Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
File:                     Fp97ebHLC9YNnChOysqKz1dZgFE.mft (raw, json)
Hash identifier:          Y9LcxWLWsDK+u7tcgLtP6K8gKLLk2vZCbwYTWk3cAgc=
Subject key identifier:   11:92:E6:FC:57:9F:BB:55:74:E6:A1:9F:2A:B5:C7:94:39:9C:E0:8B
Authority key identifier: 16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51
Certificate issuer:       /CN=A9137627/serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
Manifest number:          05
Signing time:             Sat 23 Nov 2024 06:10:50 +0000
Manifest this update:     Sat 23 Nov 2024 06:10:49 +0000
Manifest next update:     Sat 30 Nov 2024 06:10:49 +0000
Files and hashes:         1: Fp97ebHLC9YNnChOysqKz1dZgFE.crl (hash: BAxBonN8zOakUnmKN3Vf/5o0tGOzUJkZ7cDzYdBvstI=)
                          2: 3C249D62A89211EF881C732EC4F9AE02.roa (hash: 16sFKWaBVI982QZ/6/KmLXMiB3r2iqeJrJq3Bgjp0jI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl
                          rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137627/serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051
        Validity
            Not Before: Nov 23 06:10:49 2024 GMT
            Not After : Nov 30 06:10:49 2024 GMT
        Subject: CN=674171ea-87e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:78:96:f0:a1:f5:44:66:7d:84:49:b3:f1:
                    92:75:60:ba:ae:13:29:74:af:9d:59:3b:0b:4f:f3:
                    08:86:10:03:52:e6:f7:08:4e:7b:df:18:c3:5c:23:
                    86:f9:6b:c2:97:6b:bf:4c:55:25:1b:a1:ca:c0:95:
                    bb:4c:3f:ef:87:33:0e:6b:b3:7e:55:36:e2:bd:70:
                    5a:93:1a:ff:5f:0e:54:93:6d:ca:e8:67:0b:90:58:
                    e4:62:75:27:43:73:6a:d4:f1:5b:0a:dd:c1:cb:99:
                    51:3a:c8:81:95:c5:92:69:3b:91:3c:e1:92:67:1e:
                    e2:9c:c7:a8:d4:39:57:41:be:8a:a4:43:06:b8:ae:
                    0b:01:e8:af:27:bc:1a:c4:96:31:9e:bd:74:55:74:
                    65:24:d1:3b:16:59:ca:e2:9c:c3:6a:67:d0:d8:f7:
                    e3:82:50:b6:77:2f:4d:2e:01:9b:09:cc:88:ed:36:
                    f4:d2:5f:25:df:a9:ad:4c:ff:5c:10:b2:ad:84:72:
                    60:7a:1d:00:59:42:60:07:af:1f:a2:c2:59:33:12:
                    cb:a5:f4:9e:6c:56:bb:53:bc:f7:d9:40:1d:ae:b1:
                    38:ed:cb:15:2a:37:47:77:a4:6f:a4:8b:ac:78:4c:
                    b4:d9:8f:24:e0:92:e4:c5:d5:d2:5a:cc:e8:7e:52:
                    2b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:92:E6:FC:57:9F:BB:55:74:E6:A1:9F:2A:B5:C7:94:39:9C:E0:8B
            X509v3 Authority Key Identifier:
                keyid:16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:9e:0a:3d:a5:25:6e:95:e9:db:76:d9:3f:ba:03:fa:38:
         c0:f4:57:13:ff:c3:43:5c:b8:6e:c2:2a:ca:17:03:d4:80:91:
         27:76:c0:18:2b:98:59:5f:0b:58:17:3c:14:f9:f0:0e:b9:61:
         d0:ce:88:c9:d2:3a:b8:f9:4e:81:21:26:9f:49:17:2a:57:22:
         2e:1c:53:e4:96:60:26:16:5c:3e:c3:60:84:60:7e:8a:cf:01:
         73:b4:56:1c:54:00:96:93:c0:2f:ff:02:fc:8e:b3:ca:37:da:
         a7:72:69:7e:43:51:16:48:0a:3f:39:19:52:77:89:c8:8c:4d:
         c0:aa:d9:21:93:06:89:d6:4e:07:38:02:7d:94:8e:a5:fc:c2:
         7c:ef:cf:60:fb:57:ae:0d:dc:06:87:c2:fe:49:d7:ab:b5:32:
         bc:91:69:a7:38:34:6e:16:3a:4d:31:b8:1a:7d:a5:50:b2:26:
         db:11:8c:b9:4a:84:5f:10:90:82:b2:00:01:50:41:91:8c:27:
         b9:8b:d2:9f:c0:17:7c:38:6b:54:93:e2:58:10:6a:58:13:41:
         81:c2:ab:39:17:9b:f6:d3:8e:cc:ac:b2:0e:02:af:5d:88:b3:
         3c:06:20:90:a5:7f:53:c0:85:17:f8:14:03:ef:3b:c5:32:94:
         e5:43:ac:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org