Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
File:                     53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft (raw, json)
Hash identifier:          q49qzsSvualKFaeElD16zBplZg8dfVx5hWk/uW98rzA=
Subject key identifier:   5A:55:9F:5D:2E:C0:AC:72:07:94:73:9C:A1:F3:19:0D:AF:61:5F:40
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Certificate issuer:       /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
Manifest number:          021C
Signing time:             Thu 21 Nov 2024 01:34:49 +0000
Manifest this update:     Thu 21 Nov 2024 01:34:48 +0000
Manifest next update:     Thu 28 Nov 2024 01:34:48 +0000
Files and hashes:         1: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl (hash: /lcU36RYOMx0nZy1SWATywvY/OTk447FY8sPoVz19Oc=)
                          2: 60A2CF98817811EE9E9A211DC4F9AE02.roa (hash: OBulHvX2B6jsIGrCSAsyqZYvuyIkHgMKG5wNVNk2ul8=)
                          3: 195EA596AC8711EEAC4B2427C4F9AE02.roa (hash: hhO5y4e/DFpdPdaj49uvYHcFr1O6lkR5HUgMp+6rOns=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
        Validity
            Not Before: Nov 21 01:34:48 2024 GMT
            Not After : Nov 28 01:34:48 2024 GMT
        Subject: CN=673e8e39-4b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:19:0b:e2:52:e0:3c:11:15:ff:9e:10:9b:
                    17:a3:04:1b:8e:d3:66:66:22:aa:93:55:2a:a7:3e:
                    cf:b7:41:01:d1:b2:fb:39:70:eb:a6:41:30:ad:ae:
                    c3:ed:0f:e1:ef:3e:5f:47:50:c1:80:9d:76:a8:72:
                    26:68:da:00:81:e5:75:cd:7f:0e:50:46:29:7d:17:
                    ab:bb:0a:fc:22:51:d9:ed:c9:ad:b6:31:0d:a9:01:
                    39:99:80:d6:14:ad:94:08:c1:52:77:c0:04:80:af:
                    04:6f:8d:4f:40:e4:cd:38:85:81:6b:00:80:7b:c3:
                    22:00:4a:a1:f5:40:72:31:c6:2a:7f:c4:c2:2f:71:
                    af:51:6c:71:d4:98:23:07:d2:8a:bb:c1:39:3c:eb:
                    b5:00:22:a5:0c:8b:a7:65:45:1c:f4:f0:c8:e5:ee:
                    9e:1b:c3:3f:e7:6e:98:ae:24:09:4d:a7:54:cb:4a:
                    0d:58:64:eb:7e:e3:31:63:27:49:21:5e:59:d3:22:
                    74:76:ba:67:73:d2:63:e0:f7:31:69:b9:32:ce:4a:
                    97:0e:fc:95:8a:5d:39:c9:9d:3d:86:93:76:4f:e8:
                    a9:b3:b0:ea:fb:a1:00:0c:93:63:32:6b:43:64:ee:
                    ee:a0:b3:dd:c3:47:fe:cf:a7:f0:ed:75:1c:76:22:
                    20:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:55:9F:5D:2E:C0:AC:72:07:94:73:9C:A1:F3:19:0D:AF:61:5F:40
            X509v3 Authority Key Identifier:
                keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:cd:cf:1d:79:24:b5:27:b4:1d:f2:a0:9f:32:0f:ad:c1:4f:
         ca:d9:67:82:89:04:2e:0b:66:34:5b:d2:fc:dd:a6:78:96:ea:
         0d:f9:4a:28:45:8e:9f:61:b9:01:48:3c:3e:11:a1:5e:c2:9c:
         50:4d:17:bb:99:f8:a7:90:d4:19:e7:95:87:a0:48:74:58:07:
         ec:d1:73:25:31:ea:98:d2:5f:2a:35:61:83:aa:1e:a3:34:11:
         0d:b8:8b:fa:20:b3:37:76:54:9d:33:d7:2d:74:a0:19:d3:17:
         a5:66:ad:f1:52:f1:c6:ab:ec:b5:e2:ba:84:50:a0:20:44:49:
         63:84:79:60:b8:21:3b:35:f8:0e:6e:56:a9:e5:3d:79:d0:45:
         f9:31:60:f8:fa:92:86:de:68:d7:a5:a1:46:98:2f:75:79:d1:
         a6:73:53:4e:1f:8c:36:0a:89:13:ca:f8:5e:7a:c3:cf:dd:34:
         f6:42:f3:cf:79:6d:ce:52:26:f7:69:24:84:70:51:49:76:aa:
         88:19:7f:06:91:49:a8:24:8c:8c:1a:a3:d9:3d:fe:a0:bf:87:
         73:78:10:ce:31:87:ca:fd:58:0b:d0:16:f1:63:77:a3:83:ea:
         5f:6c:0e:50:c4:02:89:bb:13:00:1b:66:de:31:af:3c:ef:ba:
         1b:6a:c0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:35 2024 by rpki-client on console-ams.rpki-client.org