Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File:                     y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier:          QwyaOO1FZwigdGLyrHqABdvJnmhjQiMDd0TfUhU0ha8=
Subject key identifier:   3A:81:E9:03:46:77:4A:C2:3E:5A:0F:DE:5C:61:15:DA:1D:6B:06:4A
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number:          43
Signing time:             Sun 15 Sep 2024 09:53:39 +0000
Manifest this update:     Sun 15 Sep 2024 09:53:38 +0000
Manifest next update:     Sun 22 Sep 2024 09:53:38 +0000
Files and hashes:         1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: NP00lOtpxyNc7bO/efiT5TEoQQlG5GY+HJzY7kGEJVI=)
                          2: CD802A9A1BE511EFBC630883C4F9AE02.roa (hash: de4vNWdwOETkj9mhz2ImDDVKUmbG+1KIQgOwEqbfGeE=)
                          3: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: 2ZvR8MHi7NyojTKS1eQiZr7s7ixPWXKlZzJWOILwSsE=)
                          4: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: wXFw1WCYOzN+C3+tE/wlw+YhUZwlxJ82iP5vfZ3R23g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: Sep 15 09:53:38 2024 GMT
            Not After : Sep 22 09:53:38 2024 GMT
        Subject: CN=66e6aea2-75cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:3d:ce:95:b3:ce:2e:24:1e:d7:98:cb:a6:
                    0d:a4:f5:0d:be:cb:4f:b0:8f:a5:01:5c:0b:aa:bc:
                    37:6e:29:08:78:c8:3f:0c:f1:80:fd:57:b6:86:4e:
                    8c:48:7e:44:e4:fb:1e:98:7b:6b:5c:a7:f2:16:4a:
                    ad:2a:be:49:e2:87:51:9a:ed:61:33:e1:5f:df:47:
                    ff:c2:8e:a7:df:de:1d:90:d7:f9:7f:90:3b:fc:f0:
                    3c:3b:76:68:00:64:fa:d7:e1:16:e7:b9:48:c8:9c:
                    88:cb:3d:2f:5c:8d:4d:91:5b:9e:cd:e0:f4:0c:00:
                    a2:2f:ae:b3:df:f4:7a:c3:73:63:96:00:90:3c:47:
                    81:74:83:01:03:cf:33:cb:59:db:36:3a:90:82:c3:
                    75:4d:16:78:66:8a:01:40:ab:3d:2d:f5:e5:a3:7a:
                    51:73:2d:05:87:6e:93:27:b0:23:29:47:1a:8b:20:
                    b0:8f:c3:5d:cf:e4:09:dd:16:58:38:c3:34:0f:2b:
                    54:48:ad:ed:47:2a:57:02:48:13:d3:26:64:ec:8b:
                    ad:79:08:00:0e:af:82:47:dd:ea:90:26:18:33:26:
                    e4:5b:7a:af:55:5c:5a:18:3a:5c:60:84:da:cc:a7:
                    e2:d7:19:67:0e:a9:46:39:df:bf:75:33:9a:fb:b0:
                    94:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:81:E9:03:46:77:4A:C2:3E:5A:0F:DE:5C:61:15:DA:1D:6B:06:4A
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b3:a8:e5:3f:09:d9:91:9e:99:fc:24:5a:e6:46:18:3b:65:
         d6:23:1a:87:81:de:c3:06:50:72:96:8b:3a:18:ea:c6:e8:bb:
         39:97:c1:cc:d5:51:3e:49:df:7f:5f:58:40:c9:c8:9e:e5:fd:
         d1:f3:e7:e4:ad:a2:d0:ff:bc:0e:6b:fd:70:f4:00:26:80:86:
         d7:54:79:64:4e:36:6b:97:3d:d6:7d:e4:dd:12:e5:10:2d:f6:
         4d:7d:75:eb:f0:a6:a0:84:58:ba:29:57:78:f7:ab:78:4c:05:
         ae:79:67:09:0c:0e:ee:5c:57:c2:71:27:ba:9c:a5:ad:fe:29:
         dd:e8:2a:7d:a2:58:4f:0e:8a:9c:f8:50:e8:18:9a:76:78:eb:
         f6:0e:7e:e7:c8:bc:7d:51:34:a2:b7:35:7c:ab:5b:7e:43:c7:
         ed:14:8b:80:81:f5:b4:da:52:05:81:5f:5c:e6:c7:1e:e9:32:
         2d:81:de:b2:b7:a1:24:38:4d:89:3d:e9:f7:cc:46:2d:de:70:
         95:a0:b2:5c:16:e6:e6:51:18:17:af:4b:81:c7:0b:77:d4:c6:
         27:a1:bc:a9:f5:a4:0d:fa:d1:74:44:2b:b6:0b:9d:6d:f3:ea:
         49:f9:5d:f7:f6:d8:53:1a:10:17:87:24:60:6c:33:ce:24:c4:
         3b:6f:df:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 10:46:20 2024 by rpki-client on console-ams.rpki-client.org