Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
File:                     VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json)
Hash identifier:          gDkLUBbJYbVEaZ8lN4lB+HF6mkbYXr7990G6WJQe0F0=
Subject key identifier:   A8:6B:B3:37:5A:17:3F:A3:C9:89:1F:65:F8:61:BF:AB:A0:0F:8A:8D
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Certificate issuer:       /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
Manifest number:          39
Signing time:             Thu 21 Nov 2024 05:38:21 +0000
Manifest this update:     Thu 21 Nov 2024 05:38:20 +0000
Manifest next update:     Thu 28 Nov 2024 05:38:20 +0000
Files and hashes:         1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: oYYLv1W+XnU7WMg7o3ys6BitN3FPTAiQmYKHf9OKiJg=)
                          2: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: 969jdHyGdAb1flnXmcu6oMyF0jGTp5cUzC4c61xE+18=)
                          3: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: CexljjC7wRSe/lloivtx612T1a6cjKsaqz6uhDTMArU=)
                          4: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: 4E2LrZlO3ISS0nbt57DW68xHKT/RNp0hNVMadZS9u+U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
                          rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
        Validity
            Not Before: Nov 21 05:38:20 2024 GMT
            Not After : Nov 28 05:38:20 2024 GMT
        Subject: CN=673ec74d-d7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:04:29:76:ca:fa:cb:ef:a5:99:14:00:b2:
                    c1:38:06:50:a2:a4:08:2e:3a:f4:e3:e2:9f:23:ff:
                    b7:bf:37:ce:9e:a2:94:76:32:1a:85:ad:be:ad:6d:
                    5a:9f:d1:02:9b:9e:4e:a9:c6:9f:cb:f1:54:e7:54:
                    55:f4:e4:31:39:1a:11:65:17:04:c9:16:b0:93:fd:
                    cd:93:30:59:e9:d5:c1:fc:81:6f:87:58:36:4a:ac:
                    08:db:d5:05:fe:54:0d:1c:52:b8:ec:7e:33:b8:0e:
                    68:59:b6:a7:36:87:31:5b:86:61:2f:63:4f:e9:05:
                    56:e4:39:a4:ed:8c:4b:d2:9c:c4:bb:c4:ae:78:dc:
                    a5:62:3d:f9:79:a5:54:9b:a4:54:40:5e:f7:3b:1c:
                    f1:75:f5:92:16:ed:cc:3a:75:6a:cc:45:dd:7d:d7:
                    03:32:3d:50:04:bd:e0:3d:a8:f0:9c:8a:0e:c5:5a:
                    52:1a:1a:19:35:f3:7f:75:2a:70:88:bd:15:d4:a9:
                    a7:65:92:06:94:65:1e:7f:53:9f:28:e5:ae:ec:fc:
                    2d:9f:f5:8d:03:15:9f:b3:95:94:dd:d8:14:23:83:
                    c1:0d:fc:d5:63:e4:aa:be:8a:c6:c7:a7:68:d7:16:
                    14:bd:f6:39:c8:fe:28:ea:cc:8b:20:48:77:f0:c5:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6B:B3:37:5A:17:3F:A3:C9:89:1F:65:F8:61:BF:AB:A0:0F:8A:8D
            X509v3 Authority Key Identifier:
                keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:04:7d:c5:8a:bf:27:18:07:16:36:7c:a1:6f:69:c9:0b:93:
         c0:da:59:1a:e3:65:fe:78:a5:93:58:58:c1:1f:d6:37:92:c6:
         04:47:06:4c:50:4a:b2:c7:78:b1:b2:1f:f7:11:86:7c:9e:dc:
         d4:44:81:76:b0:da:ed:8d:d5:80:99:21:c3:8e:97:85:88:3e:
         60:fb:02:cf:96:36:af:0f:41:43:64:a8:78:59:42:d5:10:a0:
         18:3e:7f:cf:ff:93:e2:5f:a3:42:fb:72:c6:ac:be:2d:03:be:
         2f:2b:49:f0:e9:0f:67:98:27:3e:c6:4d:6c:79:ba:ea:3c:c3:
         1d:bf:b2:21:03:60:a1:28:e4:7e:1a:28:28:1d:e8:f2:60:ac:
         78:69:ed:36:e1:18:35:af:46:18:fa:15:c8:8a:e7:29:12:88:
         7a:65:15:c6:9d:ae:3a:ab:c3:48:e7:35:0b:2e:0e:8e:8c:8c:
         23:06:a8:a2:9f:53:52:51:33:ff:d4:47:30:9a:fb:64:0a:34:
         12:e4:3d:a7:c9:85:0b:67:74:a4:e4:77:1c:18:fd:48:db:c1:
         37:2c:f3:48:5c:6a:79:8c:86:2a:2d:2e:26:c1:53:05:f4:39:
         5f:e1:7b:6d:f1:2f:89:1e:18:14:63:68:c1:f0:98:cf:f1:20:
         ea:61:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:13 2024 by rpki-client on console-fra.rpki-client.org