Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
File:                     FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json)
Hash identifier:          kIDCuezTBUouf7brlEcQbA0o4BmaMoado/YZpXgsUNM=
Subject key identifier:   70:3F:97:93:18:9F:DA:D1:56:A6:1D:47:92:28:19:C6:B7:36:35:9D
Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
Certificate issuer:       /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Certificate serial:       0A65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
Manifest number:          0A53
Signing time:             Wed 20 Nov 2024 19:26:05 +0000
Manifest this update:     Wed 20 Nov 2024 19:26:04 +0000
Manifest next update:     Wed 27 Nov 2024 19:26:04 +0000
Files and hashes:         1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: s5rUMJEkGxxzBRXQ4Uhxqrq7iFc+voCIHs4Ed2aI7zo=)
                          2: 13321D24572211EA88CE445FC4F9AE02.roa (hash: xXSQwBPCYruuGyQsKTjHM9n/RD09yi8k8z8wgJzm9aU=)
                          3: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: ZAAiXs8Yo5BnQ7gh48TENV41rzsIW/WMFRgJN6n/qck=)
                          4: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: X82qAyT8/61wVP2kDNOcBKWAMfutmgdSPtnosWaKfos=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
                          rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2661 (0xa65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
        Validity
            Not Before: Nov 20 19:26:04 2024 GMT
            Not After : Nov 27 19:26:04 2024 GMT
        Subject: CN=673e37cd-febd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:aa:67:f6:f0:ed:06:83:63:3b:d1:c9:5f:90:
                    97:74:d8:8b:99:8a:29:f8:74:14:ae:7e:bb:03:f7:
                    cc:67:a2:0f:b3:06:e2:04:78:77:82:09:75:d5:c6:
                    b0:78:2d:a2:9b:fd:fa:05:10:b5:f8:09:95:50:99:
                    64:3d:fc:06:d5:8b:ee:c3:2b:9b:75:41:01:46:2d:
                    aa:c5:ac:76:58:20:c2:73:c2:83:1c:75:88:ff:7c:
                    9f:5b:16:e2:b8:62:a0:82:81:7b:4c:b7:60:4f:4b:
                    86:91:51:31:64:47:a5:93:7b:71:86:da:f3:69:5d:
                    07:40:93:bb:ac:da:f4:2d:ad:96:04:2d:4d:45:96:
                    f0:76:2c:46:f9:b7:1c:6d:e1:46:d0:87:36:b1:51:
                    1d:a1:96:6b:8b:ec:1b:15:e4:b9:74:07:85:3b:73:
                    9c:15:c9:6f:2a:66:b7:53:c2:47:09:50:7f:de:02:
                    4d:d3:1e:83:28:ff:6f:ea:9d:18:6f:22:72:a8:1f:
                    df:5b:cc:be:c7:8e:56:92:6a:f6:12:53:43:b1:ef:
                    d9:d3:c7:0e:26:08:39:ea:fd:97:3c:59:21:be:73:
                    03:ab:4e:a1:91:07:28:71:b6:43:8e:60:72:03:f8:
                    0e:5c:52:ee:e7:08:63:40:5a:82:23:93:98:aa:95:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3F:97:93:18:9F:DA:D1:56:A6:1D:47:92:28:19:C6:B7:36:35:9D
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:91:4d:7d:d3:07:06:a5:54:3a:0a:32:f3:bf:3a:b3:26:56:
         2a:a9:4a:9c:64:62:57:cd:dd:78:76:08:39:d6:6d:bd:7e:70:
         45:8f:78:4b:02:cf:68:ca:7e:af:39:0e:84:08:17:a1:dd:50:
         7c:e7:58:96:b1:a9:de:06:d4:8d:5b:68:05:77:27:34:0a:3c:
         e2:14:ec:1a:e0:e8:7e:79:f3:4b:a8:ed:77:ed:8e:63:f7:76:
         29:c3:ee:14:f2:c8:02:09:8a:80:37:3e:bc:c3:f0:7b:d9:bf:
         6a:13:ac:56:89:96:3f:68:ba:3b:17:dd:ce:02:53:5e:d6:d9:
         10:77:82:18:41:4a:90:64:6e:ab:94:46:c9:9e:b9:91:e0:06:
         0c:4f:c2:01:a2:a1:01:ee:ea:e8:12:e0:e3:2b:5d:e4:1c:b7:
         3b:60:51:54:3a:7f:79:b8:df:d4:ef:cc:b5:7a:8f:1c:f7:97:
         ff:c4:ef:08:f2:71:3d:02:be:b3:fe:52:ad:bf:77:1d:21:bd:
         59:5e:a4:c6:97:1e:64:01:b2:fb:4e:a7:a0:f3:67:27:82:34:
         7f:f5:62:83:0a:92:b6:45:ed:87:2d:21:fc:91:31:32:96:ea:
         a2:25:3e:32:d2:98:d3:36:96:b1:55:51:dc:25:bb:27:82:2c:
         c3:ce:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org