Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft
File:                     HID51XftxGA1IDFKF6RctqfFwWA.mft (raw, json)
Hash identifier:          0IpfxUU+xzhvFEbSm4ejcnBYRiFKsS2ghwWoerNWvSM=
Subject key identifier:   A5:5A:44:AE:1F:12:F0:22:7E:8D:63:80:91:7F:FD:BE:E1:C0:2D:4E
Authority key identifier: 1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60
Certificate issuer:       /CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160
Certificate serial:       0C82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft
Manifest number:          0C7B
Signing time:             Wed 20 Nov 2024 18:04:48 +0000
Manifest this update:     Wed 20 Nov 2024 18:04:48 +0000
Manifest next update:     Wed 27 Nov 2024 18:04:48 +0000
Files and hashes:         1: HID51XftxGA1IDFKF6RctqfFwWA.crl (hash: 6+lEdpj5OTUz4ZQIhJCbPkomaEWceIP6GZ1Lpp5drvE=)
                          2: 1C09DC824EA511EF8F5C1133C4F9AE02.roa (hash: NSvQyvKURdeuceDiAzCSIm3FJeSKgBJwDcsKZ0VnbkQ=)
                          3: B174D294F50011EEB5298B64C4F9AE02.roa (hash: DmsBe/nWUMAmA56V3udTaCz0NsFVXi5Q9O4KvJmVDd0=)
                          4: B2531496F50011EEB5298B64C4F9AE02.roa (hash: y2QuO9udDY8DoDry5kKL3qKlCchHAD8mHA+hKGxkvw8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.crl
                          rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3202 (0xc82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160
        Validity
            Not Before: Nov 20 18:04:48 2024 GMT
            Not After : Nov 27 18:04:48 2024 GMT
        Subject: CN=673e24c0-b92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:63:25:0a:0f:e2:ba:d6:09:7f:d4:6d:ff:
                    d1:cd:aa:db:db:6c:a7:a1:85:45:a0:54:e8:e4:f2:
                    7f:9d:9d:38:51:33:8d:56:2a:c4:bb:9a:99:52:eb:
                    a0:3e:0d:8e:20:85:fe:77:53:c8:9c:c6:20:43:25:
                    6d:82:d1:7a:f7:5f:ee:27:3c:57:ce:7c:cd:ac:68:
                    74:13:20:17:0d:47:cd:4c:4d:51:fe:56:85:7f:a8:
                    db:68:3c:ed:01:09:c2:49:33:24:3f:bf:83:13:ca:
                    e9:67:80:3d:d7:5a:52:ac:c3:f5:56:9a:5b:53:e3:
                    1b:dd:3f:14:ad:7a:7e:b8:f2:24:2f:03:cb:df:9e:
                    5c:fb:43:80:7c:82:70:a6:f2:37:66:b1:e7:03:29:
                    c5:14:8b:a2:89:8a:f6:d4:bd:fd:f5:3c:5f:02:85:
                    a4:59:22:c3:fb:66:75:c5:50:97:02:6f:e4:6f:ad:
                    3f:58:cc:6e:58:6a:fe:76:4d:46:7f:0e:18:b5:3d:
                    7e:87:5d:e5:61:b0:27:1e:31:54:3e:54:01:2d:da:
                    dc:08:f5:b1:96:10:37:16:58:2c:5f:66:cb:72:dc:
                    92:ed:22:2b:d6:ec:09:27:79:ce:d1:23:bd:cd:f2:
                    b2:79:20:c7:49:51:2b:a6:e1:55:f1:47:28:80:e6:
                    37:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5A:44:AE:1F:12:F0:22:7E:8D:63:80:91:7F:FD:BE:E1:C0:2D:4E
            X509v3 Authority Key Identifier:
                keyid:1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9d:d1:96:29:86:a4:28:e2:39:fc:6f:23:07:5f:bc:fc:ab:
         d7:46:2f:7c:35:fc:bb:54:d9:74:f3:7d:49:36:0e:3e:18:3a:
         9e:ec:47:b4:1e:94:f4:33:0d:e4:b3:99:02:5e:6b:a2:bf:25:
         3d:86:e5:da:af:91:3c:d3:26:90:16:6a:35:7a:fa:67:20:2a:
         52:f0:1d:15:13:f0:47:0a:51:fa:07:20:34:c1:8a:5c:dc:93:
         96:0e:4c:e1:60:63:76:ac:40:0d:60:ba:01:f9:f2:15:fa:f6:
         64:34:97:79:55:41:0e:aa:d0:bc:2b:b2:ea:01:3c:1b:7f:d4:
         27:02:7d:ff:d1:43:5d:39:39:96:34:34:32:21:1b:c9:79:f5:
         89:84:3a:a8:05:7f:5d:62:9b:4b:7c:b3:3c:50:25:7d:e0:1c:
         c8:0a:8f:80:4b:4b:c9:fd:e4:4b:eb:0f:4e:2f:1a:f3:b2:d9:
         3a:98:c8:83:dc:be:ca:85:7e:53:71:0e:b7:ab:bc:d2:50:ad:
         eb:ef:43:da:8e:37:8c:43:58:00:03:7c:26:59:e6:4b:3b:aa:
         b1:09:00:bc:8b:a8:ef:48:b1:8d:14:1d:a8:61:f0:53:e2:4a:
         3d:e4:0b:3b:3b:6a:0a:5a:da:d7:ed:4e:0c:6c:42:f1:f2:94:
         54:6b:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:18 2024 by rpki-client on console-ams.rpki-client.org