Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
File:                     aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json)
Hash identifier:          tLnRCvusAke5aciAUEYrr7L4Q66fLJGNSaIt3f0Ufs8=
Subject key identifier:   91:55:5F:3B:C0:75:DC:43:8D:5F:19:F8:C8:3A:04:2C:1E:CB:21:E4
Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
Certificate issuer:       /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Certificate serial:       073E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
Manifest number:          0737
Signing time:             Wed 20 Nov 2024 21:12:19 +0000
Manifest this update:     Wed 20 Nov 2024 21:12:18 +0000
Manifest next update:     Wed 27 Nov 2024 21:12:18 +0000
Files and hashes:         1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: pHj9q9HD05vbPvW3HmuVMBe5HoRE79Rb0MGOOyk90wQ=)
                          2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: vAxVIummp1tZV92HZC5O4bYvIWtcttXOvxYUEW5yjEo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl
                          rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1854 (0x73e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
        Validity
            Not Before: Nov 20 21:12:18 2024 GMT
            Not After : Nov 27 21:12:18 2024 GMT
        Subject: CN=673e50b3-6aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:2f:5b:20:0a:4f:a1:57:6d:59:f0:e5:e2:
                    b9:9f:34:d2:e2:b2:8e:2c:a3:64:79:d2:31:2a:13:
                    97:bb:21:47:d5:c8:a1:07:e4:15:02:a8:47:b3:08:
                    c6:2d:2e:db:b0:03:a0:4b:17:63:a8:40:50:4f:86:
                    ae:48:a9:ff:0c:8f:4c:bd:e9:29:de:16:b6:aa:34:
                    c4:aa:7b:7b:b9:1b:49:20:f5:57:14:a6:1d:fe:8d:
                    ab:f8:7f:1e:9e:6d:58:40:c9:8e:3e:16:bd:fd:be:
                    28:0c:f0:22:79:93:82:0c:b8:2c:fb:bb:2e:0b:ce:
                    16:06:fd:e2:40:97:9a:2d:18:d8:f9:c3:27:a3:03:
                    36:ae:f8:89:b7:5e:d5:69:81:06:6f:7b:8f:1d:08:
                    5f:93:fb:13:3b:38:8a:3a:ae:6d:cc:4d:60:4f:eb:
                    4a:ac:ca:11:7f:79:4a:fe:f8:b4:64:98:cf:ef:ff:
                    9f:50:44:c6:70:de:f6:a6:a9:4c:e2:bd:48:70:bf:
                    30:c9:21:ba:d8:4f:b4:4e:45:c0:28:92:ed:c5:ea:
                    44:51:12:46:d1:0e:fe:70:eb:2b:15:c8:45:a6:75:
                    9c:ef:a8:65:ed:c6:a0:41:51:bb:8e:27:02:17:26:
                    12:fa:dd:cb:05:a4:7e:75:c3:fc:af:dd:1e:07:76:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:55:5F:3B:C0:75:DC:43:8D:5F:19:F8:C8:3A:04:2C:1E:CB:21:E4
            X509v3 Authority Key Identifier:
                keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:91:a0:04:40:fc:18:2a:f7:90:03:d8:d2:6c:42:81:c8:7d:
         88:aa:cf:ce:ab:78:eb:3a:7b:52:69:da:da:c8:9f:11:85:8a:
         59:14:eb:9b:e5:73:66:88:28:8d:31:70:4f:a4:34:c7:36:5a:
         58:d6:35:31:af:0f:87:78:b4:66:06:c6:7d:bd:a0:0e:28:d3:
         0a:6a:b7:76:03:16:ea:30:2b:5f:1a:37:f3:ff:5f:8a:69:6f:
         f5:df:58:63:a6:ff:02:15:7b:16:d3:04:70:c5:6a:f0:4f:bb:
         76:9c:aa:28:e9:73:da:c6:f3:cb:e2:e2:2e:fd:d5:63:a0:d9:
         11:65:e7:69:66:d6:29:1d:5d:e1:34:9e:c4:6a:b8:07:43:16:
         4e:32:4b:77:04:28:b4:dd:00:1e:85:cc:62:3a:52:46:6e:be:
         b9:e5:2b:08:63:6b:f4:c3:1b:67:3a:06:0b:3b:f4:4b:60:f5:
         cf:f5:94:73:45:61:48:b5:86:33:4a:84:d1:3f:b6:b3:cf:2a:
         3d:f2:26:f4:51:e4:83:c6:55:d8:d4:fe:6d:19:86:fc:2f:84:
         43:25:e1:80:fc:4b:7a:5e:29:82:ac:d9:ac:19:3e:9f:da:50:
         f1:6d:1d:a1:b6:04:6c:1d:28:d1:8c:cf:2e:75:20:87:a9:ab:
         f6:4f:0b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:39 2024 by rpki-client on console-fra.rpki-client.org