Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
File:                     ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json)
Hash identifier:          pRF+4QQxUxM01JNY466S8xVGzGhM02zJKY5zRPIqNtc=
Subject key identifier:   D4:CB:9D:31:94:02:FE:6E:51:A2:90:BF:25:AC:4A:0D:35:64:5C:63
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Certificate issuer:       /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
Manifest number:          0237
Signing time:             Thu 21 Nov 2024 01:25:20 +0000
Manifest this update:     Thu 21 Nov 2024 01:25:20 +0000
Manifest next update:     Thu 28 Nov 2024 01:25:20 +0000
Files and hashes:         1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: rxJjcI+4Q0YQrNWKtgrY4THbdXJ/ftm9mgJ+hKNYq88=)
                          2: 5BF89A782D5711EFAE93E757C4F9AE02.roa (hash: dSi1NwW5aublnpqHIZV7oD4mq6Mi82xJNfqumQwyVkQ=)
                          3: 5B129B682D5711EFAE93E757C4F9AE02.roa (hash: 1u53jzsW9gwZ1e+NtNnhWTml83rb08AOtybYYad5GN0=)
                          4: 80C1D8C25A1311EF9C290A0FC4F9AE02.roa (hash: YNHU5lYg+9a3NTugfNq/GHOOta7DEvwWWMRZFSxilZE=)
                          5: 5F82DFE431D711EFB80F3F45C4F9AE02.roa (hash: CCZd9BDvv1EdFMJxlcSks5CgyUeUuqkMC0ecI3coMJg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
                          rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
        Validity
            Not Before: Nov 21 01:25:20 2024 GMT
            Not After : Nov 28 01:25:20 2024 GMT
        Subject: CN=673e8c00-f5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f0:64:a9:bf:97:c9:83:aa:b6:fe:a7:94:11:
                    d3:8b:41:fb:0c:b6:39:d1:d2:39:2e:77:26:26:8f:
                    e0:ca:c7:69:cb:2d:73:f9:ad:1a:9f:0a:8a:67:56:
                    49:9b:79:55:08:6a:a4:29:9d:4f:61:6c:87:36:36:
                    ed:ad:e9:a9:f5:66:f4:5f:49:bf:7a:69:ca:22:35:
                    93:95:34:8b:e6:b7:99:29:52:ac:10:51:df:74:70:
                    1e:1a:16:42:cf:fa:e1:e7:b5:3b:c2:a8:06:e3:0d:
                    ae:39:0c:7d:ce:2a:82:7b:e4:2d:6b:2c:ad:bf:bb:
                    50:97:06:95:33:6d:05:d6:ae:32:cf:a2:fd:27:d5:
                    be:b9:48:11:b7:8b:e2:15:9f:ad:7e:ee:17:f6:17:
                    cd:95:ed:57:9d:8b:c7:91:1c:d6:07:a2:de:16:05:
                    88:32:42:ef:93:b3:f8:2b:36:c6:2e:ca:80:57:43:
                    15:b7:b6:05:2f:ee:72:1f:0e:30:fb:97:94:c5:c0:
                    90:af:cb:c2:b9:d5:01:c2:bc:1b:e9:5c:3d:36:12:
                    59:4e:a2:9d:11:b3:66:49:aa:2a:bc:ef:88:27:03:
                    4f:0c:21:00:c5:7d:42:ab:4c:62:23:06:19:7c:08:
                    1d:e2:ca:97:73:a1:47:89:c7:f0:87:d8:65:09:e9:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CB:9D:31:94:02:FE:6E:51:A2:90:BF:25:AC:4A:0D:35:64:5C:63
            X509v3 Authority Key Identifier:
                keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a7:54:e8:3b:5e:04:d1:7e:4c:31:73:e8:2d:47:12:5c:0e:
         86:0a:a3:7e:1c:cf:85:c0:e2:1d:9c:f5:5a:5d:a6:3f:9c:4d:
         cc:7c:57:e8:74:d0:9e:f6:4b:5b:5d:b6:5b:2b:23:9b:2f:e1:
         ee:e8:a4:7a:92:56:86:36:cc:76:ee:3a:86:8e:68:10:fb:e2:
         f4:7b:c5:15:6b:86:86:87:45:f0:f8:34:e6:55:9d:bb:1d:02:
         70:1c:9a:b4:fc:42:e0:49:5b:a9:7f:1b:69:a2:99:17:c9:47:
         c9:9c:90:0c:e3:ff:ff:33:67:37:9f:d9:a9:24:32:0e:b5:48:
         06:3e:65:d2:7b:a0:ae:68:17:64:e5:c3:97:29:54:bc:d3:37:
         e1:58:f0:bf:03:55:f4:16:66:e0:18:3e:48:f1:02:fd:6e:c5:
         05:78:79:4e:99:8a:c9:c8:88:2c:66:f2:11:2e:cd:b4:b3:38:
         f9:bf:40:0c:09:d8:dd:fe:c2:d8:f4:7b:11:b2:35:44:08:ad:
         a5:9c:e1:94:4e:43:bf:97:14:92:23:04:b4:83:e0:de:01:97:
         07:54:d3:4c:50:96:a8:bf:dc:d1:b4:52:b1:d4:fc:b6:b2:1e:
         13:25:f7:6c:15:9d:32:29:43:f5:a7:12:fa:83:ff:d2:a7:27:
         5e:24:1f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:35 2024 by rpki-client on console-ams.rpki-client.org