Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
File:                     tLSrnzywRDD9ZNTuKt0IReRNV_8.mft (raw, json)
Hash identifier:          e7Wco8mHIsfISXrsvV1+BwiuqNEpJpgd/+FLSBBQPU0=
Subject key identifier:   87:CE:70:B9:0B:49:8C:CA:DF:4A:92:4C:A3:12:08:EF:66:00:CA:3D
Authority key identifier: B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
Certificate issuer:       /CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
Manifest number:          0172
Signing time:             Thu 21 Nov 2024 02:23:25 +0000
Manifest this update:     Thu 21 Nov 2024 02:23:24 +0000
Manifest next update:     Thu 28 Nov 2024 02:23:24 +0000
Files and hashes:         1: tLSrnzywRDD9ZNTuKt0IReRNV_8.crl (hash: TWjKdHDCwkm+pwQf37FMwrvfNGkvA7LGfLWMdxYNAbA=)
                          2: BDBF9A0666D011EF861D9840C4F9AE02.roa (hash: bHUERkg8bGXKbdYgVMtl9i6ispE9ShleXxD/LHmjK+I=)
                          3: 717DC7D4688011EEB1FB1959C4F9AE02.roa (hash: voTdqkVIgk5PrL5fF3IbG6qj2hjdu2WrO//xgYy60xA=)
                          4: D70560A4989E11EFA7941866C4F9AE02.roa (hash: VuQtoAP+dq92tNhzdN8t9PjSxeKVTCVjTa2Vb/TaBDk=)
                          5: 34C93324F8B211EEB9088A75C4F9AE02.roa (hash: 1FFvNKh1Awacr8s+sY4YAQXmMU9FD58//Y/2p9QbgM8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.crl
                          rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
        Validity
            Not Before: Nov 21 02:23:24 2024 GMT
            Not After : Nov 28 02:23:24 2024 GMT
        Subject: CN=673e999d-9761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f2:83:62:00:3e:78:66:5c:6e:36:85:e2:8e:
                    48:64:14:60:4d:a2:59:07:4e:14:e5:fe:cf:83:e1:
                    31:e8:35:51:49:d2:8f:88:b2:7f:81:c5:e4:8a:fa:
                    56:83:d2:b7:8d:be:69:13:aa:d7:d5:95:98:65:f6:
                    38:a0:b8:74:64:fb:4e:c2:ce:84:d1:93:3f:dc:76:
                    13:7a:0d:bb:ec:fa:0d:ed:56:b3:d8:ed:dc:71:22:
                    c5:fe:c6:33:5a:ed:1b:46:4f:7b:c2:c4:b3:0b:9b:
                    1f:e6:ad:b8:15:33:25:88:d2:1b:58:6b:03:5a:7c:
                    28:5c:87:cb:a4:20:ee:b3:46:b9:03:ea:85:5d:0e:
                    08:ec:d4:a7:6c:b1:d2:b3:d0:1c:f8:45:b7:92:ac:
                    80:9c:4c:19:1e:40:cc:84:e3:02:88:d4:f8:8a:ff:
                    4f:61:c0:38:77:c6:e8:b1:8a:ad:b6:7f:f8:16:b8:
                    c8:77:b6:b9:19:82:81:a3:0f:b8:2a:75:7b:df:17:
                    e9:eb:de:91:d3:e3:c9:a9:6d:a6:f8:77:04:7d:51:
                    76:7f:fe:c8:c2:42:11:61:15:59:01:02:2b:51:e4:
                    13:64:3e:20:ab:db:a4:d7:f7:54:17:b9:a7:6d:8a:
                    e4:b5:43:c7:5b:39:a4:42:2d:49:98:3f:ba:4c:51:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CE:70:B9:0B:49:8C:CA:DF:4A:92:4C:A3:12:08:EF:66:00:CA:3D
            X509v3 Authority Key Identifier:
                keyid:B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5c:ab:b4:33:5d:9f:51:f5:93:44:bd:3e:8a:80:fb:78:09:
         54:fb:e4:83:13:95:10:53:e5:1e:69:05:7f:d9:a2:ff:3a:89:
         5e:12:11:12:c8:54:48:a4:d9:7f:65:91:80:5b:75:f4:8a:b2:
         91:3f:0d:c0:12:72:ab:ea:01:a2:26:78:9c:b2:4b:36:37:d1:
         5c:e7:8b:6b:2b:cf:fc:f1:8d:8e:14:49:7e:76:49:9f:54:63:
         02:18:4e:98:7a:1f:17:ad:3e:67:f4:99:17:af:64:d0:cd:af:
         fb:35:2b:31:d3:c9:18:75:d5:37:e8:9c:33:dc:96:88:a9:1c:
         12:b6:68:b5:7a:cc:01:dc:d3:8b:04:82:86:ba:09:ef:5c:ae:
         a9:38:8d:a2:33:9c:bb:2a:a0:39:7d:e2:4c:98:4e:33:45:46:
         ab:c3:cc:bf:5d:d8:19:6e:28:76:e1:68:2d:28:96:09:58:31:
         72:22:c9:dc:c4:af:cc:49:e0:6c:aa:91:fe:b8:fd:e0:54:a9:
         66:a4:6b:7f:4d:42:b6:4c:b1:2c:24:7b:99:ca:45:f8:49:8d:
         02:26:c0:a1:ad:7c:f6:97:93:82:86:84:a3:4a:2f:d6:87:e0:
         5b:7b:ce:43:59:6d:b1:e0:09:f1:08:48:16:95:bb:97:3a:0c:
         1a:a7:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:56 2024 by rpki-client on console-fra.rpki-client.org