Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
File:                     Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json)
Hash identifier:          SFATxjTc8UHSBJiJ1UciSQ/wx2CExAvseRaZ31INCoA=
Subject key identifier:   6D:EE:CC:A1:BE:74:D8:AF:B4:C5:16:8F:51:E8:E4:E2:BC:DE:89:45
Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47
Certificate issuer:       /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
Certificate serial:       0C1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
Manifest number:          0C19
Signing time:             Fri 22 Nov 2024 18:15:39 +0000
Manifest this update:     Fri 22 Nov 2024 18:15:38 +0000
Manifest next update:     Fri 29 Nov 2024 18:15:38 +0000
Files and hashes:         1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: 4AEd5634N9Cn0h1u9oxCkrj8WsA1JDRPuiuuQ79cj8M=)
                          2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: /karXHORf2+bzNF7YGlxUcjlijjurkc//gM0e/4KtEQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl
                          rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3102 (0xc1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
        Validity
            Not Before: Nov 22 18:15:38 2024 GMT
            Not After : Nov 29 18:15:38 2024 GMT
        Subject: CN=6740ca4b-4036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:3d:7a:81:bb:14:f2:20:11:f6:45:0b:45:
                    3e:08:dc:da:f3:2c:ba:0e:9e:6b:f2:3f:53:ef:72:
                    42:da:f5:75:a0:2f:d4:07:62:92:17:71:f7:ce:c4:
                    0e:d4:3f:d8:89:cb:3e:47:a4:12:51:9e:07:2e:27:
                    f4:5e:7f:2a:52:05:fe:a1:1d:55:04:6c:25:be:42:
                    47:d3:20:c2:2b:7a:e0:e0:52:14:5e:0f:92:a4:5d:
                    5c:13:40:83:16:46:80:b4:e9:71:1b:5b:77:5d:4f:
                    17:65:82:f5:19:ee:06:56:06:cb:49:f0:8c:54:eb:
                    2e:d6:77:77:8e:3f:7c:a6:ca:0c:7e:d1:0e:65:a5:
                    57:53:7f:2c:0a:81:83:d2:e8:34:fc:ce:b3:00:30:
                    32:02:c7:7f:65:8f:7f:f7:78:78:f9:54:ad:13:b9:
                    e5:8f:37:07:fc:6f:47:8b:c2:d8:74:ff:e9:a7:f0:
                    45:80:05:47:13:1c:2c:69:77:1c:35:a6:9f:4d:55:
                    f2:55:b6:cc:fe:69:9c:20:27:fa:4e:ed:cb:cd:8a:
                    60:29:d6:93:5b:0a:f6:cc:ca:e9:14:e1:9e:d7:53:
                    89:01:36:4b:b0:e6:57:92:3c:5d:a7:b8:1a:3e:39:
                    d8:77:42:58:36:b0:c4:80:9d:1d:b6:51:78:51:73:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EE:CC:A1:BE:74:D8:AF:B4:C5:16:8F:51:E8:E4:E2:BC:DE:89:45
            X509v3 Authority Key Identifier:
                keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:37:c9:35:70:3c:84:f7:b9:9e:e1:e7:90:e3:16:80:7e:
         4e:0e:22:83:12:b7:71:57:0e:ac:b6:a5:8f:b6:94:6b:34:de:
         74:fb:22:77:d2:fb:62:45:b6:69:fd:85:70:f0:c0:a0:9e:43:
         b4:e8:37:67:85:6a:a2:95:30:c6:2e:55:60:cc:46:ce:92:b7:
         ce:92:29:20:17:c8:c8:91:36:f9:d9:ca:60:06:fd:ba:29:6b:
         98:fe:11:e8:47:62:0c:41:8c:1e:78:53:6c:e1:a6:ae:93:80:
         de:c2:c6:8e:7b:3d:cb:e4:40:d3:fa:32:82:78:a2:08:d8:5f:
         3b:04:04:be:12:82:35:57:62:6d:f5:23:fe:d5:49:58:38:fa:
         a6:89:9a:72:2d:4e:9b:8c:8c:68:3f:42:89:11:b4:97:75:80:
         c1:8b:56:40:ec:86:4a:c0:3f:de:c1:66:33:27:33:aa:3a:a8:
         7c:9f:db:e9:6b:dd:8d:bb:54:30:80:d9:e5:d8:d8:be:d4:4b:
         24:50:0b:3a:2b:24:bc:04:47:c5:ed:46:a4:ee:36:f1:52:95:
         52:18:08:ac:d5:28:cf:b4:61:07:5c:0a:c3:9a:98:fc:4f:6a:
         7d:61:07:54:e7:86:a4:d0:29:39:60:f1:d3:1d:a5:fc:e7:1d:
         74:32:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org