Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
File:                     0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json)
Hash identifier:          SM3YFfm+n0f6JHHpJMbrgVHAUxK51QrErFZaLG0kne4=
Subject key identifier:   DC:13:E8:10:DA:DD:61:C8:F3:40:36:74:75:C8:2B:41:F9:E5:99:AD
Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
Certificate issuer:       /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Certificate serial:       0695
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
Manifest number:          067C
Signing time:             Fri 22 Nov 2024 21:58:00 +0000
Manifest this update:     Fri 22 Nov 2024 21:57:59 +0000
Manifest next update:     Fri 29 Nov 2024 21:57:59 +0000
Files and hashes:         1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: Z05Rdql9dccbwjjKBerOKZaqZVV58rg2zk49GwBevzM=)
                          2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: +fRxqOXyB3e8V6DJsPZloFZurNNVr8ZfU/q63aOPSF0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
                          rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
        Validity
            Not Before: Nov 22 21:57:59 2024 GMT
            Not After : Nov 29 21:57:59 2024 GMT
        Subject: CN=6740fe67-5b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:12:db:1d:ee:64:0a:b1:f9:8b:40:5c:26:
                    49:e4:b4:3c:99:02:f9:ea:ae:d9:92:6b:93:e1:f5:
                    40:df:7f:ab:4b:f0:c3:f2:53:81:f8:e3:2e:38:f2:
                    fb:c7:09:0a:65:0a:af:3d:9f:83:2c:07:aa:bb:65:
                    db:ca:5f:c2:a0:8d:50:70:f6:d9:cd:6b:b6:fa:c7:
                    ce:74:46:4e:70:b5:2d:08:65:f8:87:59:18:4d:56:
                    e4:c5:05:6a:2f:81:03:af:a4:4b:14:b6:71:ab:3d:
                    9a:33:ea:d7:42:75:cb:dd:bc:b1:26:8c:e8:ed:42:
                    d9:b4:67:0b:93:16:24:d0:cc:a1:75:c2:90:2d:9b:
                    5c:66:f5:18:57:1e:b2:82:af:5d:d3:fb:a2:74:81:
                    fa:ee:75:fc:34:14:df:41:83:ed:76:8a:70:39:22:
                    73:2c:ae:b5:3a:8d:1f:a2:39:14:4a:d2:32:83:bf:
                    63:7a:99:a4:e4:80:e8:81:f4:c8:66:85:80:0b:85:
                    f9:fe:a2:70:cd:a2:a5:4e:da:33:21:b8:4c:2b:4d:
                    4c:f5:20:53:cf:b6:aa:03:4c:c6:16:57:b0:c5:76:
                    d7:0c:52:aa:48:a4:13:f9:9e:03:4f:12:4d:cd:a7:
                    67:b7:3f:97:ae:d3:43:45:4a:9b:a9:e8:ea:60:1c:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:13:E8:10:DA:DD:61:C8:F3:40:36:74:75:C8:2B:41:F9:E5:99:AD
            X509v3 Authority Key Identifier:
                keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:95:4a:6f:54:1a:8a:82:79:10:d7:7c:a0:b2:70:f4:20:5a:
         6b:9c:c9:74:54:00:88:a2:38:e4:23:7e:3d:40:03:d5:51:91:
         8a:08:35:88:10:b3:19:bc:e2:2c:46:8b:33:a4:f6:06:55:41:
         63:23:82:af:71:6e:b5:89:36:26:1c:a9:a2:cd:94:2a:8b:69:
         63:72:c8:17:d3:c9:60:55:6b:4f:48:b5:35:fd:c9:97:75:7b:
         82:78:8a:89:fe:ea:2b:99:8b:0c:e9:84:ee:d7:f0:bf:e5:78:
         d2:33:ba:d1:51:ea:63:cd:35:9b:bf:4b:56:af:31:05:fc:2a:
         de:20:19:6d:4a:35:38:9f:40:0b:03:98:99:80:54:59:76:2e:
         2a:44:ac:c7:c0:4b:fd:53:03:f2:cb:5e:7d:b8:b3:89:5e:fd:
         c8:b7:4c:8f:73:4b:b8:1e:d4:7d:76:02:4d:a0:ac:ee:8a:40:
         75:ee:38:1f:44:3e:49:4c:3e:58:82:24:9b:cf:32:b6:23:5d:
         fd:0c:0a:08:0c:95:d1:09:32:67:2a:be:5c:c5:9b:41:fa:53:
         28:d0:0f:58:4c:b6:50:86:f0:3a:3d:e3:41:8e:32:b6:8d:9c:
         aa:a4:f9:fe:63:4a:28:51:d9:c8:e7:89:32:1b:33:7e:bf:60:
         3c:8b:9a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:26 2024 by rpki-client on console-fra.rpki-client.org