Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
File:                     xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json)
Hash identifier:          6obkr3hSBFmEqV8um7v/y+wYTPdfmzojn7Mw0WOTIQ4=
Subject key identifier:   E6:17:BE:47:A0:52:A8:09:36:D4:43:E1:EF:63:93:60:54:E7:02:81
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Certificate issuer:       /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial:       0746
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
Manifest number:          073B
Signing time:             Fri 22 Nov 2024 21:11:49 +0000
Manifest this update:     Fri 22 Nov 2024 21:11:49 +0000
Manifest next update:     Fri 29 Nov 2024 21:11:49 +0000
Files and hashes:         1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: d2gfM9u4FnWjmLfGb1A0pEAQz39Tq0SNJ9+RTp5/FLk=)
                          2: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: pAxKOEsb1/KFe+q3FlaBgvrNZLF2dQ46tY3qWb9WHrw=)
                          3: 21EE9510083211EB81509633C4F9AE02.roa (hash: wjVXkLI0cRiF7TL9Zg9ZcPtd+sgFgSN+IcqPU2UoUBo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
                          rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1862 (0x746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
        Validity
            Not Before: Nov 22 21:11:49 2024 GMT
            Not After : Nov 29 21:11:49 2024 GMT
        Subject: CN=6740f395-2f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:69:d6:f1:2f:95:1e:1e:2d:8a:06:e0:db:2f:
                    f8:34:4e:2d:f2:ba:9f:0f:c1:c6:7d:83:18:d8:09:
                    25:f8:d7:63:30:69:0c:31:13:e2:06:10:c6:2e:12:
                    74:96:18:be:aa:b4:0f:08:e2:f6:e7:a3:11:db:1c:
                    f5:cb:3b:80:6d:3b:71:61:7f:b1:34:2b:12:42:2a:
                    7d:9e:5c:bc:6a:67:42:d7:68:fc:80:0d:2f:d3:4f:
                    db:2f:64:d4:b4:c6:bc:da:39:d8:67:8e:00:3e:80:
                    2d:de:e4:8d:da:ec:bf:f1:a8:ad:4c:d9:15:6e:d3:
                    ee:b0:6b:7f:c7:80:c7:80:c0:26:6b:f7:47:8c:3e:
                    fb:4d:11:b1:30:9f:de:ae:a4:45:1a:56:61:cc:d7:
                    65:a1:29:4b:b4:5c:7f:d3:38:30:b5:f9:98:2a:02:
                    eb:59:e7:79:94:9e:b8:37:0b:85:9e:78:5d:3c:17:
                    30:4e:09:04:a9:f0:19:e1:a1:c3:1d:57:64:60:18:
                    d1:3f:3f:dd:60:dd:2f:c6:94:86:1c:5a:46:37:58:
                    d2:cf:86:0d:be:12:b5:fa:db:3a:49:d3:3d:f0:48:
                    87:79:83:1d:c1:fb:6b:13:ca:32:19:89:17:96:e9:
                    13:0f:28:c4:28:e8:5f:13:59:c2:2a:cf:fb:e0:7a:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:17:BE:47:A0:52:A8:09:36:D4:43:E1:EF:63:93:60:54:E7:02:81
            X509v3 Authority Key Identifier:
                keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:17:ba:7c:02:f7:9a:1f:f4:24:8f:fb:af:f7:77:58:08:04:
         4f:b0:fc:c1:0b:a3:9d:fd:af:82:62:59:cc:d1:6e:75:ac:fe:
         1b:5d:1b:b6:aa:6d:62:d8:f5:f4:60:9c:ef:a7:58:c1:9c:b3:
         21:a5:2e:74:1f:c9:db:9a:2e:b8:69:6a:a6:21:71:37:ab:da:
         fd:8a:ee:24:df:51:94:a9:9f:c7:cb:97:3e:cd:bb:4e:b2:d5:
         0f:4b:dc:53:0a:0b:fd:31:35:1c:dc:e2:c6:91:57:38:aa:83:
         b1:00:48:bd:bd:ac:b3:7a:7f:3a:43:9f:88:3f:3d:e9:75:eb:
         54:fd:2e:f7:6c:8f:f1:a0:64:c3:15:eb:59:b7:d1:66:1a:40:
         ed:93:39:50:d8:d2:a9:66:89:97:1a:2f:cd:51:2c:12:7f:5e:
         15:38:a4:ff:24:ac:7e:aa:3b:80:00:2e:f9:b0:76:e3:01:70:
         d9:3e:c1:90:2a:e3:b2:3c:32:9e:35:8c:87:ef:43:26:52:47:
         88:46:3d:53:7a:e2:6a:f3:04:5c:f6:ad:8b:4e:6f:93:3a:8a:
         c8:4d:11:38:2a:ab:b8:78:6f:29:73:90:b7:c7:61:76:18:57:
         d8:1b:d7:9b:c7:08:30:28:7f:ef:68:a1:9a:77:87:55:d5:12:
         5f:4b:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org