Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
File:                     oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json)
Hash identifier:          nMiW1PMke6Lzh+j8km6m5nukU6YHjx+KV7h7LRox9NU=
Subject key identifier:   7E:D8:E0:70:E6:B6:79:B4:33:B6:DD:39:54:1D:1F:98:92:EA:52:DB
Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1
Certificate issuer:       /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
Manifest number:          0235
Signing time:             Sat 23 Nov 2024 01:24:41 +0000
Manifest this update:     Sat 23 Nov 2024 01:24:41 +0000
Manifest next update:     Sat 30 Nov 2024 01:24:41 +0000
Files and hashes:         1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: xOo2lGYPpQyT1BPsh1vYlfj+rAfU9CmgWQSnwBsIiTc=)
                          2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: idGZCp14CeJ+hgIGhq15biNKPAF3xFUAz3T9o9jel9U=)
                          3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: u7Xzmc+Z0Bg/MwCVSoDiBZBPaHlbZugtPr2Bm1jVv2c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl
                          rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
        Validity
            Not Before: Nov 23 01:24:41 2024 GMT
            Not After : Nov 30 01:24:41 2024 GMT
        Subject: CN=67412ed9-77ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:a8:87:46:7c:0f:e7:bc:bc:5c:13:fd:c7:
                    2a:52:e6:c2:dd:d2:91:29:18:b5:9e:98:39:31:4d:
                    20:99:0f:3f:f7:42:50:12:43:60:1c:5b:73:80:b6:
                    df:af:07:3e:09:e5:bd:3e:04:c8:a3:0b:98:45:3a:
                    d8:73:39:73:84:4b:0f:58:57:4c:3c:06:01:ce:45:
                    9a:8a:7e:75:89:20:5a:4c:28:43:d6:af:01:48:53:
                    16:63:61:bc:a9:58:aa:83:04:66:b1:83:30:c1:32:
                    67:91:a8:95:cb:9a:13:ee:27:5a:fc:df:0a:d2:4f:
                    a2:54:45:e0:48:33:14:80:0b:7a:55:53:53:63:fc:
                    fa:24:93:69:c8:ee:61:85:33:c0:33:26:cb:14:40:
                    e0:c1:96:02:8b:4f:21:83:33:3e:fe:25:5a:d8:b3:
                    5b:78:c3:05:e6:d7:1c:e8:75:fa:6e:d9:c6:89:aa:
                    f4:b8:29:d2:8e:15:3d:b1:b5:78:35:85:85:29:9d:
                    ab:b8:14:03:fd:44:c2:e3:2b:71:72:94:c9:94:5e:
                    6a:8e:01:b8:06:2f:fe:fc:9c:91:b0:aa:7b:61:7f:
                    d7:f5:55:30:fc:4f:5f:56:e7:92:59:c2:04:c6:9e:
                    14:16:ea:ef:f7:45:4d:0e:dc:2b:86:f3:ed:ae:f2:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D8:E0:70:E6:B6:79:B4:33:B6:DD:39:54:1D:1F:98:92:EA:52:DB
            X509v3 Authority Key Identifier:
                keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e1:07:84:30:f7:82:ad:10:d3:9f:f0:9c:b0:79:04:62:2e:
         77:f5:80:e5:c2:17:37:ce:e3:1a:0e:ee:4f:28:42:1e:c9:11:
         27:b1:1a:a9:6a:23:cc:9d:38:af:9b:0b:38:f5:d2:70:7a:70:
         3c:64:02:b8:ce:13:ad:5a:ab:0d:2b:0a:6c:9a:9d:b9:16:20:
         bb:8f:42:82:9d:5c:3e:70:52:09:63:04:d9:27:12:79:cc:b5:
         cc:8d:ef:fd:47:3b:4a:4f:88:48:69:ed:f0:bd:c8:43:e8:42:
         98:7b:e7:1c:02:4c:0e:90:14:a1:fe:91:7b:4c:eb:d0:17:00:
         f3:40:e7:e7:61:00:9b:a6:38:23:28:61:95:10:a5:f9:96:84:
         ec:2b:14:52:e9:66:a3:a4:46:50:38:7a:17:2a:c3:27:a8:21:
         11:b4:4e:c0:81:3f:24:57:60:89:1f:c1:0c:f4:19:44:dc:ed:
         9c:06:ce:40:03:04:60:e2:1f:d7:87:33:97:f2:b0:65:02:8d:
         07:2c:02:17:dc:67:4a:77:a3:79:2c:63:6b:69:00:8f:60:6c:
         08:c5:bb:90:4c:af:35:3d:e3:16:2a:61:36:2b:f7:4c:aa:cc:
         47:f0:7b:30:5c:62:6e:a2:42:30:5c:f8:2f:4c:4d:34:f1:72:
         cb:d2:34:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org