Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
File:                     xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json)
Hash identifier:          oc5qfzl50HQaSM1swoNjdrs4f+KEHhKdBWk7Jyy8wdk=
Subject key identifier:   7E:20:8E:F2:61:5C:23:C5:18:88:D2:56:15:EF:07:C8:E4:7E:18:D5
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Certificate issuer:       /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial:       0DE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
Manifest number:          0DCE
Signing time:             Sun 24 Nov 2024 17:39:56 +0000
Manifest this update:     Sun 24 Nov 2024 17:39:55 +0000
Manifest next update:     Sun 01 Dec 2024 17:39:55 +0000
Files and hashes:         1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: c11jeuApXQvxcdYVPmm5tYCPSvki5tjkrxWYGFGkbxs=)
                          2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: /MAfFsCX3raA/f7POApleax8y0KylFoyhT7LCg2+x5I=)
                          3: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: FwsijiAcXJNw9uRIy+NvsVFxDP01PPqLaqodkv0G/5Y=)
                          4: AF573166309511EABE9B5934C4F9AE02.roa (hash: LK9gK8M2L2ZMh3tmQmG2YkeThdi/Q41kPuFCkYYXDA8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
                          rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3561 (0xde9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
        Validity
            Not Before: Nov 24 17:39:55 2024 GMT
            Not After : Dec  1 17:39:55 2024 GMT
        Subject: CN=674364eb-0aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:58:a8:2f:80:8c:ac:19:4b:5b:bd:58:0b:
                    05:8b:d5:1f:dd:10:45:f8:51:e3:af:27:31:df:aa:
                    36:f7:1d:70:17:c4:25:ef:30:53:22:d3:1e:10:5a:
                    e0:6d:d7:5b:9c:ff:a3:87:4f:62:12:0f:a2:f7:23:
                    b4:90:52:1b:f3:c3:3b:ce:32:ba:04:ff:c2:d3:1f:
                    ac:83:63:98:0c:93:ba:24:29:8e:5b:ff:96:48:e7:
                    cc:8d:f7:10:a0:af:2e:25:72:df:df:a4:69:41:0e:
                    58:2d:ff:7e:6e:16:2f:a0:9d:b7:0b:aa:a4:62:9d:
                    5f:5c:b9:17:eb:f3:60:55:e3:84:a7:ea:b6:e2:f5:
                    91:23:19:bd:aa:b4:a0:73:e7:37:a8:f5:70:d1:90:
                    62:d0:ad:a7:2e:09:87:52:d4:aa:fb:6a:86:33:7f:
                    a3:d3:85:59:8e:5c:6d:60:2b:56:49:cd:e2:d1:4e:
                    82:5b:ae:58:74:00:be:4e:9b:a7:9d:14:33:9b:e1:
                    d8:48:22:6d:5d:67:51:85:9f:f1:a0:5d:ee:ae:97:
                    92:ba:68:ad:53:6d:d9:cf:89:31:03:d8:30:0a:15:
                    79:f0:0f:d6:72:3d:84:b0:dc:41:a2:07:84:9c:40:
                    ca:10:ed:74:d1:58:93:fc:55:1e:06:16:46:a7:35:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:20:8E:F2:61:5C:23:C5:18:88:D2:56:15:EF:07:C8:E4:7E:18:D5
            X509v3 Authority Key Identifier:
                keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a1:9b:bc:70:e8:a1:68:bc:3a:c7:0d:17:4e:fc:26:97:a8:
         70:f1:79:dc:a4:9e:ba:da:e0:85:eb:aa:99:39:ad:c3:70:3e:
         a7:d3:d9:f1:4e:70:21:44:3f:cd:83:eb:55:6e:5e:c2:2d:0f:
         54:39:a6:c1:99:06:6e:fd:27:b3:e4:b5:8f:30:51:d6:cb:2e:
         9d:4d:ed:5d:fd:9f:0f:a8:5e:d0:7b:a8:4f:d8:af:86:0d:44:
         33:37:83:f2:ca:24:87:78:af:5d:9f:a7:8b:0f:8e:ea:b8:ee:
         8b:e5:2c:f1:b9:0e:04:75:9b:0d:8d:66:f3:3a:60:d4:c0:9f:
         59:de:21:ae:80:ce:50:74:a7:a4:d0:da:01:5f:a8:3b:5f:d7:
         20:59:bb:3b:e6:ce:27:a1:00:92:76:ea:37:98:9b:2a:31:15:
         eb:61:ee:b4:a0:8e:d3:67:85:2d:8d:9f:bd:7f:60:66:54:76:
         42:5f:26:6e:c5:3d:cd:2b:fe:c9:e2:ff:cf:86:59:65:a0:49:
         fa:8a:07:a7:56:66:eb:cd:c4:8e:a0:9c:c4:6e:92:89:5e:9b:
         cb:23:06:dc:a1:58:ce:0a:8d:60:3e:db:8c:24:79:26:44:ed:
         2f:b7:21:82:cb:5f:dc:b6:fd:00:fe:26:f0:ca:71:e2:91:5d:
         74:2b:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:09:49 2024 by rpki-client on console-ams.rpki-client.org