Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
File:                     V0mF4m2MdxawntUDGbTOZJYd5w0.mft (raw, json)
Hash identifier:          B2ftDiAtoTwJEDn/F9LXx3NcUrPpe27QRSCtd+0zlg0=
Subject key identifier:   A9:1C:56:9A:2B:C5:E8:2B:F6:56:C7:75:08:AF:08:D6:4C:F7:DE:6F
Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
Certificate issuer:       /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
Manifest number:          F8
Signing time:             Thu 21 Nov 2024 03:24:00 +0000
Manifest this update:     Thu 21 Nov 2024 03:24:00 +0000
Manifest next update:     Thu 28 Nov 2024 03:24:00 +0000
Files and hashes:         1: V0mF4m2MdxawntUDGbTOZJYd5w0.crl (hash: vNPkbanh8K6rHPpqxqN/2rjatUYLs6wKnIaGUpvDCTU=)
                          2: 5DC923B630ED11EE9A24D25BC4F9AE02.roa (hash: 9sMoBTHNBzTXrd/0A6/mBQcgU25EK23u4Vylq7ntRrs=)
                          3: 5D4D209030ED11EE9A24D25BC4F9AE02.roa (hash: h0tUzjsSDJepu4YPR5C33X4gta0umpYL27rKDh0bZWE=)
                          4: 67CDF190321211EEA6FE6D43C4F9AE02.roa (hash: vFUGfYTbO0hXtZL5WrXZO6Ff20WnBskmHAy+Zz+UlEY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
                          rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
        Validity
            Not Before: Nov 21 03:24:00 2024 GMT
            Not After : Nov 28 03:24:00 2024 GMT
        Subject: CN=673ea7d0-a549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:cd:a6:b7:49:29:44:15:ca:9a:12:fb:aa:
                    c1:be:ba:32:a3:fa:8d:25:96:a1:39:c9:36:20:0d:
                    38:17:b9:56:6e:c6:ef:dc:1e:25:f6:ea:4a:cb:00:
                    2f:7b:7a:17:66:01:66:f3:cf:3c:1d:17:e4:6b:39:
                    c5:b8:f5:3b:f7:21:5e:d6:d7:d2:27:0e:ab:4b:21:
                    c2:bf:83:e5:fb:8d:2a:1e:f2:d6:6e:1c:30:98:99:
                    30:72:2d:1e:02:7b:cc:01:06:39:55:aa:41:9f:b3:
                    b0:15:5e:a8:13:86:83:b3:95:1a:07:30:fe:59:33:
                    b8:13:fb:b1:f5:e7:dd:ff:f7:99:fe:f5:7d:36:1f:
                    82:b8:c3:68:0b:c6:66:8b:c4:d4:83:07:e4:a0:bf:
                    16:d2:ec:62:b5:f4:fa:8b:35:5e:ea:3f:bd:cf:df:
                    78:e3:b3:7d:86:13:6a:31:48:1d:17:53:4f:f1:f3:
                    d7:68:ad:e5:47:9c:73:b4:18:e3:3a:cd:b4:ac:24:
                    0f:79:c5:8b:a9:d3:7e:a9:a1:20:57:45:e6:59:be:
                    bf:3e:ef:83:76:0f:30:46:11:39:5e:5a:ca:50:b2:
                    86:f7:d8:43:fd:7a:fc:e2:68:95:c7:62:62:b8:71:
                    58:20:51:de:64:20:7e:0b:2a:33:bc:b2:c5:b0:ed:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1C:56:9A:2B:C5:E8:2B:F6:56:C7:75:08:AF:08:D6:4C:F7:DE:6F
            X509v3 Authority Key Identifier:
                keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:97:31:87:94:fc:da:2b:ce:86:29:dd:70:3e:0f:6c:de:ff:
         c4:79:cf:b9:b2:18:5a:5f:bc:b8:e9:ac:05:72:0d:9d:f6:15:
         d4:7b:0d:1d:16:9f:d0:fb:59:f1:32:a3:05:03:bf:b7:ff:df:
         d9:a0:58:d9:60:d1:04:c8:44:79:59:50:5a:1b:1b:e0:9c:2e:
         92:be:92:d2:5c:a3:23:6f:66:ba:d9:95:24:5d:a8:74:43:77:
         c6:d0:c6:bf:6b:33:04:a1:26:fb:6a:af:21:3c:87:ce:58:01:
         02:7f:11:9e:0b:4c:8d:f7:69:d0:39:ff:eb:58:c9:89:50:6a:
         09:39:8e:e2:fc:00:fc:76:be:fb:7b:1f:94:cf:69:88:0d:03:
         82:92:8a:d5:40:35:a1:64:5c:cb:25:0d:c3:bd:b9:9c:4d:ff:
         3d:ec:9f:43:3c:b2:5e:2d:8d:08:fd:fa:6a:22:91:13:22:39:
         7f:19:81:95:c0:37:da:71:3c:bd:5f:6d:4e:92:2d:d1:11:67:
         73:ee:cd:f3:57:fc:7f:1e:e5:f4:f5:e5:69:ec:8b:e1:c5:cf:
         8e:07:ea:58:44:39:26:0d:5f:dd:44:60:3e:1a:1c:f4:65:34:
         c8:4b:e5:e5:8c:b3:ae:9c:95:a3:6d:75:40:bf:e5:8c:be:1c:
         ff:71:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:56 2024 by rpki-client on console-fra.rpki-client.org