Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File:                     CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier:          RhWnncTw+onMumvklYArWJP84PLAObW2NR6uTXW6zXk=
Subject key identifier:   A3:FD:C9:23:D7:6A:A0:C2:E2:0C:10:8A:DB:48:7D:47:B7:3A:66:85
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer:       /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number:          B7
Signing time:             Thu 21 Nov 2024 04:10:29 +0000
Manifest this update:     Thu 21 Nov 2024 04:10:28 +0000
Manifest next update:     Thu 28 Nov 2024 04:10:28 +0000
Files and hashes:         1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: WYoV7d4+sdRgIEfx3S2NYUVdmR61B9t1EH57fJjMDtk=)
                          2: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: yHNxJjEQ7lP8uHwwSkl8RepGBbRZ6wynFrw+qp/rfmc=)
                          3: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: U1+jmBwoih311t8hOev92I8BHODDxL3YAh//YeHB4X0=)
                          4: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: tDHtNOgmI2opyEzqZ4u6Wnp/EPjvOiIfYhNfeTIc8Zk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
                          rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
        Validity
            Not Before: Nov 21 04:10:28 2024 GMT
            Not After : Nov 28 04:10:28 2024 GMT
        Subject: CN=673eb2b5-c3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:8a:d4:d1:ea:8a:83:81:c9:bf:48:16:04:
                    2f:ec:26:06:10:f1:6c:37:42:d6:0e:6b:78:9b:de:
                    ab:8a:3b:74:89:33:4c:ec:b9:d5:58:f7:3a:7c:26:
                    21:c1:c5:3b:92:bd:89:f8:83:93:e8:08:aa:e6:ec:
                    7e:e6:4f:42:2c:d2:fe:37:9d:2c:51:30:8a:18:e5:
                    2b:60:4a:64:87:aa:a0:49:3a:0d:3f:8f:2f:e1:63:
                    15:b2:67:42:98:84:fb:6b:20:a5:ce:0d:ba:88:ff:
                    1b:15:05:18:fa:70:21:ea:13:87:c9:d9:7b:b9:1f:
                    33:78:81:ff:08:05:48:3c:2a:df:62:cf:11:b0:67:
                    d9:b7:97:cf:de:08:fc:3d:f8:12:c3:4c:62:2c:5b:
                    b4:c8:85:d9:1d:df:e2:73:51:b1:2d:45:ec:9e:dc:
                    b5:49:cc:66:77:d1:43:c1:64:03:1b:29:58:63:f1:
                    04:3e:fe:68:7a:87:46:62:5f:03:f9:4c:bc:a9:70:
                    e0:03:9f:92:23:e1:93:5f:eb:2f:01:ca:31:e9:ab:
                    1d:0e:ca:4b:63:59:17:4b:b5:b9:a7:7c:9b:f1:6e:
                    f7:25:cb:c1:77:23:f1:1e:17:9e:26:a9:c1:61:e4:
                    25:3e:5d:63:08:fc:4d:18:d0:13:3c:23:86:34:e3:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FD:C9:23:D7:6A:A0:C2:E2:0C:10:8A:DB:48:7D:47:B7:3A:66:85
            X509v3 Authority Key Identifier:
                keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6a:f1:fe:5b:b7:0d:2b:aa:73:78:fd:d2:5c:cd:bf:25:4b:
         f8:e2:9b:bb:de:ac:4a:7c:fc:04:b9:d0:2d:2b:35:57:da:5d:
         18:72:37:bd:82:d5:20:73:18:7d:34:57:b6:2c:b8:e6:59:dd:
         d1:b4:f5:4c:c6:f1:b3:23:ca:45:b2:9a:28:86:37:2b:d5:f0:
         1e:a3:42:7f:50:30:dc:6e:ef:71:ac:37:d2:a8:bc:c9:f9:2a:
         58:d8:56:33:3e:0a:c0:17:d3:d8:1e:dd:ef:98:0e:60:8c:23:
         ab:b5:dc:36:e4:b9:29:0b:fa:96:04:c6:62:d8:03:71:60:fc:
         a2:c8:e4:b3:82:e1:14:d9:9b:ae:a9:c7:82:88:07:08:dc:84:
         c3:c9:8f:de:3b:ee:03:41:82:7d:b6:d1:cc:5a:85:9e:f9:80:
         73:2a:5b:95:6c:f6:85:f4:d1:38:3b:54:c8:28:b7:89:46:a0:
         5b:1d:5d:42:79:47:5f:e2:f2:d8:64:ff:0b:0c:86:62:17:79:
         59:44:63:39:2d:3c:33:16:8f:4e:a1:b7:68:ac:b7:1e:2b:88:
         52:63:be:1e:1b:66:28:76:f7:85:43:1a:09:12:4d:5b:20:22:
         d0:6b:3b:e4:f0:b1:cd:5d:40:92:cd:11:6c:65:fa:4c:8e:d0:
         c5:85:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:54 2024 by rpki-client on console-fra.rpki-client.org