Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
File:                     cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json)
Hash identifier:          PB7Oaox6T27wzrdxuUH71NGkfBmC0KkaRrtOPfT4Hic=
Subject key identifier:   56:34:6C:C6:9F:0E:6D:12:E4:02:C4:48:C6:BB:43:6B:6F:1F:EA:61
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Certificate issuer:       /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial:       09F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
Manifest number:          09EA
Signing time:             Fri 22 Nov 2024 19:41:21 +0000
Manifest this update:     Fri 22 Nov 2024 19:41:21 +0000
Manifest next update:     Fri 29 Nov 2024 19:41:21 +0000
Files and hashes:         1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: fmqdX1cLvW05irb/nBVy4YQksqJDXIMqU6O57vMn6Rg=)
                          2: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: n7QYB4PprN8wvve4EgxwwoZXCNSALgZd5+0ffViTkK8=)
                          3: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 1K81wmlQPoGdZP/JjsQxYakrjnCNuKpYHSBFoJQ/JT0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
                          rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2552 (0x9f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
        Validity
            Not Before: Nov 22 19:41:21 2024 GMT
            Not After : Nov 29 19:41:21 2024 GMT
        Subject: CN=6740de61-0a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:3f:7f:cd:7e:0d:b2:32:8f:fd:36:4c:f9:
                    b2:6c:fb:0a:6f:e7:86:e5:6e:c7:e7:0c:81:03:8d:
                    50:9c:b0:a7:84:88:b5:5b:58:df:b4:de:76:d0:95:
                    ed:5f:bf:0b:ff:1f:64:c5:09:30:23:85:8b:0d:59:
                    e9:8d:8f:d3:ba:83:b2:fe:42:8d:72:46:7e:8f:34:
                    4f:96:38:17:06:2f:08:25:a1:1a:51:e0:4a:47:75:
                    ae:20:c6:9d:a3:84:b8:4e:f8:39:e1:81:e9:83:df:
                    4e:fb:29:80:20:07:c4:3d:6a:9d:ed:a2:d8:a3:7c:
                    2b:d2:68:bd:5e:03:fe:56:67:da:70:f4:8c:b4:c7:
                    91:46:23:a9:37:75:68:77:80:db:1c:c5:ce:39:40:
                    3b:d1:21:d6:dc:87:85:bb:8e:93:a2:3f:5f:ec:3c:
                    62:85:00:da:c2:72:50:f4:98:43:eb:b9:57:49:cc:
                    4d:a8:b5:35:e3:9f:37:3c:13:19:e3:66:e7:ae:51:
                    ff:c9:42:51:1b:0a:47:22:30:26:c8:22:6a:26:cc:
                    04:bf:11:67:b5:7a:db:bc:f2:8e:e7:98:9d:e3:ab:
                    7c:a8:ab:a1:44:df:a3:74:8d:e1:a8:cc:fb:f3:bb:
                    36:6d:24:4d:cd:ea:59:26:4b:cd:75:5e:4b:7a:df:
                    71:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:34:6C:C6:9F:0E:6D:12:E4:02:C4:48:C6:BB:43:6B:6F:1F:EA:61
            X509v3 Authority Key Identifier:
                keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:50:ad:07:aa:fe:1f:3f:44:45:dd:c9:41:f0:d1:64:6f:
         55:96:cc:f7:55:61:dc:2d:58:aa:2c:d1:1b:e7:50:e8:13:2b:
         c4:c2:cc:67:d9:54:fd:db:38:12:b8:76:28:0a:ce:c1:9a:aa:
         6a:4d:0f:00:63:9f:15:ae:ab:f1:62:d8:95:a8:e1:48:f6:5a:
         56:1c:52:73:49:87:f5:15:80:7a:e3:b6:dc:95:60:a4:3a:11:
         68:9b:f5:65:9b:93:73:a0:04:cd:6f:7b:40:a1:37:85:f2:25:
         8c:7e:f6:f2:8a:4a:bd:08:c2:b4:f5:24:a4:69:54:b3:e3:e6:
         40:7d:38:02:cd:82:4f:43:35:39:12:de:24:e5:c1:05:c3:e4:
         61:d0:c4:53:5d:67:63:59:ca:58:6f:4c:be:cb:18:56:04:00:
         25:5c:01:b4:93:7b:35:ea:f0:93:5e:a6:68:2a:b4:44:6e:30:
         3d:3a:4f:16:4d:a1:24:aa:d0:37:75:56:68:ac:e2:4d:2b:e8:
         c7:d4:f2:dc:fa:67:37:fa:54:0f:81:af:c3:3b:b7:8e:2f:bb:
         5d:ff:50:94:3f:dd:8c:20:76:08:7e:67:57:cc:a3:02:3d:6c:
         78:90:d7:24:21:0d:41:eb:34:17:7c:77:18:57:09:b5:91:59:
         59:b9:92:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:28 2024 by rpki-client on console-ams.rpki-client.org