Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File:                     VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier:          1yvCuXYppz+PV/oBMsQ3qLhRkIozb5qmWm/WJ4rPQgI=
Subject key identifier:   1A:0F:9F:C5:B1:FA:4B:C5:DF:49:A8:0D:FF:BB:C8:F7:99:10:D4:C0
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer:       /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number:          46
Signing time:             Sat 23 Nov 2024 05:18:41 +0000
Manifest this update:     Sat 23 Nov 2024 05:18:41 +0000
Manifest next update:     Sat 30 Nov 2024 05:18:41 +0000
Files and hashes:         1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: pSrfV9xacKOu4O26E+nB1+ZIskuUqlFrEVC+t/slt/s=)
                          2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: z8nIuMVscKg4ddacrN0wsJlufM+eXsIydjqCMnTO5kg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
                          rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
        Validity
            Not Before: Nov 23 05:18:41 2024 GMT
            Not After : Nov 30 05:18:41 2024 GMT
        Subject: CN=674165b1-5f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:10:6f:a3:15:11:5d:b3:a3:7e:ab:e8:01:
                    72:c1:26:40:98:d9:d8:f8:4a:b5:4b:d5:cd:1d:37:
                    82:d5:b0:c5:16:8e:4d:0a:9b:ca:47:ff:cd:64:57:
                    2d:ff:8d:c3:83:53:42:88:a7:90:f2:ae:ac:32:01:
                    61:b2:c5:8f:52:01:b4:6a:9d:8c:d6:02:89:b6:70:
                    6d:0a:66:15:47:6f:10:24:94:b7:37:2a:05:84:65:
                    37:8d:92:c7:05:38:ef:a4:09:48:6d:11:c4:84:9b:
                    ef:fa:39:9f:9c:0a:8a:b1:ea:25:52:c6:90:4b:dd:
                    19:58:2f:99:55:43:9a:29:b4:d4:c0:ff:f6:78:a5:
                    ff:6a:e4:a4:2f:d2:7a:51:82:b9:4d:fe:22:23:16:
                    14:cb:60:5c:2d:f4:29:27:af:f9:d0:73:92:ce:4e:
                    68:98:3e:fe:91:a2:f3:95:b5:83:34:cf:4b:10:31:
                    3d:32:a1:7f:e8:fe:a4:15:f1:a1:d4:fc:31:73:0d:
                    5f:3c:d8:e2:ba:a3:28:d1:d9:91:3e:c1:ec:9b:31:
                    75:23:79:68:48:47:88:eb:07:6a:cc:63:9e:98:48:
                    01:ae:71:84:55:c4:43:76:11:c7:4b:fa:da:72:d3:
                    c7:6f:6f:ee:c2:db:db:6d:2e:46:a0:50:d1:58:b1:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0F:9F:C5:B1:FA:4B:C5:DF:49:A8:0D:FF:BB:C8:F7:99:10:D4:C0
            X509v3 Authority Key Identifier:
                keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:53:c9:52:3d:75:cb:68:c6:b4:cd:34:a0:5f:e7:50:89:14:
         b4:b4:36:52:58:eb:88:66:10:a4:38:35:01:8b:de:a0:0c:19:
         4d:c3:d3:84:0b:bd:36:10:9a:54:88:e9:b6:a7:4e:4a:e2:fb:
         15:ff:c7:27:7a:ec:45:6e:4f:2d:d9:25:1d:de:93:6f:b3:75:
         04:8c:79:71:40:4f:bb:fc:c7:c1:ad:64:9c:b5:d1:f5:59:84:
         46:4e:a7:e0:9e:4a:94:ed:07:c5:68:31:e4:74:7a:95:99:26:
         78:20:c1:31:de:89:07:49:04:a3:e9:47:51:68:b7:64:7a:b2:
         02:ce:65:9e:c5:03:cc:7b:8f:f5:40:b0:a4:b2:75:b4:d2:33:
         8c:0e:9a:d5:f9:2e:2e:9d:5f:0a:a3:ad:26:35:01:97:b6:2a:
         5f:6b:65:bb:e2:55:7b:6e:e8:95:29:cd:2c:14:24:da:8b:d4:
         56:4e:a6:d7:08:ce:9f:f3:02:ab:f5:5d:f3:af:7f:aa:a7:fe:
         92:11:69:3f:91:ec:50:ed:7f:8d:64:aa:a0:c7:df:79:3e:c1:
         a3:81:5f:17:f7:31:10:fa:fa:3c:49:b3:8c:49:99:42:00:08:
         29:a1:ca:b0:e6:10:71:9c:b9:12:3e:88:f1:bb:ed:d7:e9:cb:
         40:74:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org