Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
File:                     MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json)
Hash identifier:          VuhiVCmXI55FJczdhUrepFjoUwFPJS2lXBMFJ5qr+zM=
Subject key identifier:   7B:40:47:C0:99:4F:09:C3:B9:16:E7:4E:16:48:B8:DD:5F:72:FF:C2
Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
Certificate issuer:       /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Certificate serial:       1918
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
Manifest number:          18F4
Signing time:             Fri 22 Nov 2024 16:27:32 +0000
Manifest this update:     Fri 22 Nov 2024 16:27:32 +0000
Manifest next update:     Fri 29 Nov 2024 16:27:32 +0000
Files and hashes:         1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: og5CljXcHl7lEx6c1xipF7PIYtZ/z25SBsVo04Kgc6Y=)
                          2: 936822385BDA11EF98C26511C4F9AE02.roa (hash: orcuIVQDXa55MgUEa+uvpleaNB+r/DtukKrLYo38vu4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl
                          rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6424 (0x1918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
        Validity
            Not Before: Nov 22 16:27:32 2024 GMT
            Not After : Nov 29 16:27:32 2024 GMT
        Subject: CN=6740b0f4-36d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:86:d2:cf:2a:1c:19:e6:17:a4:b9:43:82:4b:
                    c9:24:3d:af:17:f2:f1:30:db:e9:e5:b9:27:50:4e:
                    13:b9:d4:05:85:5e:35:99:75:2c:ae:4b:90:34:3b:
                    f5:1a:71:3f:27:e7:be:9a:9b:fd:ae:b3:d4:45:1e:
                    c1:05:ac:b2:55:69:c7:78:14:10:18:4f:a2:76:43:
                    84:60:f4:d2:c0:12:d7:79:ef:61:07:5e:9c:e2:ff:
                    6b:bf:10:e8:a9:1d:24:ca:89:32:a4:82:01:04:1f:
                    0c:8b:a3:0c:80:46:57:88:1e:c7:d6:36:65:35:16:
                    00:03:7c:4d:e0:0b:3b:22:3e:cd:31:3b:85:e6:e6:
                    1c:7d:48:33:e0:52:46:98:d8:9a:b1:dc:ce:47:f8:
                    64:0a:83:91:02:fa:35:86:b2:cb:5a:e8:63:be:39:
                    8e:21:22:10:ba:21:6b:60:eb:d0:72:2f:00:e7:e8:
                    f2:ef:dc:44:a2:e3:95:c2:4d:27:30:0c:2d:4f:2f:
                    f3:85:62:8a:38:2a:75:96:ff:c6:63:86:cf:67:5a:
                    8e:ff:b5:1d:17:64:a9:5e:52:1d:7f:10:cb:ae:02:
                    13:c0:c5:23:2d:3f:d9:50:81:0e:84:46:8f:8d:39:
                    93:e6:7d:37:0b:c4:e1:c7:ba:16:a1:08:31:e9:3c:
                    18:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:40:47:C0:99:4F:09:C3:B9:16:E7:4E:16:48:B8:DD:5F:72:FF:C2
            X509v3 Authority Key Identifier:
                keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:91:89:df:d8:68:ab:48:18:cb:90:65:46:c5:42:28:1c:c2:
         08:b5:66:4c:ca:77:eb:67:19:ad:2c:fe:1c:cc:2b:38:c7:58:
         1a:f5:a7:14:eb:b8:fb:b6:46:36:34:4d:e9:0b:d6:47:93:0e:
         f8:6c:c3:af:e4:19:3b:c2:8e:15:e4:b9:3b:b8:e2:c0:41:42:
         52:a7:ec:c9:ed:5f:bb:65:be:bd:6a:0b:15:f2:2d:ad:c8:b3:
         b6:43:b3:83:24:a3:2a:fb:37:94:97:af:3d:95:a5:c4:51:0f:
         2c:e7:09:d1:7c:52:cc:8f:80:14:42:2e:16:97:fd:99:7e:09:
         78:b0:75:4a:fa:3a:c5:39:8d:80:e6:cf:bc:9c:6d:b6:f7:77:
         21:84:65:62:60:6c:f1:30:a3:5e:9c:7b:fc:47:9f:6c:58:9f:
         a6:88:88:94:ff:48:20:2e:09:2b:c3:5f:5d:42:8d:1c:08:9c:
         51:26:9a:41:26:b7:41:b1:1f:51:d2:9d:6d:7c:a6:9a:78:8d:
         19:fd:e5:d0:82:1a:50:47:88:b7:ff:23:e0:c9:1b:5f:4b:02:
         bd:89:3a:22:73:7a:4c:bc:ca:e9:22:0d:c2:a1:29:7d:70:cc:
         2c:1a:c9:2a:6c:40:31:75:6d:38:1f:db:da:ad:16:6d:19:22:
         8e:8a:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:47 2024 by rpki-client on console-fra.rpki-client.org