Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
File:                     uD4K6Pgr-gYejEvHvnPpuANUDWM.mft (raw, json)
Hash identifier:          y9Hyj4YKSbrC5OaJTHRdQ5NRNpla1xTkHWQ8wLErltY=
Subject key identifier:   79:92:4A:46:57:07:37:66:B0:23:F1:E4:F0:A5:22:3C:7F:BC:ED:06
Authority key identifier: B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63
Certificate issuer:       /CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63
Certificate serial:       02CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
Manifest number:          02C1
Signing time:             Mon 25 Nov 2024 00:50:38 +0000
Manifest this update:     Mon 25 Nov 2024 00:50:37 +0000
Manifest next update:     Mon 02 Dec 2024 00:50:37 +0000
Files and hashes:         1: uD4K6Pgr-gYejEvHvnPpuANUDWM.crl (hash: mOu1b1/Ed6QW0nEfv7r7IIxRnQQsIexNP3TW7+U+mz8=)
                          2: 37132C0CB13111EE8FE79534C4F9AE02.roa (hash: Sem5Jc62J9wkjmg8bVcZbNhb6N3vuHHxOU2KhuiWEG8=)
                          3: 1DE1D7C0B12B11EEA9B63E0EC4F9AE02.roa (hash: 9XeIwVA1XElCTEPclBeEICQ5r+/qrjWQmyycp2+CznI=)
                          4: 2EBCD6C6CCF311EC86719729C4F9AE02.roa (hash: erIavO1BEA6yuxW1Ddxiq0YuolkG7uHYxff0nzGvNyU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl
                          rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714 (0x2ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63
        Validity
            Not Before: Nov 25 00:50:37 2024 GMT
            Not After : Dec  2 00:50:37 2024 GMT
        Subject: CN=6743c9dd-2eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:9c:13:70:68:24:97:85:b2:8b:c4:8e:23:
                    da:f5:bf:64:eb:90:e8:69:49:89:75:02:40:32:07:
                    8f:b1:f1:15:b8:3b:e6:c1:8e:31:22:e0:5d:0a:6a:
                    46:23:3a:5d:41:3d:fe:cc:70:94:45:cf:6b:bc:ea:
                    58:8a:78:83:80:44:8d:92:90:ee:2f:29:ae:e0:56:
                    e6:17:c3:76:af:68:1a:05:f1:30:59:6d:e2:66:1f:
                    6a:74:ba:8a:c0:8d:6a:a9:0d:cf:69:d6:dc:81:c7:
                    c4:85:a3:db:9c:78:1b:9e:37:7a:3b:7a:95:0c:9e:
                    13:60:e5:1d:4a:b7:ea:1e:4b:1c:e1:89:29:cb:34:
                    14:a9:4f:94:36:65:06:c9:43:fa:bd:06:93:d4:cd:
                    a9:b9:24:df:c1:75:dd:a5:fc:9b:ac:7f:df:b5:13:
                    2a:35:e3:47:fa:f6:70:17:2f:50:9b:62:06:75:58:
                    2b:0c:94:62:2c:91:81:e3:78:de:25:fd:ad:cd:47:
                    37:9e:46:09:6f:47:f5:a4:0f:7a:66:94:62:51:71:
                    d1:6b:3c:6a:a3:29:5f:07:36:dd:b2:3d:7d:74:2a:
                    6a:7d:f0:8e:82:7a:1b:1a:e0:dd:82:63:29:90:19:
                    5f:fe:fb:51:d4:e5:82:d3:de:c2:ca:fa:b1:5f:57:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:92:4A:46:57:07:37:66:B0:23:F1:E4:F0:A5:22:3C:7F:BC:ED:06
            X509v3 Authority Key Identifier:
                keyid:B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:9f:78:0e:21:dc:fe:04:16:ce:e4:91:1e:89:9c:77:7d:1d:
         2f:cf:d9:91:41:02:a6:91:15:2e:24:41:26:45:b8:94:6d:20:
         c4:88:31:a7:87:ca:e9:aa:8b:57:fe:9a:5b:ca:9a:25:8f:7e:
         68:f7:12:65:3a:84:1c:8b:79:1d:e7:de:61:30:ce:23:0c:0f:
         2c:44:97:0a:7d:2d:e0:af:b9:67:c2:fc:da:1a:8a:4e:84:70:
         44:3c:37:80:ef:00:07:f5:18:51:0e:06:0b:4f:55:c7:27:7d:
         00:26:06:7f:2a:cd:96:f4:71:39:82:6a:f4:5b:dd:ac:7c:1a:
         8e:77:48:fe:cf:9f:37:cd:84:e5:7f:2f:e3:bd:47:c6:12:fa:
         5e:09:94:62:60:a3:18:43:b2:6d:71:7c:43:fe:d1:b8:41:8e:
         82:a3:7a:6a:bc:7b:05:84:fe:98:5e:a9:9d:11:f6:cf:68:98:
         f3:50:4f:85:a9:e6:4c:e7:10:93:37:19:d0:d4:e2:2b:97:e5:
         ae:12:41:68:0d:3e:76:15:81:a9:57:26:6e:b8:ad:ac:4c:57:
         f4:18:02:d6:57:1a:10:51:07:1a:41:39:b4:12:9e:bd:9c:a3:
         af:30:2b:a3:5b:82:9f:43:33:19:2b:67:f0:71:62:5b:86:90:
         41:87:47:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzODYxMTAvBgNVBAUTKEI4M0UwQUU4RjgyQkZBMDYxRThDNEJDN0JFNzNFOUI4
MDM1NDBENjMwHhcNMjQxMTI1MDA1MDM3WhcNMjQxMjAyMDA1MDM3WjAYMRYwFAYD
VQQDEw02NzQzYzlkZC0yZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAveScE3BoJJeFsovEjiPa9b9k65DoaUmJdQJAMgePsfEVuDvmwY4xIuBdCmpG
IzpdQT3+zHCURc9rvOpYiniDgESNkpDuLymu4FbmF8N2r2gaBfEwWW3iZh9qdLqK
wI1qqQ3PadbcgcfEhaPbnHgbnjd6O3qVDJ4TYOUdSrfqHksc4YkpyzQUqU+UNmUG
yUP6vQaT1M2puSTfwXXdpfybrH/ftRMqNeNH+vZwFy9Qm2IGdVgrDJRiLJGB43je
Jf2tzUc3nkYJb0f1pA96ZpRiUXHRazxqoylfBzbdsj19dCpqffCOgnobGuDdgmMp
kBlf/vtR1OWC097CyvqxX1fT4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmSSkZX
BzdmsCPx5PClIjx/vO0GMB8GA1UdIwQYMBaAFLg+Cuj4K/oGHoxLx75z6bgDVA1j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDM4Ni8wNkY4NDA4Q0ND
RjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1nWWVqRXZIdm5QcHVBTlVE
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VENEs2UGdyLWdZZWpFdkh2blBwdUFOVURXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDM4Ni8wNkY4NDA4Q0NDRjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1n
WWVqRXZIdm5QcHVBTlVEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2n3gOIdz+BBbO5JEeiZx3fR0vz9mRQQKmkRUuJEEmRbiUbSDEiDGn
h8rpqotX/ppbypolj35o9xJlOoQci3kd595hMM4jDA8sRJcKfS3gr7lnwvzaGopO
hHBEPDeA7wAH9RhRDgYLT1XHJ30AJgZ/Ks2W9HE5gmr0W92sfBqOd0j+z583zYTl
fy/jvUfGEvpeCZRiYKMYQ7JtcXxD/tG4QY6Co3pqvHsFhP6YXqmdEfbPaJjzUE+F
qeZM5xCTNxnQ1OIrl+WuEkFoDT52FYGpVyZuuK2sTFf0GALWVxoQUQcaQTm0Ep69
nKOvMCujW4KfQzMZK2fwcWJbhpBBh0f6
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:23 2024 by rpki-client on console-fra.rpki-client.org