Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
File:                     w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json)
Hash identifier:          4FYUn+0rlo+6ZK/jLgSaAlHEDd/zXTJPpGxWemYz/4A=
Subject key identifier:   A1:BD:AD:95:F5:B7:F9:72:DD:A8:9E:48:8B:F9:30:DB:9E:3D:E6:F0
Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Certificate issuer:       /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
Manifest number:          42
Signing time:             Sat 23 Nov 2024 05:21:47 +0000
Manifest this update:     Sat 23 Nov 2024 05:21:46 +0000
Manifest next update:     Sat 30 Nov 2024 05:21:46 +0000
Files and hashes:         1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: GrJ1OxxAz1bUGgp8KhnMckR0WiZnPu4cZ3/OonUEJDY=)
                          2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: RSlQ28v4R7Z7Z91/NWLcgcqSptGPnncTkhKlGUAo99c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
                          rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
        Validity
            Not Before: Nov 23 05:21:46 2024 GMT
            Not After : Nov 30 05:21:46 2024 GMT
        Subject: CN=6741666a-2d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:10:53:4d:89:11:d1:fb:51:86:f9:a5:47:
                    07:4a:e6:af:4f:05:d7:1c:a5:6a:b6:1f:d2:08:21:
                    7c:12:23:d4:3c:65:3d:a8:81:f1:da:8a:d6:d7:0b:
                    61:9f:75:e7:db:31:1c:c3:6b:31:95:28:22:64:be:
                    13:2b:d1:e1:50:a8:4c:51:c6:8b:ec:e1:ff:a0:9e:
                    73:5c:59:a6:38:45:18:ad:39:42:0e:09:34:6e:0f:
                    b7:9f:fa:a1:a2:89:97:71:7c:75:f4:43:4f:f9:8a:
                    ec:ea:dc:d5:ed:07:dc:eb:df:bc:a9:4f:ae:ca:c0:
                    74:28:9c:b0:88:c8:79:f0:30:d1:be:25:16:ea:ab:
                    f5:44:26:91:8f:ae:d0:96:a9:47:48:eb:e7:c3:4c:
                    50:a0:6f:a3:26:82:fb:f5:ca:34:f5:51:18:57:12:
                    df:19:68:00:f8:9b:f8:b4:cb:6c:ef:32:b3:0b:0c:
                    8c:d9:8d:14:5b:73:68:5f:55:07:17:89:af:5a:0d:
                    38:74:31:5e:48:f9:71:2d:78:1d:20:38:20:54:cc:
                    6a:a5:2f:8e:37:1b:45:03:fa:da:82:97:03:1b:ad:
                    bb:5c:ca:2c:1e:20:46:c4:65:49:99:93:cb:ab:a3:
                    13:2b:ea:13:0c:57:79:e6:e4:39:a5:ee:da:8d:bc:
                    e7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BD:AD:95:F5:B7:F9:72:DD:A8:9E:48:8B:F9:30:DB:9E:3D:E6:F0
            X509v3 Authority Key Identifier:
                keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a4:6d:66:24:30:b7:bc:e1:8a:48:90:35:fd:20:1e:96:a9:
         ed:a1:20:d2:16:2d:58:40:ef:17:44:b5:34:03:f2:f0:59:77:
         73:90:ff:ba:ff:ba:10:30:b9:09:6f:cc:e1:84:4f:3a:a2:fc:
         71:42:85:0c:47:57:97:dd:fd:b2:12:a9:8d:df:e8:06:ae:5b:
         d8:b9:0f:cc:01:06:50:59:8e:b4:e0:25:59:4d:05:21:c4:8b:
         83:81:47:0e:e2:ea:80:3e:0d:24:e9:ce:08:e3:83:3b:12:9b:
         22:d8:22:34:91:2b:6e:6e:32:92:0e:46:1e:29:c6:3a:d0:1f:
         f0:88:81:b8:6f:e2:c5:1b:f9:1c:55:54:a4:0c:91:0a:b6:65:
         e4:70:04:b8:25:bc:c5:64:ed:c8:9b:67:3e:dc:09:5a:24:26:
         16:4c:c6:37:d8:33:c4:4c:0f:b2:87:50:82:9f:84:f1:d5:d6:
         73:2e:45:ac:d6:70:47:a8:64:96:49:4b:ef:2a:1f:4a:05:2d:
         05:91:12:50:22:f5:2e:a0:67:fd:4d:9d:97:82:af:f4:cf:8b:
         4b:14:d6:e2:7a:33:3f:fd:e9:f0:da:4f:07:da:99:7f:a2:b9:
         84:ea:40:97:3c:19:89:b9:da:1f:2c:61:77:24:f2:ea:6a:02:
         e4:a1:dc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:26 2024 by rpki-client on console-fra.rpki-client.org