Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
File:                     TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json)
Hash identifier:          31s7CtlCQHeGkV3rwImu0HSWdqTt4vznU6qADbZn/Pw=
Subject key identifier:   E7:F4:9F:8E:A6:1A:0A:F6:DA:25:53:08:E6:4E:8D:B0:B0:F5:E2:0A
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Certificate issuer:       /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial:       11C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
Manifest number:          119E
Signing time:             Fri 22 Nov 2024 17:13:01 +0000
Manifest this update:     Fri 22 Nov 2024 17:13:01 +0000
Manifest next update:     Fri 29 Nov 2024 17:13:01 +0000
Files and hashes:         1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: ao9JySumVaH3YsRL12xDAx2gDJKC3f2hz2L0jiTu6x0=)
                          2: 5604A238BB1C11ECBF12EE13C4F9AE02.roa (hash: ycVOkebWkWYLc1jBcD0MeUNRQH9rZsz7aLvT5lyWGzY=)
                          3: 1DFE0A801E4211ED82CEED40C4F9AE02.roa (hash: qofRcsCAp7YanmisT0f2RJffUD+YfgKyIiAI6uWRbzY=)
                          4: 41D236B27D2D11EDAFFEDF7CC4F9AE02.roa (hash: 9gGaws8FgVlbbs1c3Jna09SH8lkjBGf6jFRMXVIFpTo=)
                          5: 54581848BB1C11ECBF12EE13C4F9AE02.roa (hash: oDCBGGViAVElW64qKmesDuljzAM+qbpQYE3AsleW23E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
                          rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4544 (0x11c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
        Validity
            Not Before: Nov 22 17:13:01 2024 GMT
            Not After : Nov 29 17:13:01 2024 GMT
        Subject: CN=6740bb9d-8a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:55:f9:de:b5:b4:a3:52:f9:7e:05:51:e0:
                    f2:09:11:0e:ec:bd:f9:3f:c7:f9:79:3d:ab:11:f0:
                    d4:b7:82:a3:dd:34:d0:9f:04:32:c6:b4:48:e2:74:
                    dc:31:32:c7:a7:08:73:7f:1d:37:47:8b:08:b8:44:
                    4a:ec:7b:3e:51:9d:32:d7:8b:9f:d4:1d:6e:04:fc:
                    c4:fa:fd:98:0e:b6:6d:22:79:34:31:47:83:a3:0c:
                    d2:b0:33:f2:da:bb:e6:10:48:b0:b8:31:5b:c3:00:
                    64:df:6b:d6:a3:8f:cf:e7:1e:ce:06:da:47:1a:b0:
                    51:0b:96:83:c9:9f:d0:4c:b5:96:7c:b7:4d:3e:d5:
                    ff:97:9e:2f:bc:63:25:91:f0:ea:35:72:fb:01:7f:
                    c8:c1:a8:0a:69:6d:41:52:40:92:53:b5:7e:d0:41:
                    75:20:43:9f:59:4d:8b:0c:20:d4:48:10:28:c2:d3:
                    17:45:2b:d9:98:f4:0e:c3:04:8d:a1:ae:55:80:b6:
                    3f:85:38:bd:e9:f5:3d:27:d0:b7:4c:f5:b9:4f:ac:
                    46:dd:da:c4:46:a3:13:46:ed:24:8a:06:64:82:da:
                    1e:2a:2b:26:2c:01:21:50:8b:ee:da:4d:76:01:fd:
                    48:57:a8:91:da:95:3b:e5:47:bd:3f:f2:06:07:de:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F4:9F:8E:A6:1A:0A:F6:DA:25:53:08:E6:4E:8D:B0:B0:F5:E2:0A
            X509v3 Authority Key Identifier:
                keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:95:f9:f1:f8:7e:cf:95:cb:6c:29:0b:00:77:3c:a8:e7:ed:
         9c:a8:a0:85:d2:8d:e6:35:bf:fe:c0:20:32:cd:7e:f5:4d:07:
         af:cd:49:09:d3:ef:f9:98:83:00:93:6c:46:37:09:ca:d7:2f:
         3e:0b:80:8e:ff:0e:f3:01:b4:d2:9b:5e:3f:f6:47:c8:42:79:
         e8:12:4f:3f:95:27:88:26:d9:16:05:d7:39:82:09:7d:79:84:
         d7:1d:15:19:d6:97:49:5e:61:0d:80:36:af:46:7a:89:9d:50:
         a2:d5:fd:57:56:d0:d1:37:61:60:91:88:75:20:1d:52:10:5d:
         67:a0:5b:01:4d:97:ac:46:4a:c9:7d:cc:9d:75:73:b0:39:0c:
         e8:c6:5c:5a:44:1b:ed:26:88:c1:4b:5e:b5:51:a3:ee:1b:2c:
         c8:69:35:c0:e5:62:f8:37:48:ad:31:d6:9c:bb:58:2e:c5:62:
         33:84:ec:28:88:b2:5b:d9:a5:11:78:a0:b6:66:58:d6:10:52:
         df:7b:f2:e9:ae:c8:ba:43:88:e7:37:24:f8:8e:e3:5b:cc:03:
         16:e9:ec:ce:f4:f2:e8:c9:73:de:0c:70:c8:6d:06:2b:5c:bf:
         ef:ff:b2:62:f5:de:69:bd:70:72:19:ef:fe:24:61:08:30:bc:
         65:22:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org