:9b:16:0d:0f:e3:57:9d:ea:3d:db:
                    90:83:db:14:75:4c:62:3d:b9:62:4e:1c:a8:12:4c:
                    34:d0:df:66:a5:5f:c2:03:c5:2f:b7:3c:cc:b3:70:
                    63:df:65:30:11:1c:c4:40:36:d1:c3:76:13:cb:2f:
                    ae:66:91:df:a0:1c:71:c7:6b:d8:76:11:64:c5:ab:
                    4c:99:d3:33:e3:fb:6d:36:b2:06:0b:4a:d1:d0:12:
                    30:66:88:e5:f9:dd:42:4f:c3:c6:74:51:ae:74:4f:
                    95:ec:e0:a6:84:65:c3:58:e5:c6:89:43:e4:2e:bc:
                    7a:9b:e7:6a:70:77:42:3f:55:e9:d3:04:c0:bf:04:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:18:E1:6C:B8:1A:59:AC:56:D5:71:1E:09:BC:51:2C:C7:74:F1:1E
            X509v3 Authority Key Identifier:
                keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:94:54:6a:d8:ec:dc:52:07:98:bd:db:f1:e4:47:37:3c:c2:
         74:8c:5f:07:9e:62:4c:1e:8b:10:67:49:c9:74:d8:78:c1:4d:
         96:e3:6c:39:9e:ec:e0:6e:2b:86:74:75:eb:e6:99:e6:82:bd:
         43:dd:96:51:a6:13:55:96:6d:88:3a:69:db:93:a9:0e:d1:d3:
         cf:7d:27:4e:c9:f3:b5:5b:00:af:56:94:ca:04:19:5f:54:4c:
         2f:73:e7:cb:46:a1:b4:36:76:04:57:13:28:57:ae:c3:2d:07:
         88:e5:ec:a0:d8:43:d1:8f:1c:cd:12:82:36:ad:43:b7:87:83:
         19:f5:88:21:7d:eb:ea:52:03:9c:6c:6f:07:1e:0b:c0:f1:c1:
         58:7c:0e:0c:42:72:9b:fd:82:44:a4:dc:e4:b8:c6:38:57:f7:
         3d:ab:4a:c8:84:f7:19:63:70:97:6c:c8:de:37:d7:84:e7:71:
         70:09:39:02:89:39:16:a3:e0:41:0d:11:63:df:2e:20:9c:1d:
         ec:34:fc:e6:a1:83:e4:9a:8f:b4:2b:53:bd:ec:43:ee:de:0d:
         c7:0a:52:8c:97:ca:92:49:ef:45:5d:3d:ea:4f:34:74:7e:41:
         8d:92:71:05:7e:54:9c:fb:52:32:68:48:76:52:8b:55:88:d9:
         73:cc:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:36 2024 by rpki-client on console-ams.rpki-client.org