Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
File:                     eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json)
Hash identifier:          XbLTtfDbvsCJsioKbFcRRs1cu25xm4tNPKGRl+s+DIk=
Subject key identifier:   B5:69:45:0A:38:32:72:E3:C2:B7:C6:4F:C2:56:F7:C8:53:7C:4D:61
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       07BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
Manifest number:          07A8
Signing time:             Wed 20 Nov 2024 20:47:01 +0000
Manifest this update:     Wed 20 Nov 2024 20:47:00 +0000
Manifest next update:     Wed 27 Nov 2024 20:47:00 +0000
Files and hashes:         1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: eTdkF/Y8MCiV9GSY9ceyknKDZEVdmi9RojNiFmKBYiY=)
                          2: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: Nz4JL+l4q5eTnKjF8D+yKJMkwfApWOlTw8qV9LnnNRY=)
                          3: C664689AE0F511EABB96D531C4F9AE02.roa (hash: 6z7hYBLguvvLle11iq9Qd/Si+IGvsECaX+4wJJHRkBI=)
                          4: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: yx8TBb/TuXum0pJEp+Wzpqk77BnNIMbRNcycPvceWF0=)
                          5: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: Yz/+/IZVcc+5lrqnMdZi03yjb19ulOEfIAhXRVTBBuo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1982 (0x7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Nov 20 20:47:00 2024 GMT
            Not After : Nov 27 20:47:00 2024 GMT
        Subject: CN=673e4ac5-1140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:39:50:a3:9f:0c:e3:da:2c:13:57:81:a8:
                    7c:e6:82:a0:6b:b6:20:1e:f3:8d:87:b0:e0:28:1d:
                    8f:db:ce:79:48:9b:ab:31:2e:5a:02:19:a5:a1:65:
                    ea:de:95:a1:a1:dd:31:06:70:4c:9a:66:37:ee:39:
                    dc:ad:0a:9d:da:06:ad:f1:ed:61:7e:98:4d:49:7d:
                    97:2e:73:1b:99:7b:d6:a7:c1:ec:91:16:88:12:52:
                    0e:9c:32:7f:d6:29:43:14:92:aa:27:20:88:41:0c:
                    14:3d:da:e4:6e:af:6b:a0:c5:59:e4:da:43:23:bb:
                    4e:46:24:65:98:3b:dd:60:2a:2d:b5:0d:f6:ff:99:
                    be:ba:72:15:68:ee:04:76:0d:fc:9c:8c:c7:ad:16:
                    88:35:d7:f4:8b:1e:27:5f:a9:f6:a7:68:07:e1:1d:
                    af:23:05:52:62:7e:7c:e0:14:15:fc:34:3c:dc:aa:
                    e0:16:4b:e1:e0:ac:b5:b7:74:39:92:e5:0c:1d:b3:
                    08:2a:ba:4b:f7:1c:e6:19:8e:df:89:d3:ed:15:79:
                    b8:3d:0c:aa:29:85:7d:46:5e:ae:9b:e7:77:ad:a5:
                    8d:0e:47:96:fb:58:f2:a7:62:77:20:ae:68:eb:08:
                    d1:7f:97:08:11:ac:d1:8e:33:38:54:32:7c:2b:5d:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:69:45:0A:38:32:72:E3:C2:B7:C6:4F:C2:56:F7:C8:53:7C:4D:61
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:30:57:ec:86:fe:e1:c3:ff:77:7d:28:9b:3d:64:1a:17:8a:
         3d:81:ff:af:33:8c:73:12:c3:df:e3:25:44:99:6c:b7:58:5a:
         ef:ea:e1:3c:b8:b9:7b:91:f3:c5:94:1a:96:e6:4e:c4:bb:c8:
         68:9c:c3:af:a1:4e:43:ae:64:af:d9:d2:7b:9b:fb:40:71:14:
         e9:8b:22:a0:11:be:ac:d8:b7:c9:01:a3:d0:5b:5f:8e:0b:01:
         fe:78:cb:06:c6:c9:42:08:95:e2:8e:06:52:94:92:ec:85:59:
         b5:9d:a1:24:87:91:51:d0:0c:5c:73:d5:cb:1b:4b:08:39:9c:
         ac:ee:29:5d:68:73:dd:a9:6a:67:9c:1a:df:b1:9f:21:51:e5:
         9d:74:34:28:94:a1:b4:e0:09:19:ee:12:ac:b5:95:13:d8:6b:
         ee:ab:5b:67:d9:31:10:1d:dc:40:ee:c7:17:2b:25:cd:65:7c:
         ba:68:54:ac:d8:35:fd:ca:5d:85:61:08:14:f2:87:4b:e9:53:
         bc:51:be:be:de:a4:ef:ad:08:4b:5e:c3:60:ce:a4:4c:e3:f2:
         5c:2e:55:9d:ee:d9:6f:d4:d0:c4:0a:d7:99:d6:65:27:6e:ff:
         ab:4a:a4:e0:5a:c6:36:79:20:af:86:c0:43:c3:fc:0b:10:61:
         0c:b0:db:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:39 2024 by rpki-client on console-ams.rpki-client.org