Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
File:                     KPut8cC1pCW10h189FxAyqRO3OE.mft (raw, json)
Hash identifier:          uL0r5ttnfwfxWkeQugTXWIhiInK/LYs6mMSc+dO/9NM=
Subject key identifier:   17:A8:7B:A0:01:EE:D2:1A:79:F1:BF:AC:28:FB:C9:A0:89:3E:D9:BB
Authority key identifier: 28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1
Certificate issuer:       /CN=A9136AF7/serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1
Certificate serial:       0C52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
Manifest number:          0C41
Signing time:             Fri 22 Nov 2024 18:10:44 +0000
Manifest this update:     Fri 22 Nov 2024 18:10:44 +0000
Manifest next update:     Fri 29 Nov 2024 18:10:44 +0000
Files and hashes:         1: KPut8cC1pCW10h189FxAyqRO3OE.crl (hash: yGRnFhJEr2S7LUV3lXt9Cqg1LTgrzg1ZySTFfdq/ShA=)
                          2: E8803B90F27411E99E67A342C4F9AE02.roa (hash: j/tViZ0nSoCHoTJaF9BKW+gM3NYgjTtuFHxNByXlgnk=)
                          3: E73FF93CF27411E99E67A342C4F9AE02.roa (hash: waKC3XDUVxJ9NfsFSQr2/Kcb9rARuPIn5lSsXa8DYwE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.crl
                          rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3154 (0xc52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136AF7/serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1
        Validity
            Not Before: Nov 22 18:10:44 2024 GMT
            Not After : Nov 29 18:10:44 2024 GMT
        Subject: CN=6740c924-355a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:29:ae:f9:17:3c:67:4e:dc:7a:2c:dd:28:
                    ce:80:78:73:a7:a3:ed:0e:36:ba:ae:a0:fb:32:4c:
                    0f:b9:52:91:74:f1:8d:d5:01:86:47:ea:05:59:96:
                    7f:88:c5:46:cf:c9:ff:76:b7:b4:42:a2:41:62:21:
                    5f:f2:d5:18:a6:8b:9f:bc:8f:40:d6:d4:89:f7:4a:
                    9b:79:a2:37:c4:cd:5e:2c:c1:83:eb:14:6f:55:61:
                    e9:a8:37:7c:25:a0:6a:1f:07:6e:2e:8f:2d:ef:8c:
                    a8:dc:8a:44:76:6f:38:f9:32:df:90:3d:8e:be:99:
                    c0:bf:f3:59:50:0d:17:b2:4c:24:71:4c:b4:2a:e3:
                    bb:55:96:f6:97:a0:fc:3c:bb:e2:62:50:68:d1:d2:
                    ce:3b:a1:f6:9c:d4:29:45:ee:39:cc:dd:75:66:b6:
                    59:2d:cf:cd:b2:af:2d:71:8e:b6:b7:57:13:78:49:
                    2e:2e:d8:80:0a:71:09:5c:be:cf:f5:05:2f:f0:8c:
                    6c:83:cf:25:02:6b:34:fd:d9:4c:56:ee:a0:57:3e:
                    4c:0f:16:83:de:fd:f9:87:94:65:33:a8:d9:ce:d9:
                    7c:6e:7d:42:3c:dd:de:6b:fc:37:fa:b7:c3:06:0e:
                    36:ca:2f:32:2a:9d:09:fb:48:c0:8a:30:85:f0:9a:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A8:7B:A0:01:EE:D2:1A:79:F1:BF:AC:28:FB:C9:A0:89:3E:D9:BB
            X509v3 Authority Key Identifier:
                keyid:28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6f:36:c9:56:01:ae:c4:fe:eb:c6:87:65:f1:05:4f:4b:f7:
         64:66:8e:8a:72:85:07:bb:28:da:fa:40:23:4e:9e:4f:ab:a8:
         8d:03:05:67:42:ba:ba:41:17:fa:43:48:1a:22:ff:41:5e:9d:
         d1:8f:27:25:d5:a9:b2:b1:ff:f8:e2:d2:71:38:ae:f8:e9:44:
         fc:af:9c:ed:e5:e0:8c:88:15:f2:37:fc:b5:c8:c2:b6:10:be:
         1e:af:c2:c6:86:e3:1d:4d:52:a6:de:b6:8c:eb:e2:28:d2:f2:
         81:2b:22:4c:a6:4b:9f:79:24:c4:d2:01:f1:30:0b:e4:bd:7c:
         3f:2c:68:27:4b:b0:af:69:43:e1:3c:a8:77:c5:60:6a:ed:15:
         46:53:ae:49:62:30:40:29:12:13:80:6f:69:24:47:d5:0a:1a:
         cc:7e:a0:f9:17:62:c4:3c:f3:d8:57:49:fb:27:29:e2:d9:e6:
         01:71:14:8d:a0:66:18:5f:6f:74:0e:87:1f:cb:66:af:58:ee:
         da:64:43:34:21:10:96:40:4e:72:04:bb:00:4b:68:6d:38:71:
         bc:ac:f5:67:d5:18:5f:d6:7f:15:7f:22:07:7f:ca:2c:ab:ce:
         cb:d9:9b:e5:4d:1a:89:41:d8:d0:e1:fa:f5:14:19:f6:5b:27:
         08:72:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org