Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
File:                     0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft (raw, json)
Hash identifier:          2D694YrHaJ/YYEVDgfrzZr/GKP9iNBeS+Lvn4ReHGwM=
Subject key identifier:   53:F1:42:5D:D6:F8:9B:0F:0D:6D:CC:39:0F:B5:F7:5B:96:80:96:E4
Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC
Certificate issuer:       /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
Certificate serial:       06C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
Manifest number:          06BE
Signing time:             Fri 22 Nov 2024 21:43:28 +0000
Manifest this update:     Fri 22 Nov 2024 21:43:27 +0000
Manifest next update:     Fri 29 Nov 2024 21:43:27 +0000
Files and hashes:         1: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl (hash: 6CHMyzEXcuY4ey5zb0GayxDk6Oz6r0dzOmZSHjvEP6U=)
                          2: 7AD47B2234EE11EE927E9F6AC4F9AE02.roa (hash: QChP7wZDX3OK2X+vnot3Rv1St2Y6Cc+E+ff1NZZ5nZo=)
                          3: 1D4A72B2350811EE96CD9F16C4F9AE02.roa (hash: BDH8SKiJ7MQ/EI011YGzmBhbAD++HA//ZDEjoMjomV4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl
                          rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
        Validity
            Not Before: Nov 22 21:43:27 2024 GMT
            Not After : Nov 29 21:43:27 2024 GMT
        Subject: CN=6740faff-45ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:48:fd:de:fc:a0:0a:bb:b7:5d:c7:a6:1e:c6:
                    1f:4a:9d:39:1c:a4:12:4c:c4:fd:8e:6e:bc:56:9e:
                    fd:8d:db:2c:15:4b:f2:ea:4e:b6:90:f2:08:b0:fc:
                    66:64:2e:55:77:06:09:a4:9f:5c:a0:ba:36:67:7f:
                    cb:23:bc:73:58:e7:d4:fb:dd:ac:db:87:e2:e8:a3:
                    9a:ca:c4:0d:68:eb:a6:c0:10:95:ab:5a:8a:23:7e:
                    7b:3f:2b:ce:d4:f8:73:5c:73:63:3b:47:27:e7:7b:
                    88:83:51:a5:31:e1:4f:c4:91:c0:0a:a2:05:e0:a2:
                    30:94:8c:f8:d5:80:ef:49:8a:84:0f:58:f1:e8:1f:
                    8c:88:00:9f:45:52:1b:6f:02:da:bb:d9:69:ea:8b:
                    60:f6:6f:55:38:11:45:f9:82:09:ec:ca:76:a3:08:
                    9d:9a:98:cb:83:7c:87:f1:8f:67:31:e2:21:c9:aa:
                    7d:97:c5:e7:cf:a9:70:94:20:0d:ae:de:2b:60:d7:
                    4c:9b:ac:23:cb:75:22:e8:ca:7a:42:f0:9b:a9:ac:
                    f0:fe:df:4c:c2:44:f3:20:5b:87:0e:a2:63:bd:8b:
                    71:d4:e4:96:0f:f3:34:95:d9:bf:c0:27:77:c9:5c:
                    9a:a2:8a:e5:c5:0b:1c:66:10:06:f7:48:89:47:aa:
                    94:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F1:42:5D:D6:F8:9B:0F:0D:6D:CC:39:0F:B5:F7:5B:96:80:96:E4
            X509v3 Authority Key Identifier:
                keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:36:96:e3:0e:bb:42:7a:9e:6a:f2:43:58:dc:3e:78:86:78:
         a9:e6:13:71:81:6d:5e:e5:51:9c:3a:b5:4a:14:ed:b7:62:89:
         7a:06:e9:12:1a:7c:98:7f:16:6c:e7:b4:25:40:71:0c:a4:c2:
         a3:59:f6:c7:71:e7:00:cf:b7:ac:05:cc:86:37:c7:73:7e:64:
         18:20:ae:26:df:a0:67:5d:3b:82:22:f1:93:06:b3:18:99:69:
         69:27:4a:db:87:de:04:cf:f9:f5:bb:2f:f9:d5:82:64:cf:ff:
         b0:d7:0d:06:78:8b:ff:af:a3:10:97:96:95:f4:70:c0:d7:a5:
         92:01:95:3f:cd:66:25:e4:0f:2f:81:70:48:4a:62:95:19:0a:
         47:5a:4a:88:5d:f5:f2:b9:72:13:2f:e8:00:3f:63:2e:88:69:
         5f:26:62:29:3e:31:cd:63:f3:ab:20:ba:dc:3d:61:ee:79:2d:
         38:63:e8:ea:07:a6:ae:94:42:3c:e2:3f:c9:34:82:dc:22:9c:
         6d:0f:c0:fb:fc:72:b9:e9:b6:e6:e3:cf:91:3d:61:c9:52:1e:
         2a:db:ca:a2:9f:ae:cc:ed:bd:ab:82:02:90:86:56:fd:97:17:
         e1:03:c0:29:af:3a:e4:9a:61:2b:16:5e:8f:ee:56:b2:da:e6:
         ae:0d:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org