Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
File:                     5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft (raw, json)
Hash identifier:          bhaHtS6nJ3OcUzd9gp8/Z9EU5RPVjVTrENfbHcm0pPA=
Subject key identifier:   D9:BC:2B:7C:FD:AE:2C:87:A4:3C:08:1E:E9:36:AF:F1:96:86:1A:03
Authority key identifier: E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
Certificate issuer:       /CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Certificate serial:       0760
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
Manifest number:          074E
Signing time:             Fri 22 Nov 2024 21:07:14 +0000
Manifest this update:     Fri 22 Nov 2024 21:07:14 +0000
Manifest next update:     Fri 29 Nov 2024 21:07:14 +0000
Files and hashes:         1: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl (hash: sT+aLCvl8RNrK5zvKzEt5K90CFVRO0itS7yAH8ynkQs=)
                          2: 493468827C1A11EBABA86F44C4F9AE02.roa (hash: TXTzY/F3yf3l1VfRyIe96MrKk1ufy7L7siNNP44CR3I=)
                          3: CB3F39368F9711EE927E086FC4F9AE02.roa (hash: FNwGRYPy9cwA+TIey5E9ATjMEP5oIhq7+WwZv3YLboE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
                          rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
        Validity
            Not Before: Nov 22 21:07:14 2024 GMT
            Not After : Nov 29 21:07:14 2024 GMT
        Subject: CN=6740f282-7114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0f:00:f7:68:c0:d0:28:6d:b6:52:77:d2:dd:
                    90:bd:9e:7d:02:c4:70:6a:9f:fd:e6:95:28:e6:ff:
                    f1:fa:b5:06:20:ed:01:b5:88:85:6a:62:5b:f0:4c:
                    7f:a4:31:ed:8c:ac:a7:8b:67:fc:16:4f:46:3c:eb:
                    ff:3b:47:67:2c:0d:03:e3:53:0c:d5:0d:f4:13:e9:
                    84:78:08:fe:5b:19:13:3d:80:2f:88:26:a3:6e:2e:
                    e0:a8:cb:49:28:8d:f2:87:f3:ce:e6:d9:a9:3f:bc:
                    54:58:8e:4d:98:0b:0b:da:b3:8f:cb:fb:72:9e:39:
                    a5:70:5d:57:30:d8:a7:66:68:5b:01:0f:69:dd:ee:
                    14:5f:54:2e:cd:c3:8e:19:d2:00:35:ca:88:54:05:
                    8a:d6:9f:79:a9:08:d0:a8:9c:27:6e:39:e9:05:4b:
                    c4:c7:3a:40:d7:3a:f3:4c:6d:78:54:a5:80:80:68:
                    53:03:af:bf:77:6f:01:29:7e:33:60:88:4d:47:b8:
                    4e:28:fe:7c:ad:ee:ad:46:97:59:fc:41:af:b3:e6:
                    86:b7:f8:f8:be:d4:5a:16:4b:9c:ae:f3:a4:28:26:
                    c6:99:49:78:e2:ec:29:72:c2:8e:1f:85:3d:fe:73:
                    13:f1:e7:b7:14:ee:06:87:38:f0:5c:1c:7b:73:64:
                    b8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BC:2B:7C:FD:AE:2C:87:A4:3C:08:1E:E9:36:AF:F1:96:86:1A:03
            X509v3 Authority Key Identifier:
                keyid:E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:0a:39:e1:fd:d5:21:c2:70:c7:0b:58:0a:39:38:81:2a:a7:
         7e:84:3a:38:65:e5:7a:77:be:3d:f2:f8:56:9b:ce:c0:a3:94:
         f9:48:25:3b:b4:fc:d2:67:43:91:13:a3:35:42:a5:64:20:86:
         62:b5:4d:91:e4:64:e9:92:e9:0f:d8:13:79:b4:e2:8f:5d:79:
         97:bc:29:4c:1a:f9:1f:b1:33:0e:37:fa:99:fc:ea:e2:dd:4e:
         98:da:18:e0:5c:8f:e1:3b:d2:9f:3b:08:ae:43:1e:c3:61:f1:
         f2:50:65:38:ac:19:ac:69:62:be:ba:b2:ba:2c:7b:3e:5b:f2:
         1e:c9:d1:75:2d:06:54:8e:9a:a5:6a:f4:18:95:3f:1f:41:33:
         2a:66:1b:8a:f3:7f:0a:5c:43:bb:23:70:10:55:34:66:94:d0:
         5f:44:c7:a5:a0:e9:05:2b:d5:3c:ac:6c:f7:39:90:5b:aa:65:
         26:4a:3a:97:3e:09:c8:3b:62:87:36:76:21:25:37:a9:bd:59:
         6b:5f:f6:42:9e:62:07:0c:82:81:c2:57:c7:f0:17:8c:6a:5a:
         1c:46:1a:9c:1a:e5:8c:7c:c8:b7:d2:d9:e9:64:f5:d6:c8:42:
         62:40:23:5c:70:4a:38:2d:83:b7:91:c9:14:b0:df:18:ee:6e:
         73:2b:4d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org