Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
File:                     VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft (raw, json)
Hash identifier:          hTBB4Eno29k8wKY7Z09SKvDTQti+t7pQWCpnVhNq9r0=
Subject key identifier:   C6:32:66:68:F1:7B:C8:82:D3:F9:C5:F9:18:1A:8C:2F:9A:50:5F:01
Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
Certificate issuer:       /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
Manifest number:          14
Signing time:             Thu 19 Sep 2024 06:19:03 +0000
Manifest this update:     Thu 19 Sep 2024 06:19:02 +0000
Manifest next update:     Thu 26 Sep 2024 06:19:02 +0000
Files and hashes:         1: VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl (hash: 7cfX+s4sYU3UN2yrGk6AlirIU/9jffLz+qU1Y5h9IH4=)
                          2: 760FA4AA5B9D11EFBFA0A41FC4F9AE02.roa (hash: 9M+uOp4FadYXPMexyVArj6GMoHbJcEoJlKvsiGBBv6I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
                          rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 06:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
        Validity
            Not Before: Sep 19 06:19:02 2024 GMT
            Not After : Sep 26 06:19:02 2024 GMT
        Subject: CN=66ebc257-7909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:75:d8:00:41:06:34:92:1a:b8:de:e2:12:
                    65:75:0d:bb:06:ee:f6:91:69:a3:bd:65:18:a5:64:
                    79:c9:28:68:04:5d:1c:f0:b3:a9:0f:5b:b0:52:2c:
                    61:19:b1:da:ae:83:ae:e9:b6:d1:c4:50:7a:a3:ee:
                    8c:45:bd:f2:fa:81:27:09:97:f2:6d:2b:31:d3:f5:
                    1d:9c:8b:d3:6e:bd:22:8e:d9:7b:44:d6:d9:3d:f5:
                    bb:65:1f:e8:2c:87:b9:ef:71:46:54:0a:73:5b:32:
                    4e:0b:69:9e:8b:17:a2:dd:c3:ec:3e:e1:37:37:79:
                    82:c8:7b:94:8a:3c:40:50:26:69:85:70:23:97:aa:
                    7c:47:3b:18:b4:b8:60:09:1a:36:39:e0:b5:42:49:
                    94:d0:8e:7f:5f:2c:ca:cb:21:78:72:fd:44:5c:02:
                    ea:cf:e6:0c:86:77:36:f7:e0:fe:28:1e:b3:44:c4:
                    10:cb:73:0f:26:36:75:df:f7:57:e9:2f:97:6c:da:
                    67:c0:89:8a:51:1b:6a:af:15:9a:ee:83:37:30:ed:
                    7c:a7:28:b8:5f:b0:e8:9e:f2:ed:15:31:4a:e3:4a:
                    1f:50:8e:94:a0:b4:4d:e4:22:76:f7:1c:97:75:db:
                    14:4b:4a:23:b4:1e:0d:ba:71:b5:34:26:70:ea:05:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:32:66:68:F1:7B:C8:82:D3:F9:C5:F9:18:1A:8C:2F:9A:50:5F:01
            X509v3 Authority Key Identifier:
                keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1c:99:bc:0b:b2:78:3e:cc:d6:75:ff:9c:4e:d9:0e:5d:2c:
         9e:59:d9:f0:b4:ff:f3:d5:56:59:64:7e:8d:df:95:8e:ec:f3:
         f0:83:02:cf:82:e7:32:ee:dd:07:9c:c7:11:ab:49:93:35:32:
         f1:bf:cd:a0:c0:5e:91:1e:23:3c:82:e6:6c:8b:86:b0:ed:6e:
         4b:a6:7b:d5:b9:a5:b4:a9:a7:f2:d1:69:08:75:10:e5:01:48:
         67:00:82:0c:d8:e2:77:bc:b2:3f:33:57:8d:a2:17:c5:c0:5b:
         a4:fe:92:48:e1:34:b1:7f:72:48:d0:97:9b:7b:5d:c5:86:a4:
         c7:de:c7:3b:c8:9b:08:24:6c:1d:76:e6:d7:6a:d2:13:5b:96:
         d7:95:d8:6e:f1:e7:8d:56:d4:ff:a8:81:f7:a6:6e:72:34:4c:
         76:ce:64:b0:40:be:e6:a2:6b:3a:0e:c8:64:45:54:54:e9:46:
         cb:a5:1c:27:98:d8:5d:2c:18:31:aa:51:0e:33:59:5d:3c:c7:
         ce:bb:5a:f9:ef:49:a9:91:b2:92:83:fd:40:66:83:84:28:22:
         8c:b4:a8:10:38:ac:72:13:99:52:e6:b5:b0:35:b8:79:88:29:
         b2:33:86:f3:4f:35:f6:91:4d:4e:cb:95:3b:f5:ae:b4:71:92:
         2c:c6:22:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 07:13:52 2024 by rpki-client on console-fra.rpki-client.org