Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
File:                     Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json)
Hash identifier:          8rnPwVgdd9J3rvn8GuNpY76VLFmj1UubJCcyCrv3oyU=
Subject key identifier:   EC:6F:22:E3:B9:C9:ED:4D:F7:BF:40:6E:49:86:03:B5:FA:A7:A3:FB
Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
Certificate issuer:       /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
Manifest number:          4E
Signing time:             Sat 23 Nov 2024 05:13:53 +0000
Manifest this update:     Sat 23 Nov 2024 05:13:52 +0000
Manifest next update:     Sat 30 Nov 2024 05:13:52 +0000
Files and hashes:         1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: MKlBoY5MlRMfYderimG8/iIGYddcCxpVnj7+VLePZ+o=)
                          2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: J7/kiN3L5QvG4wInB+6wlLOPrN0QJOnlQzSphywWm/s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
        Validity
            Not Before: Nov 23 05:13:52 2024 GMT
            Not After : Nov 30 05:13:52 2024 GMT
        Subject: CN=67416491-a6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:11:fb:75:b1:c1:95:60:4e:18:de:b0:0b:e3:
                    d4:4e:29:d2:57:27:15:3a:47:8d:ef:61:28:1b:86:
                    3d:3a:4b:c7:bd:f6:29:0f:1d:bc:21:d2:b6:9b:e0:
                    80:4d:68:8d:29:0c:0e:11:71:e7:7e:86:73:10:76:
                    02:88:3a:3d:2b:aa:20:40:e0:31:51:31:e9:19:af:
                    dd:eb:24:88:16:8c:78:e8:da:06:5d:31:c2:9e:9a:
                    3d:5d:07:2e:98:4f:a5:60:b1:94:d7:99:2e:6e:01:
                    a4:77:6c:02:4a:bd:f6:3c:90:f2:82:df:7f:18:af:
                    5c:8d:c8:a5:40:a0:28:68:da:8e:8c:e6:53:1e:48:
                    2f:29:2b:e5:09:43:71:b9:e3:37:2c:a0:db:5c:a8:
                    29:bd:15:b9:39:41:da:62:dd:5b:c0:19:05:08:11:
                    d2:91:42:b7:90:0d:d4:95:95:b2:2b:d0:34:b5:3a:
                    96:56:a5:ed:e5:72:21:95:30:83:a3:60:ff:29:87:
                    86:90:ee:14:e6:3f:2b:3a:c6:1e:6d:91:a0:42:ec:
                    33:9a:e0:95:96:70:83:40:21:74:5e:f7:2c:3f:a6:
                    55:a0:2e:c8:55:b2:87:6c:2c:51:d4:e4:76:51:48:
                    05:17:b5:af:13:5f:79:91:7d:dc:9f:41:17:d2:5c:
                    43:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6F:22:E3:B9:C9:ED:4D:F7:BF:40:6E:49:86:03:B5:FA:A7:A3:FB
            X509v3 Authority Key Identifier:
                keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:68:68:f1:40:6a:35:07:98:c0:22:bf:e2:04:e9:7b:7d:f4:
         4a:f5:4c:11:ad:df:44:64:78:ea:07:fb:d9:bb:12:a9:83:d5:
         93:ee:e1:dc:43:1b:8d:fe:22:9a:40:cd:a6:56:c0:74:e0:8d:
         f4:36:e3:28:a2:07:02:aa:ba:99:8c:e2:92:c7:cc:23:c1:63:
         34:90:09:9e:be:d3:66:6b:ba:6e:55:b4:de:8e:9e:30:31:6e:
         f3:a2:a2:18:ad:a5:94:a0:6c:ac:df:a9:a9:44:28:8a:a7:92:
         14:95:29:c0:b0:6c:a8:82:bc:a9:37:0e:2e:c8:a3:e0:f1:2f:
         8a:2c:b1:b9:b0:88:ce:90:d2:03:b3:de:cf:b1:0d:8f:74:d3:
         93:11:18:27:47:13:7a:85:9b:70:b6:52:20:9c:f3:59:c5:5f:
         ca:d9:38:86:30:cb:64:cb:7c:aa:9b:44:07:06:3b:ab:83:b0:
         40:17:49:49:dd:71:db:be:cb:24:7d:81:09:7b:38:1b:48:b2:
         1e:31:27:a2:62:6c:61:0b:f9:25:a1:33:37:e4:e0:52:53:5f:
         74:63:16:06:32:f5:bd:2a:e8:4c:3b:41:d1:40:58:71:4d:f0:
         69:44:ec:fa:61:f7:75:46:2e:5a:4f:e8:76:4a:2c:dc:4b:bd:
         7f:1d:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:09 2024 by rpki-client on console-ams.rpki-client.org