Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
File:                     mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft (raw, json)
Hash identifier:          doHafXN/R0K3oB34Q5r1JmS4VGOxj9hZ5WJF/hyaCLI=
Subject key identifier:   CF:7C:E1:66:23:51:13:A0:CB:A2:94:E8:21:D1:DF:4F:F9:F8:E6:E6
Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19
Certificate issuer:       /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
Manifest number:          014C
Signing time:             Thu 21 Nov 2024 02:34:16 +0000
Manifest this update:     Thu 21 Nov 2024 02:34:15 +0000
Manifest next update:     Thu 28 Nov 2024 02:34:15 +0000
Files and hashes:         1: mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl (hash: korL5g00jjIJdw7eNEQJffrT/ctvbiTxxHpcPVlzVnk=)
                          2: EE4D73F2AE5611EDA021E516C4F9AE02.roa (hash: Y7rwBbYTnchmBAucXdCEl+WBGxzWb608eKIUvJXWeXQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl
                          rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
        Validity
            Not Before: Nov 21 02:34:15 2024 GMT
            Not After : Nov 28 02:34:15 2024 GMT
        Subject: CN=673e9c27-9933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:56:97:fd:66:36:e3:57:18:ed:08:a9:08:
                    54:c8:d7:ad:55:16:2e:e1:71:05:bb:be:3e:12:7b:
                    fc:b9:14:79:d2:7a:7e:a3:1e:f0:af:37:93:0f:f6:
                    fd:bb:5d:d0:d7:c8:4e:c4:be:29:ee:f9:f7:6b:61:
                    1b:38:27:eb:b7:6a:bb:68:ab:97:0b:7d:f8:a0:a2:
                    80:32:f4:e7:d4:1e:6d:73:27:72:1a:1e:44:c7:bd:
                    ba:f5:97:d3:f1:2d:84:40:7f:dd:60:96:94:57:e6:
                    2d:c9:03:62:f1:83:31:93:59:a1:73:5f:b4:ec:ea:
                    bb:66:29:39:3b:ec:ee:f1:30:92:44:97:af:8e:96:
                    be:b8:2a:45:23:ea:b6:73:27:1c:0e:90:a3:65:e3:
                    31:6d:9e:3e:64:57:cc:8f:cd:53:0d:d2:57:48:10:
                    35:34:5e:7f:05:77:7a:e8:cc:4a:51:4f:fb:ad:9c:
                    d5:6e:df:d4:55:c0:5b:40:92:60:ab:05:1a:9f:ce:
                    0c:cb:c5:05:2c:4b:e8:83:39:46:dd:26:2e:3b:0a:
                    9b:d2:22:f8:9a:52:ef:c4:e4:ea:ad:44:32:e5:bf:
                    fc:32:9d:bc:c0:68:1f:11:44:49:de:1c:3f:33:92:
                    b4:ad:8d:76:4b:24:95:11:af:47:06:c3:11:e9:73:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7C:E1:66:23:51:13:A0:CB:A2:94:E8:21:D1:DF:4F:F9:F8:E6:E6
            X509v3 Authority Key Identifier:
                keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:12:74:bb:8d:cb:7c:bb:40:34:48:af:49:f8:09:ce:d4:f4:
         e7:42:9b:d6:0b:40:bf:9d:f5:a1:0c:77:84:1a:83:71:05:7e:
         f4:29:3c:0e:62:bb:f0:84:1a:36:f7:29:e8:46:b8:40:7d:40:
         67:85:d0:b4:f1:3d:78:59:01:f8:55:5f:85:1f:82:79:17:9d:
         7f:e5:fd:bb:1f:75:34:de:bc:8a:6d:4d:bf:4a:47:5d:c4:3f:
         07:b9:81:72:06:20:08:34:2b:b9:f7:a1:a6:f2:56:e6:15:50:
         18:34:77:e0:91:d7:d3:3d:83:27:0c:1f:77:f8:6a:7d:7d:90:
         c2:ca:5f:96:5e:f7:33:c5:cc:95:3a:c7:b9:c4:3a:8c:ce:19:
         76:2c:33:39:c4:cd:66:29:f4:65:bb:de:d6:29:b4:15:62:3f:
         3f:70:aa:43:7f:de:1e:20:fb:4c:0e:0a:f7:84:8e:a0:87:e0:
         82:49:42:e7:1a:56:c0:ac:8b:17:5b:3b:87:7e:20:42:bd:09:
         ae:d3:05:25:3b:d0:af:d6:03:28:44:05:b3:42:5d:fa:82:fd:
         0b:ea:4c:86:4c:0f:fe:00:36:cc:2b:7c:ea:4c:b3:d7:62:fd:
         c8:f7:8c:4c:69:f0:ca:83:1f:46:41:c5:5c:6a:7b:75:2d:a2:
         85:0f:b9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org