Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
File:                     UWKb64D735TtmmQ_14yB2nO2uho.mft (raw, json)
Hash identifier:          6kCM/l6Fd7unT3bC12LR8iBHNKMS4DUglTcHiKJUTuQ=
Subject key identifier:   34:8D:87:57:28:86:C0:EC:D4:C0:54:65:C2:68:FE:2A:A9:9A:88:D8
Authority key identifier: 51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A
Certificate issuer:       /CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
Certificate serial:       0A17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
Manifest number:          0A09
Signing time:             Fri 22 Nov 2024 19:35:45 +0000
Manifest this update:     Fri 22 Nov 2024 19:35:45 +0000
Manifest next update:     Fri 29 Nov 2024 19:35:45 +0000
Files and hashes:         1: UWKb64D735TtmmQ_14yB2nO2uho.crl (hash: 6lUJ9jNBj0oDhD5g/C6N2acpZ+azmqoVJ4vGd3ajsJ0=)
                          2: 803C622E9B9111EDBC921164C4F9AE02.roa (hash: cOk9WkbMtekpbvbpWoDS8UUpnz2Yuo9L3yfei4T7i14=)
                          3: 7F1EA1189B9111EDBC921164C4F9AE02.roa (hash: B4bAqc6kkR7Hs43c2EHoV92Uje7SlbmocY/IyCwTMEI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl
                          rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2583 (0xa17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
        Validity
            Not Before: Nov 22 19:35:45 2024 GMT
            Not After : Nov 29 19:35:45 2024 GMT
        Subject: CN=6740dd11-119b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:8a:cc:7c:a6:6d:f9:3b:f0:f7:4a:82:9b:
                    18:8c:1a:3f:5b:6a:50:2f:b9:87:70:eb:58:b5:1d:
                    8d:89:7e:86:22:20:bc:a2:7d:35:f7:aa:b2:8e:d5:
                    87:00:34:57:c5:86:ca:fc:ee:e4:4b:b1:68:42:be:
                    c7:b2:88:5c:65:5b:29:35:37:89:4f:27:11:a3:e4:
                    f9:6a:f1:6f:e9:b8:f2:7c:cb:81:0c:2a:89:5d:69:
                    74:5f:b5:4f:50:a7:4f:99:4b:87:63:c0:9d:9f:d8:
                    46:de:74:d2:3e:95:a9:94:e6:6b:a3:12:70:75:42:
                    86:7a:ac:d1:d7:63:03:4e:d3:89:63:af:3a:aa:36:
                    b8:d2:9f:b9:db:24:6b:6e:72:4a:01:a7:f8:32:ed:
                    54:09:c4:70:fc:ef:27:c1:1e:f4:07:0e:95:cd:12:
                    0e:35:48:2f:8b:a1:dd:16:87:ae:9e:47:b0:f0:77:
                    99:85:07:a3:ca:91:67:ea:06:79:ca:d1:14:d8:4d:
                    e9:23:af:86:4e:75:c5:d9:42:8c:54:82:ba:30:3d:
                    69:18:a1:e9:8b:33:52:6e:64:60:36:4d:28:72:84:
                    2f:cf:f7:a9:3d:14:e1:a5:f9:00:cc:1c:d2:30:f6:
                    23:42:30:b3:55:14:4c:52:31:1b:6f:b7:92:c9:39:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8D:87:57:28:86:C0:EC:D4:C0:54:65:C2:68:FE:2A:A9:9A:88:D8
            X509v3 Authority Key Identifier:
                keyid:51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ac:56:6c:5c:5a:53:70:3f:0d:7d:47:da:fe:8e:03:5f:cb:
         9a:eb:c7:b5:1c:ac:96:88:8c:1e:af:42:d4:3a:ce:51:58:98:
         26:b8:89:dc:ba:b0:83:66:b6:62:98:d4:4e:fa:af:4a:e1:47:
         f6:64:15:95:7e:3e:03:e5:4b:b3:53:ef:b2:df:16:fb:8f:67:
         59:7b:cb:a2:a7:5d:df:f0:00:bc:51:02:29:5a:6c:89:29:3c:
         26:08:c8:e5:a7:23:b4:41:27:e8:2a:08:fd:24:52:a6:4a:88:
         9f:9f:f8:6f:6a:7f:d8:bc:9b:b5:cf:6c:21:3d:36:27:2b:18:
         ee:21:54:d3:c8:42:6c:20:36:23:be:4f:c5:c1:a2:77:59:6d:
         f2:3b:da:b3:e9:4a:58:98:01:36:91:83:d9:ff:4d:21:5f:e8:
         88:79:ce:69:1d:eb:95:4f:64:8d:5a:24:2e:a4:2b:eb:68:84:
         d2:a1:84:a7:87:e4:91:4f:51:9f:1a:5c:d0:7c:99:39:91:f2:
         38:7c:d3:a0:ed:cc:f2:cc:f8:80:ad:75:73:55:0d:5d:86:40:
         7e:a0:f3:69:7b:73:c1:07:18:88:48:73:e3:08:de:65:9e:af:
         c4:98:05:70:34:1f:ac:81:5c:9d:b7:70:fd:18:ea:57:b9:62:
         dd:7b:8a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org