Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
File:                     -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json)
Hash identifier:          F9h8ATEnP1DmQbDqiOAOFx2fZB5m1q2rfVJbTyuMwZc=
Subject key identifier:   52:54:FC:A4:18:74:2F:F1:EF:D7:FC:0E:A5:F8:D6:67:2E:E4:49:A7
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Certificate issuer:       /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
Manifest number:          0118
Signing time:             Sat 23 Nov 2024 03:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:01 +0000
Manifest next update:     Sat 30 Nov 2024 03:01:01 +0000
Files and hashes:         1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: 0FP75hlcIgR+bKH3m7VlhxWKHvYxfj1ofg65ERJHnEk=)
                          2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: QTEO5MAXQNjAJQZNIuOvPQ9n5+DrX/cptcb5jtiM5q8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
                          rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
        Validity
            Not Before: Nov 23 03:01:01 2024 GMT
            Not After : Nov 30 03:01:01 2024 GMT
        Subject: CN=6741456d-cc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:51:a1:35:91:07:fb:b1:23:08:f9:5b:6a:
                    48:e0:89:fe:55:1c:2b:7b:1d:29:aa:f4:8a:bd:53:
                    8f:6d:4e:24:e6:5f:0f:f5:aa:94:2e:6d:74:26:b4:
                    7c:64:17:11:91:a1:b8:43:b6:25:4b:2d:a3:a0:b9:
                    91:77:1c:f7:42:6b:72:f0:21:4a:0c:14:ea:c5:54:
                    72:24:62:d5:35:3d:5b:81:ea:8b:eb:82:5d:43:fc:
                    13:28:10:d6:f4:31:2a:7c:05:67:2c:f6:9b:70:4a:
                    5d:56:4b:99:8a:93:e2:93:1a:d5:23:0f:02:57:57:
                    3e:19:7c:93:c0:61:65:bf:a5:1f:c0:79:88:e0:5b:
                    bf:09:42:15:68:05:de:f9:68:49:bf:1b:f1:6d:00:
                    17:f6:d5:03:22:97:6e:00:59:4e:e9:6e:4b:19:32:
                    fe:10:92:f5:34:16:c9:30:ca:53:40:04:bf:4c:da:
                    9c:33:c0:73:19:f8:0f:89:ef:a5:76:4f:1e:49:86:
                    0d:f6:b5:b8:06:e7:ef:6d:a2:58:93:30:82:6c:27:
                    f8:e2:d4:ad:86:f4:52:d9:d4:19:64:2c:ac:99:74:
                    7b:9b:82:2d:f1:b3:91:3a:08:27:5f:c0:6d:ae:08:
                    eb:38:94:5a:02:8d:1b:2e:0b:4d:45:b0:ec:1d:77:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:54:FC:A4:18:74:2F:F1:EF:D7:FC:0E:A5:F8:D6:67:2E:E4:49:A7
            X509v3 Authority Key Identifier:
                keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b5:eb:8c:fa:14:00:01:a2:2f:fe:c0:1a:41:9e:70:55:a2:
         4f:c9:cd:ac:0f:16:2a:5c:2a:b2:dc:4d:1f:ec:e2:d4:29:be:
         9c:07:ce:f9:0e:0f:11:e1:32:ad:57:2d:ec:c2:28:fe:09:d1:
         3c:05:1d:55:b4:4a:fa:b6:fe:23:a6:07:ce:c6:e5:b3:63:bd:
         2d:17:0c:25:9c:00:73:41:0a:c5:94:aa:60:68:9b:d5:56:75:
         c3:79:a7:f0:03:bc:80:b9:01:e0:22:56:1a:dd:12:2d:3a:78:
         a2:f1:16:e7:1c:76:c1:ab:92:ee:e1:c0:02:af:18:bc:73:d5:
         88:ae:f9:af:29:95:2e:76:b6:6b:fa:cc:84:41:36:67:cb:2d:
         de:48:ae:62:30:34:76:02:80:9f:73:7c:83:ca:6a:30:6f:3d:
         9f:e1:5b:b6:ea:f3:2f:7f:49:1c:75:90:b1:1b:f2:13:36:50:
         17:89:47:25:3a:e2:fe:bf:c7:7c:69:30:73:8f:02:c8:09:1a:
         e2:04:54:48:1b:5a:95:9f:09:87:40:65:c8:53:91:33:f8:95:
         8b:b8:ad:2b:e9:e0:c5:82:96:07:bc:62:59:f9:cb:38:2a:79:
         42:50:a1:26:8e:13:fb:ae:2f:65:0f:9e:63:76:d5:7f:1c:98:
         8f:de:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org