Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
File:                     w373yMNE0xhYKbwsuZbIlKqoDvM.mft (raw, json)
Hash identifier:          YyAwW19fSmGL48AVc3H8nUVRbr6rAwTwScI2p+e9KVY=
Subject key identifier:   AA:50:F7:5E:9A:DA:ED:91:1E:3C:13:22:5E:3D:FC:F0:70:29:60:37
Authority key identifier: C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3
Certificate issuer:       /CN=A912756D/serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
Manifest number:          2A
Signing time:             Thu 21 Nov 2024 05:47:52 +0000
Manifest this update:     Thu 21 Nov 2024 05:47:52 +0000
Manifest next update:     Thu 28 Nov 2024 05:47:52 +0000
Files and hashes:         1: w373yMNE0xhYKbwsuZbIlKqoDvM.crl (hash: tKGDe12wH0wDvOXr2N0e+VYzzzD8E2dgL1+Qxi77NEQ=)
                          2: 95CB7E0E6B5611EFA00DA92FC4F9AE02.roa (hash: duamzviBQYqtExZmA9rAc3mAR9sTDl7eoEu87aRFjpE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.crl
                          rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912756D/serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3
        Validity
            Not Before: Nov 21 05:47:52 2024 GMT
            Not After : Nov 28 05:47:52 2024 GMT
        Subject: CN=673ec988-9965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:73:42:02:8f:4c:ba:27:6b:8c:38:38:ef:
                    84:f9:44:6a:2a:82:e0:7f:37:c0:79:f8:9e:25:8f:
                    24:d9:79:74:0f:d8:3e:1e:37:81:85:3c:ef:5f:c3:
                    cb:1a:8a:bc:99:71:7b:9c:74:8a:a3:0b:52:3a:cc:
                    ac:fa:98:8a:de:03:ae:a4:67:0e:72:f2:6e:9b:c6:
                    e4:46:f1:b9:88:02:3c:8c:fb:ab:1c:6d:e2:8d:7f:
                    04:30:4c:5a:8f:ea:9e:db:a2:d8:98:b3:55:27:ac:
                    0b:d3:24:ee:d9:b7:2d:b1:e8:b3:ea:7c:aa:1a:73:
                    de:63:d8:e1:72:7b:b1:9b:7e:26:25:40:a2:e3:09:
                    0d:e9:11:0a:b4:8c:df:27:f4:32:d0:dd:e9:67:e0:
                    90:92:49:09:5e:ae:d7:90:8e:26:20:21:6b:8d:09:
                    9a:6e:2d:09:10:e5:a7:a1:96:34:af:8f:d9:da:7b:
                    18:67:b7:69:fd:8f:9c:6f:b6:a5:f6:6d:ff:0d:c7:
                    de:f2:55:51:fa:42:33:9f:26:07:8e:9b:af:c5:b3:
                    e7:a3:85:d7:49:b3:55:05:00:50:21:3d:8b:8a:00:
                    3b:88:e2:23:60:98:e4:9e:be:19:9d:58:0e:74:32:
                    56:6b:28:db:9f:bd:63:71:7e:ea:e8:15:d3:93:ab:
                    64:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:50:F7:5E:9A:DA:ED:91:1E:3C:13:22:5E:3D:FC:F0:70:29:60:37
            X509v3 Authority Key Identifier:
                keyid:C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e2:3b:bf:6c:fd:37:43:7a:17:77:48:44:03:40:f7:20:40:
         c5:91:7c:5b:1e:65:11:c1:d1:ed:99:0b:f4:09:7e:3e:6b:50:
         a3:d5:38:38:b4:76:12:08:d4:74:f1:ae:5c:35:15:c1:c1:75:
         d9:b8:49:af:98:bf:e9:1b:f7:60:94:e5:0c:21:ae:d7:30:97:
         44:2e:ed:b2:1b:50:83:f0:94:e8:0f:d5:cd:9a:90:b0:9d:5f:
         7e:9f:3e:96:46:a3:78:ad:68:d5:80:1a:80:1f:ce:02:9f:5d:
         ce:d3:b0:37:b6:17:28:00:03:cc:30:0d:e0:18:c9:cf:3b:95:
         f8:60:0c:c3:a0:15:51:11:0c:f1:53:ad:53:d9:dd:5f:1b:fe:
         1d:f2:be:7a:eb:6d:cf:e9:33:74:d4:c0:90:c6:b1:62:31:62:
         36:dd:c2:b7:85:a1:d6:c5:42:87:49:ac:dd:e8:2c:66:f1:58:
         cd:65:f5:c2:50:8a:cc:db:5a:cb:61:ab:5e:7e:dd:15:0f:48:
         4e:fc:6b:33:54:40:13:71:3f:ab:ef:5f:e1:3f:20:f6:61:19:
         bf:0b:cc:fc:e5:a6:86:e5:d7:89:84:c7:96:ca:45:07:f6:46:
         ad:ce:66:aa:2e:05:19:99:8d:59:b6:c7:43:c6:3e:9a:0a:08:
         e8:64:71:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:00 2024 by rpki-client on console-ams.rpki-client.org