Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
File:                     vwxRAalGDasWiyHwJOMMiVoCjEI.mft (raw, json)
Hash identifier:          j0O2wJQx2eNdrDa5oglgyFgFANqVvBricG6E5juTBoM=
Subject key identifier:   20:4B:5B:A7:CB:06:F7:BF:5D:31:37:05:F7:48:75:35:88:0C:67:84
Authority key identifier: BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42
Certificate issuer:       /CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
Certificate serial:       04A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
Manifest number:          04A0
Signing time:             Fri 22 Nov 2024 23:31:31 +0000
Manifest this update:     Fri 22 Nov 2024 23:31:31 +0000
Manifest next update:     Fri 29 Nov 2024 23:31:31 +0000
Files and hashes:         1: vwxRAalGDasWiyHwJOMMiVoCjEI.crl (hash: dP0ingkI7Hw/joIgWxg6b/JDZaykHcRhiovtxgH9+1M=)
                          2: 1829AEE8146B11EC81328F59C4F9AE02.roa (hash: aIxAvyaJTpqygmqgpU8RPaqkDh+o4vZaFakEjzwWwkw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl
                          rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1190 (0x4a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
        Validity
            Not Before: Nov 22 23:31:31 2024 GMT
            Not After : Nov 29 23:31:31 2024 GMT
        Subject: CN=67411453-ea7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:93:4f:e5:90:41:87:2d:d2:cf:1d:c1:81:
                    5d:23:9e:e4:8f:16:f8:9f:ec:3f:39:a6:e6:bd:84:
                    dd:d6:fe:8c:d5:e2:05:7e:7c:f2:b5:dc:2b:23:fc:
                    2b:33:51:94:07:3a:49:e1:ef:99:cf:22:ce:dd:40:
                    7f:d1:93:19:89:4b:44:4c:4a:ab:bb:4e:1f:57:c7:
                    89:82:6c:4f:a9:f4:39:35:fe:ff:bb:61:ea:c6:56:
                    98:ce:31:f3:dc:74:f5:63:da:34:9c:33:33:2e:25:
                    f2:59:9e:2a:c9:97:42:c7:70:72:3a:36:74:c7:32:
                    ed:fe:cd:b0:e2:a9:02:a7:aa:d6:ac:93:b1:24:60:
                    34:02:9c:4b:b6:bb:dc:41:76:35:9c:60:11:a0:46:
                    2e:31:8d:83:a8:cb:91:98:26:bb:56:01:32:34:bf:
                    a1:1f:46:fc:41:fa:7e:5a:73:5d:40:61:14:3e:65:
                    c4:61:bd:03:10:7a:66:46:93:b0:1f:23:84:a9:da:
                    f2:eb:f7:b2:21:90:ce:6d:a7:e9:a6:ee:e1:10:db:
                    31:bf:ff:30:35:87:4e:ed:2d:04:15:af:ed:c9:20:
                    ad:8f:4f:cb:41:c7:cb:0e:ba:a3:ed:07:f4:bf:c6:
                    43:69:6f:6f:47:11:c9:ed:d0:5c:77:15:98:95:24:
                    df:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4B:5B:A7:CB:06:F7:BF:5D:31:37:05:F7:48:75:35:88:0C:67:84
            X509v3 Authority Key Identifier:
                keyid:BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:85:2f:9b:bc:46:37:b0:00:62:34:bb:75:8c:18:77:99:ed:
         7e:f3:6c:84:0e:43:32:7e:af:4c:84:60:92:5f:aa:54:a4:58:
         c2:50:03:2b:e9:cd:69:a2:6e:9a:e8:1a:fd:fe:a2:84:a4:aa:
         4f:62:70:f8:fa:fc:37:66:07:af:ba:f1:0f:54:4b:e9:7f:c8:
         a0:ca:b6:76:a2:8c:52:8e:af:f5:7a:f1:37:33:ed:7e:fb:69:
         e5:cb:11:e5:54:e6:62:54:24:90:ac:05:8d:58:08:8a:f9:90:
         7b:35:6c:13:6c:66:bd:3c:23:59:6d:2d:d3:64:62:cf:05:eb:
         4c:b7:64:19:a9:b5:0e:6b:75:c1:e1:dd:bd:4e:56:43:72:d7:
         ed:80:70:22:43:01:0d:04:85:c2:fd:3b:16:c3:8f:fd:e8:33:
         79:54:bf:a5:aa:10:cb:ad:40:f3:65:61:49:12:f3:79:51:3c:
         a3:83:4a:7f:39:29:32:a6:ef:27:8c:2b:25:ae:dc:06:a9:bd:
         b2:4e:df:b1:9a:b5:b2:1f:10:52:92:38:87:af:85:7b:6b:2f:
         d1:da:be:bd:73:d3:e7:06:4d:a8:e7:c7:cd:88:ce:67:72:da:
         83:a8:1f:96:85:e9:38:49:1e:de:4b:02:f6:5c:f2:86:a6:43:
         bd:50:b3:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzMDcxMTAvBgNVBAUTKEJGMEM1MTAxQTk0NjBEQUIxNjhCMjFGMDI0RTMwQzg5
NUEwMjhDNDIwHhcNMjQxMTIyMjMzMTMxWhcNMjQxMTI5MjMzMTMxWjAYMRYwFAYD
VQQDEw02NzQxMTQ1My1lYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu8yTT+WQQYct0s8dwYFdI57kjxb4n+w/OabmvYTd1v6M1eIFfnzytdwrI/wr
M1GUBzpJ4e+ZzyLO3UB/0ZMZiUtETEqru04fV8eJgmxPqfQ5Nf7/u2HqxlaYzjHz
3HT1Y9o0nDMzLiXyWZ4qyZdCx3ByOjZ0xzLt/s2w4qkCp6rWrJOxJGA0ApxLtrvc
QXY1nGARoEYuMY2DqMuRmCa7VgEyNL+hH0b8Qfp+WnNdQGEUPmXEYb0DEHpmRpOw
HyOEqdry6/eyIZDObafppu7hENsxv/8wNYdO7S0EFa/tySCtj0/LQcfLDrqj7Qf0
v8ZDaW9vRxHJ7dBcdxWYlSTfsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBLW6fL
Bve/XTE3BfdIdTWIDGeEMB8GA1UdIwQYMBaAFL8MUQGpRg2rFosh8CTjDIlaAoxC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMwNy9BOUE4MTlGMjBF
REMxMUVDOURDQ0MxNTVDNEY5QUUwMi92d3hSQWFsR0Rhc1dpeUh3Sk9NTWlWb0Nq
RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z3eFJBYWxHRGFzV2l5SHdKT01NaVZvQ2pFSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDMwNy9BOUE4MTlGMjBFREMxMUVDOURDQ0MxNTVDNEY5QUUwMi92d3hSQWFsR0Rh
c1dpeUh3Sk9NTWlWb0NqRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9hS+bvEY3sABiNLt1jBh3me1+82yEDkMyfq9MhGCSX6pUpFjCUAMr
6c1pom6a6Br9/qKEpKpPYnD4+vw3ZgevuvEPVEvpf8igyrZ2ooxSjq/1evE3M+1+
+2nlyxHlVOZiVCSQrAWNWAiK+ZB7NWwTbGa9PCNZbS3TZGLPBetMt2QZqbUOa3XB
4d29TlZDctftgHAiQwENBIXC/TsWw4/96DN5VL+lqhDLrUDzZWFJEvN5UTyjg0p/
OSkypu8njCslrtwGqb2yTt+xmrWyHxBSkjiHr4V7ay/R2r69c9PnBk2o58fNiM5n
ctqDqB+Whek4SR7eSwL2XPKGpkO9ULMQ
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org