Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File:                     V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier:          q1fxwP5/rcda5GWZbuciLATDZnnT3UhiA3z2Yjyjf5c=
Subject key identifier:   58:85:7C:23:F9:B0:3E:37:25:25:FA:85:9E:35:33:40:B2:08:56:32
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer:       /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number:          06
Signing time:             Wed 23 Oct 2024 06:51:18 +0000
Manifest this update:     Wed 23 Oct 2024 06:51:17 +0000
Manifest next update:     Wed 30 Oct 2024 06:51:17 +0000
Files and hashes:         1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: YUyBwT1M7DLouQWbf9fP9gTVODMcoBG02fp5xIiAc8U=)
                          2: 4E9CBEBE8ADA11EFBC4C6E84C4F9AE02.roa (hash: 7STfeveEYSO1lwr+DsahUmbKcroTtvHSfv2dPo8RBAg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
        Validity
            Not Before: Oct 23 06:51:17 2024 GMT
            Not After : Oct 30 06:51:17 2024 GMT
        Subject: CN=67189ce6-b263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:d6:ae:fe:90:e6:a1:23:54:b2:36:8e:38:
                    bc:d9:87:f9:03:a0:bc:30:60:c5:fd:43:25:83:30:
                    02:08:31:31:05:dc:1a:65:d7:e0:5f:db:c3:4f:c0:
                    b7:ad:3f:44:cc:2c:fd:6a:80:83:62:45:44:a2:c8:
                    b1:80:25:17:28:fd:dc:98:16:1f:db:2b:4a:92:87:
                    d7:10:ff:9f:b5:78:27:4c:f1:a7:e1:db:10:5a:de:
                    8d:bb:0f:01:9d:8f:61:8a:39:5b:63:3c:44:12:ca:
                    d0:84:f5:5d:db:e6:61:d9:0f:ff:da:c2:9f:7e:5f:
                    2a:44:09:96:fa:a9:44:e3:fa:9c:41:1b:41:ae:07:
                    28:1c:aa:03:70:af:aa:b6:46:bc:b5:cc:90:31:d5:
                    f3:10:3d:d9:d6:29:25:a7:87:5b:dc:dd:ed:0d:db:
                    60:09:b7:dd:2c:ed:63:8f:1b:91:55:08:fb:d0:ee:
                    09:cd:35:56:ac:78:f1:6c:3e:e6:d7:00:c5:70:3e:
                    52:d9:d1:51:a9:2a:84:56:b1:92:e7:23:2d:f2:6c:
                    0b:e9:6b:c3:c5:ea:3e:a9:3a:d4:61:14:83:9e:e8:
                    96:43:5b:f3:94:6a:db:d6:15:83:2e:03:bc:0a:e1:
                    4c:ea:38:2a:79:35:59:77:47:99:45:f8:08:8f:49:
                    e4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:85:7C:23:F9:B0:3E:37:25:25:FA:85:9E:35:33:40:B2:08:56:32
            X509v3 Authority Key Identifier:
                keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:8c:d3:48:84:75:ee:a9:82:60:76:4d:4c:80:c0:bc:cc:6a:
         7f:8a:78:0f:a6:d3:5d:1c:b9:aa:8f:35:06:2f:9f:c6:5e:87:
         f3:1c:75:e8:86:fb:d5:22:7d:11:b7:0d:7a:d7:de:78:14:83:
         d9:95:f0:54:cd:2c:32:9d:a4:94:88:c7:b1:c7:9f:97:e6:bd:
         a8:f9:5a:66:a5:6e:e8:e6:dc:11:ff:aa:b4:a1:30:76:f4:fb:
         1e:00:4a:ca:ff:f0:66:f5:aa:68:7b:dc:e9:49:48:56:7d:b3:
         d7:96:4d:45:a0:84:0c:89:f1:a1:38:a7:c7:7e:38:dc:7c:18:
         22:76:eb:a6:ff:e4:d6:36:ac:fa:df:fe:7f:59:e1:c4:90:64:
         3f:c0:7b:2a:f9:2f:99:1b:74:27:10:40:9e:6e:3c:08:5b:e2:
         4b:46:42:59:1a:ef:e0:0a:f9:88:29:3b:c8:85:b5:1a:da:7c:
         22:98:d4:85:cb:06:1e:60:cb:3a:8b:81:f6:9c:d7:50:8f:47:
         2b:9b:40:c1:f9:25:b9:ef:a7:19:00:1a:d9:db:20:28:b3:d5:
         d1:ed:a8:18:95:cb:24:fa:2a:5c:0e:e5:b8:7c:63:e5:3d:7f:
         5b:0d:0e:92:e5:1a:c7:5c:26:e0:d6:a7:51:35:26:f2:ad:f0:
         fb:ad:1c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:22 2024 by rpki-client on console-fra.rpki-client.org