Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
File:                     5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json)
Hash identifier:          bAUTkeTbSDVGt//DvlSykC3JcveAR9hOipiVlSTFd9c=
Subject key identifier:   7C:7F:5A:53:15:C3:AD:73:6B:A1:1F:3F:CA:79:B2:72:C4:B2:91:F8
Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
Certificate issuer:       /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Certificate serial:       0C14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
Manifest number:          0C06
Signing time:             Fri 22 Nov 2024 18:21:37 +0000
Manifest this update:     Fri 22 Nov 2024 18:21:37 +0000
Manifest next update:     Fri 29 Nov 2024 18:21:37 +0000
Files and hashes:         1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: uQ5iZawXYtV0ja7rrnhXF4FTufYWpVijqXCRu4CkeTM=)
                          2: BE4852941C2E11EE9A9A9940C4F9AE02.roa (hash: kbRGxh+eHT4yaX3DIe1fJAJpI0Ll4+Ql3O+or3Gu5JU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
                          rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3092 (0xc14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
        Validity
            Not Before: Nov 22 18:21:37 2024 GMT
            Not After : Nov 29 18:21:37 2024 GMT
        Subject: CN=6740cbb1-7d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:44:06:43:40:a1:3b:c9:52:02:ba:ac:0e:a3:
                    9d:d7:c0:4b:05:15:80:3f:f2:54:55:e9:f0:01:23:
                    45:b3:8c:ff:ba:36:db:15:eb:2b:e6:95:8b:94:f5:
                    a4:a1:4e:60:82:fd:b9:b3:c6:19:8c:c7:66:7c:55:
                    2d:af:4d:01:f8:8b:71:38:ab:90:b9:0f:51:f4:a5:
                    15:3b:09:79:ad:6b:51:4e:a4:6d:1b:89:8e:5c:d6:
                    12:73:d7:aa:68:43:d1:fb:c4:3f:d1:18:99:8a:b8:
                    44:8e:ae:d5:f1:7a:4e:bd:25:85:96:93:7e:cd:c4:
                    af:8b:e4:77:c8:cb:87:7f:2f:9c:6a:57:e0:ba:5f:
                    1a:4f:e3:09:08:82:ee:09:23:31:bf:77:12:69:bc:
                    4d:e5:05:e3:15:52:f0:07:0f:ea:75:3c:64:c4:71:
                    94:b7:09:ac:25:f9:aa:0a:73:47:ee:93:66:a3:e1:
                    7d:8b:b1:2f:c0:d8:38:40:21:d0:93:3a:11:47:f2:
                    d5:b5:a3:9e:02:4d:71:69:3a:c0:c7:aa:8f:10:5e:
                    b4:83:f8:d7:49:3b:a2:53:ad:1b:65:f8:02:cc:29:
                    69:44:c1:19:66:6d:58:eb:6d:d8:3c:2f:99:56:af:
                    26:65:47:e2:66:f8:0e:42:a1:38:a1:51:b4:17:b6:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7F:5A:53:15:C3:AD:73:6B:A1:1F:3F:CA:79:B2:72:C4:B2:91:F8
            X509v3 Authority Key Identifier:
                keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bc:e9:45:0b:53:de:bd:41:d9:52:5e:48:b8:48:b5:6e:29:
         60:5c:5f:2d:0a:69:17:5d:89:b4:cb:0e:41:ce:90:09:4a:2f:
         48:d3:ee:1e:35:05:a4:a8:2f:3d:1b:cc:08:fe:f3:aa:18:28:
         09:23:5b:d7:88:bd:b7:d1:62:8b:75:5d:6e:4b:60:1a:06:29:
         2d:d2:e7:67:ae:ae:de:98:6c:8e:53:22:78:b0:8b:aa:8a:39:
         e1:69:6e:9c:67:cc:27:25:ea:7c:4e:bb:73:21:40:48:3e:cf:
         c9:19:5c:7a:fc:6a:2e:c0:9e:8c:7e:25:6b:e1:21:de:b4:28:
         58:80:72:15:0b:59:cf:ee:65:f6:d0:39:02:e1:18:49:e6:42:
         57:4d:42:51:e2:5a:31:5c:bf:1a:62:df:b5:0a:0d:2d:ee:d8:
         a4:9a:8e:10:7e:44:be:62:6c:55:b1:63:6d:52:69:a5:cb:55:
         3a:52:c9:8e:48:2b:83:02:1c:e8:e8:a1:1c:99:24:84:33:45:
         48:04:1d:56:24:c6:b8:8c:fa:8c:f3:f8:e9:6b:3f:9d:a9:5b:
         eb:19:48:40:32:d6:fa:eb:77:50:8d:cc:30:aa:8d:28:e6:1b:
         89:ca:07:be:77:7f:7f:ec:43:4c:f6:30:b7:50:f4:64:82:01:
         9b:03:28:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org