Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
File:                     EYuDYeRNUFJcthNQslJrWfbeLc0.mft (raw, json)
Hash identifier:          x8GEHxNXQ+n7ckq9Y4b5H6oyrJjYuPC/j8n6D9G9iHM=
Subject key identifier:   EB:48:12:B3:D5:8E:99:E8:02:87:61:25:FA:19:74:63:04:78:0C:CD
Authority key identifier: 11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD
Certificate issuer:       /CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
Manifest number:          0107
Signing time:             Sat 23 Nov 2024 03:11:34 +0000
Manifest this update:     Sat 23 Nov 2024 03:11:33 +0000
Manifest next update:     Sat 30 Nov 2024 03:11:33 +0000
Files and hashes:         1: EYuDYeRNUFJcthNQslJrWfbeLc0.crl (hash: cneFAZ4AN5Hi3DE2rt6jOZ/9VaUwd8966woHlo26hiw=)
                          2: 38D5D8D0197111EE86688756C4F9AE02.roa (hash: kzi0KQ9ZEMCUP2vXFdh+HmBpVIrIEaO/65LeWyh5tmM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl
                          rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
        Validity
            Not Before: Nov 23 03:11:33 2024 GMT
            Not After : Nov 30 03:11:33 2024 GMT
        Subject: CN=674147e5-0a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:bf:fc:87:9a:50:24:af:45:0f:3f:5c:64:
                    b9:d7:0c:c3:ec:89:95:2e:ac:51:14:64:c0:3c:89:
                    29:ec:db:44:53:dd:76:42:43:5e:ab:e2:2c:13:c3:
                    38:99:96:a3:df:f5:03:a1:3a:a4:0c:b0:08:67:32:
                    19:63:9d:41:12:de:36:c7:b1:d7:6d:d1:82:06:84:
                    a7:b2:b8:a5:47:8c:43:5f:3f:b8:5c:60:dc:a9:c6:
                    51:e7:7a:fa:8f:75:0b:0a:0a:8e:22:56:ab:d5:ea:
                    cb:07:78:68:37:1c:30:9e:26:b4:52:77:5a:a2:94:
                    70:cf:38:a5:36:79:63:c7:f0:bb:36:67:bc:d4:9f:
                    af:2f:65:6a:c3:e3:2b:8e:a0:c4:17:59:da:7f:ab:
                    43:c9:eb:06:12:82:b8:c8:c5:a2:19:55:89:c9:04:
                    9e:53:78:61:73:8f:e3:36:94:97:cd:9f:45:02:6c:
                    95:a1:6b:d0:a4:d4:15:06:d8:62:56:69:77:69:57:
                    ea:51:58:33:40:1e:0e:e3:30:8c:22:11:7e:1c:f7:
                    5d:4d:26:1b:31:1d:a3:fd:d7:d7:c4:f5:c8:fe:00:
                    43:a0:5a:61:24:fe:34:6a:83:56:7a:4c:ad:12:a3:
                    98:96:85:71:31:6a:6f:e3:d5:2b:25:fe:40:98:69:
                    9e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:48:12:B3:D5:8E:99:E8:02:87:61:25:FA:19:74:63:04:78:0C:CD
            X509v3 Authority Key Identifier:
                keyid:11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a3:81:18:ff:4b:5f:36:e3:95:d3:e4:06:56:c8:60:8e:f7:
         8e:db:5a:29:20:bb:a3:ff:a4:50:25:fa:6f:ef:ea:46:e5:7e:
         4c:59:cd:e9:a0:bc:1f:27:e9:ed:a7:57:e3:99:57:fc:af:4c:
         aa:56:fb:98:15:2d:5a:76:f6:d5:9e:69:ed:ec:78:a0:3d:ef:
         ee:5b:f9:fe:e3:40:2f:66:8a:fe:92:b6:a1:87:62:aa:69:94:
         73:14:0b:e9:27:55:19:43:6c:d1:aa:7f:88:ae:90:ac:7c:8d:
         22:3b:c7:d7:04:fa:57:11:3c:76:3f:a7:af:20:6d:8f:79:c9:
         24:f5:b3:b6:57:ff:02:df:90:b3:94:a9:23:5d:2c:c6:7f:74:
         3c:89:ad:6d:4d:11:ba:04:bd:13:94:87:3c:98:8c:13:4f:70:
         98:b9:b2:b9:30:92:ff:bd:a0:a5:9b:2e:91:8e:80:78:f0:09:
         5b:e1:81:f1:4c:89:c7:e7:7d:d9:b5:39:ee:4a:3e:95:fe:42:
         71:86:cb:7c:85:a7:27:6b:b5:30:2e:71:db:8a:db:ab:6c:77:
         ba:6d:54:db:f8:13:d8:97:2c:0d:88:da:92:4e:f6:9a:72:8c:
         fe:78:48:c4:40:4b:c2:ee:09:35:eb:c6:c1:bb:e7:1f:10:02:
         31:20:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:04 2024 by rpki-client on console-ams.rpki-client.org