Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
File:                     fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json)
Hash identifier:          HARL1R4mvjO060zYAojWUmma9wPYNM/oe9AwTamKb5A=
Subject key identifier:   B7:57:E4:7D:0B:3B:61:98:2F:33:50:DD:27:5C:FB:DD:F1:F0:13:3F
Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06
Certificate issuer:       /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
Certificate serial:       1BE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
Manifest number:          1BD6
Signing time:             Fri 22 Nov 2024 16:13:37 +0000
Manifest this update:     Fri 22 Nov 2024 16:13:37 +0000
Manifest next update:     Fri 29 Nov 2024 16:13:37 +0000
Files and hashes:         1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: d5Vxq6nJrGgwzWqaLrLAURP3hc7erKNlunOzhWz3ijw=)
                          2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: jEW0rvFWrshrI6nnbch+pPJSlwmUj1jfiBu+KwKgm1k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl
                          rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7140 (0x1be4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
        Validity
            Not Before: Nov 22 16:13:37 2024 GMT
            Not After : Nov 29 16:13:37 2024 GMT
        Subject: CN=6740adb1-910e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:41:48:51:8f:f8:e7:86:41:ee:0b:fb:43:69:
                    d0:12:d4:e9:d2:09:ff:56:a3:ce:7c:c7:ab:1b:a6:
                    d8:31:0c:6c:48:c1:d0:ae:ed:d2:b9:6c:05:14:73:
                    91:19:40:1a:be:85:b2:b2:72:28:f0:dd:c9:c7:37:
                    ad:f2:1a:ed:a6:07:05:ff:69:cf:bc:15:6b:8b:24:
                    48:a3:83:dc:09:a2:25:a3:03:37:ff:91:9e:ab:3d:
                    83:89:76:de:1c:40:8e:08:c3:a0:e9:49:5e:66:c7:
                    9d:3e:1c:44:01:df:5c:57:28:3d:62:32:fe:be:41:
                    c4:d0:01:ee:ec:7d:2c:74:4a:c4:86:1e:35:fb:50:
                    52:2c:72:ef:49:5d:9f:28:72:f5:0f:0b:66:6d:9e:
                    cd:14:bf:9c:2a:7c:41:e1:03:a0:6b:04:8b:14:65:
                    73:e0:6c:f0:9c:32:c7:42:88:de:a0:83:d4:45:85:
                    b0:34:32:a6:d6:7e:dc:cc:67:f6:a8:2f:3d:ca:e8:
                    64:4e:87:31:1d:3a:09:d3:1d:51:8c:92:e5:93:8e:
                    3c:cb:1a:09:cb:5b:b1:e6:24:45:e9:08:8b:46:85:
                    3d:65:6d:f4:78:06:c8:ff:18:b6:26:78:ae:b7:85:
                    25:1a:e5:ca:c8:41:1a:58:e7:84:87:b3:7e:4f:36:
                    d7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:57:E4:7D:0B:3B:61:98:2F:33:50:DD:27:5C:FB:DD:F1:F0:13:3F
            X509v3 Authority Key Identifier:
                keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2a:54:43:55:33:36:3c:54:76:62:f7:4d:8b:61:1d:82:c4:
         59:ab:57:a7:ac:18:91:01:b5:65:00:43:df:68:02:96:c2:e0:
         7b:07:c8:83:91:f7:86:8c:74:cc:c2:3c:17:5c:a0:c4:cf:76:
         3e:c0:e0:5b:74:41:39:d7:c4:50:9a:24:b8:f8:70:fd:81:42:
         1d:ba:67:76:b6:99:ea:fa:79:f3:d7:56:15:07:75:f7:a9:aa:
         d1:0b:60:2f:59:14:4e:11:aa:c9:4c:6f:7f:d4:aa:c8:b1:3c:
         5c:3c:b4:23:bb:11:bd:fc:2b:33:0c:42:53:72:d1:d5:6a:ae:
         dd:33:60:93:fa:ca:dd:18:e4:ed:8b:7a:56:8c:cb:a2:2d:95:
         9a:7b:9a:5a:4c:35:83:3b:54:86:29:63:a3:36:a2:4d:39:5e:
         48:46:d3:d4:a7:b1:3b:87:63:6a:03:4d:27:be:34:67:ca:99:
         ca:e6:13:33:97:47:0d:ab:4a:04:b9:d1:10:59:a5:9e:0e:f0:
         4c:ab:04:43:c9:b5:ff:45:05:af:2b:fa:ae:ac:7f:aa:0f:2a:
         a5:dd:cf:a9:cb:e2:2b:59:5c:32:ec:ce:4e:99:5b:dc:84:29:
         5c:a5:9f:f0:85:e4:b0:f6:52:5f:72:5d:3e:be:90:64:38:14:
         44:e5:90:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org