Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
File:                     vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json)
Hash identifier:          lXsEpYdm98dFsDzgsagfZRcEj0XO8BxoRsGSOZcFiGQ=
Subject key identifier:   A6:7B:7A:63:05:6E:6E:68:31:A6:07:AE:5D:15:8A:E4:89:5E:61:C8
Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
Certificate issuer:       /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Certificate serial:       0596
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
Manifest number:          0584
Signing time:             Wed 20 Nov 2024 22:51:14 +0000
Manifest this update:     Wed 20 Nov 2024 22:51:14 +0000
Manifest next update:     Wed 27 Nov 2024 22:51:14 +0000
Files and hashes:         1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: 6N6FovIc7dTrxE5+JrAblQRAEqmX49GaMut0EKkYyHs=)
                          2: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: j3fOTU+ZyDH2gWmIOUvIDKynWCWvx/O+tM8FAKYOeY4=)
                          3: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: P6xYLGWZasAZ0O0GYyx/cUS1pnfp7Nbv28TT3E9ue6A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
                          rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
        Validity
            Not Before: Nov 20 22:51:14 2024 GMT
            Not After : Nov 27 22:51:14 2024 GMT
        Subject: CN=673e67e2-ec65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:20:d3:37:06:f1:55:72:45:17:b6:97:75:
                    ae:4c:03:74:13:69:41:47:e6:24:37:ce:d8:78:30:
                    61:3e:b4:2a:01:3a:70:50:27:9b:ad:3b:51:fb:1f:
                    29:3c:a3:92:a9:3e:98:ff:ae:70:53:55:0b:5e:0d:
                    ad:73:3b:bb:00:1d:c9:0a:7e:0b:6b:f0:f9:af:4a:
                    07:6c:d5:2d:4b:6a:5f:67:54:3c:45:69:a7:ef:75:
                    5b:f2:87:cc:ad:26:af:ad:ce:cf:e1:d0:5c:a9:39:
                    ee:6c:68:93:6b:56:af:20:57:09:23:f5:14:4c:8c:
                    c3:53:03:9f:fd:c3:08:17:af:28:10:65:f8:5f:b9:
                    90:f9:ba:3d:df:21:1e:2b:24:47:bd:3d:ce:cf:eb:
                    6c:85:97:4d:ca:e6:6d:4a:5d:98:2f:b0:57:ad:95:
                    f7:1f:c0:3c:ae:71:88:6f:1c:75:86:62:39:0b:22:
                    f6:0c:58:64:09:cb:ea:b0:82:62:af:9e:05:29:d2:
                    98:46:03:f1:ca:e0:94:64:41:a2:8f:3f:10:fc:16:
                    d7:a3:8a:22:89:2d:32:9c:2f:16:5f:7a:df:d3:0c:
                    bd:ed:00:98:e7:47:50:52:c9:d3:b2:e7:16:80:41:
                    e9:50:3e:83:c1:b2:8d:d1:5b:78:00:04:c9:26:29:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7B:7A:63:05:6E:6E:68:31:A6:07:AE:5D:15:8A:E4:89:5E:61:C8
            X509v3 Authority Key Identifier:
                keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4a:b0:3b:a4:50:23:06:60:75:3e:c9:be:91:1e:fa:2c:92:
         f9:55:67:d6:d6:f2:3d:40:e9:6b:d8:f5:33:03:8c:71:f1:51:
         21:cf:74:d9:b5:3d:2f:dd:33:69:f6:f9:12:c2:00:ba:07:57:
         66:cf:35:ad:4f:93:df:23:a2:b2:69:17:f9:e9:0c:3f:a7:85:
         b9:47:22:c2:ef:f8:e7:8e:71:5f:86:6c:b3:55:b8:bf:f9:34:
         79:17:20:a0:fe:56:40:3c:b4:ec:34:42:06:00:94:f6:cc:6d:
         ec:c4:77:8b:63:73:92:ad:18:52:40:25:a5:06:6d:f4:82:bb:
         55:2e:79:d7:50:8e:7c:ce:2b:bc:99:34:bf:13:1d:a0:35:d9:
         6c:10:93:a1:31:8e:5e:bd:90:04:ec:27:a5:42:57:d4:68:cc:
         c3:f1:89:3c:36:0f:66:15:b6:00:4f:6c:61:5a:3f:bd:d4:25:
         3b:05:a6:43:9f:52:8b:0b:19:69:67:73:9b:d0:f9:f5:b6:b9:
         75:22:a0:4a:69:6b:8b:d6:9c:0e:45:b2:b6:1f:0e:11:58:31:
         99:d6:3b:fc:9e:87:d5:a3:62:91:aa:0a:a1:d5:80:b1:ab:ef:
         bd:be:13:db:38:27:63:d2:c9:5f:b7:27:c0:0f:66:fd:56:fd:
         96:98:53:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:40 2024 by rpki-client on console-ams.rpki-client.org