Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
File:                     gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json)
Hash identifier:          pD1op8Agu8Zdz8UHxDqtg+otjvAWiX4mhqZtk/vkZ2g=
Subject key identifier:   75:F1:DD:3F:F6:54:12:96:CC:F1:83:F1:0A:A3:B6:49:2E:B7:0E:AC
Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE
Certificate issuer:       /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
Manifest number:          57
Signing time:             Sat 23 Nov 2024 05:06:56 +0000
Manifest this update:     Sat 23 Nov 2024 05:06:56 +0000
Manifest next update:     Sat 30 Nov 2024 05:06:56 +0000
Files and hashes:         1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: /slDz6aPTj20YCPBam94IrkJGBMDrlHC1AFYhci4VEc=)
                          2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: s2si+C+JZXQAr64DJhXNsm5gwkwO01DlVqtCowccWVI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl
                          rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
        Validity
            Not Before: Nov 23 05:06:56 2024 GMT
            Not After : Nov 30 05:06:56 2024 GMT
        Subject: CN=674162f0-987e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:7c:07:02:4b:4f:6a:f0:ff:2a:06:d8:aa:
                    38:df:87:b5:ee:a3:b8:ff:c0:88:5c:aa:46:dc:06:
                    41:01:8e:ac:05:7f:e3:a8:e0:db:38:22:69:bd:00:
                    f8:09:97:f5:9f:df:7e:49:9d:af:61:cd:a8:bd:22:
                    7d:66:44:77:0f:a6:00:bd:78:14:ed:5a:8b:11:64:
                    3c:33:8e:cf:b9:c0:fc:34:04:7c:22:98:f7:da:dd:
                    c0:78:5b:fe:9e:a0:93:6e:31:18:23:88:a8:2a:73:
                    bb:7c:dd:06:ff:68:d4:6f:ef:9d:9d:66:8b:2f:3c:
                    33:e9:73:43:b4:02:ac:ca:83:e4:d4:3d:fb:0b:c8:
                    97:ec:01:f3:d1:90:bc:58:58:21:15:03:ee:80:bf:
                    c5:3b:de:01:de:74:1e:66:cd:ba:71:d4:de:2d:8d:
                    8e:df:c2:c2:76:a8:b5:02:59:70:64:01:9b:9f:77:
                    30:1c:7c:4c:5d:de:fc:1b:82:bb:f5:ec:81:b6:06:
                    94:15:3f:20:9a:8f:47:36:66:4f:f6:57:db:6c:80:
                    66:dc:73:57:dc:ae:c8:53:3f:4b:6f:bb:17:eb:b3:
                    55:06:02:a7:7a:b7:7a:c6:65:b1:68:b3:9d:62:dc:
                    91:55:88:df:b6:a6:86:72:3f:61:0b:10:20:9c:44:
                    d3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F1:DD:3F:F6:54:12:96:CC:F1:83:F1:0A:A3:B6:49:2E:B7:0E:AC
            X509v3 Authority Key Identifier:
                keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:88:f9:19:58:6b:37:9f:02:53:a2:6c:0b:ee:69:0a:75:f6:
         ca:a2:f0:10:b5:86:5e:22:42:97:57:99:b4:61:76:5a:3e:96:
         70:9c:8a:0f:ed:17:6a:26:5a:a8:ec:62:a2:fa:38:6f:63:e4:
         3f:cc:70:f0:63:11:5d:c9:60:d9:a3:dd:b0:e5:71:e2:89:3d:
         c3:05:d4:46:2f:58:0d:95:c5:66:bf:0c:30:c1:50:60:94:b0:
         0d:5b:55:d6:aa:a9:e8:cb:58:71:da:e3:08:c8:00:2f:94:1f:
         e2:55:74:10:dc:e1:63:74:92:08:fc:5e:eb:31:0d:24:26:69:
         34:a7:cd:80:cc:a6:9b:8b:c0:f0:73:86:85:a4:bd:d8:ed:b5:
         34:4c:fd:46:19:ca:e0:b3:42:f6:b0:df:c6:90:52:4f:7f:0d:
         4e:fd:0b:62:f2:d1:1a:8e:fb:05:cd:46:78:f5:be:6a:49:7e:
         24:68:5b:79:af:2b:2d:dd:ce:2a:dc:23:40:bd:40:d0:2f:93:
         b5:09:0f:16:d9:22:f6:90:cc:07:d7:cc:cf:c7:bf:4a:f8:cf:
         af:0b:84:1a:51:33:54:b5:43:c8:32:42:eb:17:bf:4a:99:5d:
         0e:97:7f:ad:5a:bc:c8:45:05:3c:cd:aa:fa:15:67:28:1d:91:
         c6:a8:db:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org