Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
File:                     E3ay871bTTWtlSsXkNgnRpktQW8.mft (raw, json)
Hash identifier:          e5WZ8/32Bceyn5Jf9kk8DMLKsc3nEPCxePCSjk1d//0=
Subject key identifier:   3E:DB:04:86:EB:76:29:76:FF:2E:3B:46:B2:E6:5F:5D:14:30:AE:C0
Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F
Certificate issuer:       /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
Manifest number:          03BA
Signing time:             Sat 23 Nov 2024 00:28:34 +0000
Manifest this update:     Sat 23 Nov 2024 00:28:33 +0000
Manifest next update:     Sat 30 Nov 2024 00:28:33 +0000
Files and hashes:         1: E3ay871bTTWtlSsXkNgnRpktQW8.crl (hash: oceSMl/QGVT3QSh8QMVpp8J0JmNxAnwvdjEQ6U2ZKzA=)
                          2: F03F059C391D11EF9A100142C4F9AE02.roa (hash: qhnUnP+aTE7BCo7LsbE6IS6BisEmm/xxVH8T66DbyII=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
        Validity
            Not Before: Nov 23 00:28:33 2024 GMT
            Not After : Nov 30 00:28:33 2024 GMT
        Subject: CN=674121b2-6077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:2f:89:d7:b5:5d:ba:66:14:38:d8:4d:fc:
                    60:12:90:cb:15:58:41:2b:35:3b:0c:3e:8e:a2:23:
                    95:cd:62:4a:26:74:0e:67:14:1d:85:1e:90:b7:3d:
                    5e:66:40:3c:05:99:18:8b:1b:d8:49:a7:b0:21:07:
                    af:45:cc:82:c0:3c:3c:2b:c4:f6:04:bd:09:51:b1:
                    ac:ff:6d:ef:06:d0:7d:c0:ba:67:01:38:9b:6c:2b:
                    16:87:24:74:c4:2b:35:82:35:c5:f5:16:f0:ca:86:
                    e0:3e:9b:bd:ac:37:8c:9d:0b:23:8e:11:63:ce:53:
                    ef:86:4c:80:86:80:39:22:da:e7:f2:ff:c8:89:3a:
                    66:2e:38:e6:09:9e:dc:56:7c:32:79:a5:a4:75:eb:
                    ec:8c:de:15:ec:11:fd:96:e8:ab:b0:24:25:bc:c8:
                    c0:0b:7c:49:bd:a5:13:6f:55:ec:b2:c7:34:d3:d7:
                    2b:64:83:68:d9:45:ac:27:6f:01:55:c4:04:85:1a:
                    75:d1:c2:59:87:30:10:1d:8d:ae:cd:e8:cb:45:57:
                    13:66:9e:6b:0a:b9:60:43:d5:b0:47:3a:a0:d4:80:
                    3a:87:19:a2:fa:c1:2b:72:c9:cd:78:84:b0:71:e5:
                    2f:33:d4:47:1e:ca:e3:40:a4:05:42:f0:15:0c:53:
                    86:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DB:04:86:EB:76:29:76:FF:2E:3B:46:B2:E6:5F:5D:14:30:AE:C0
            X509v3 Authority Key Identifier:
                keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:63:67:3f:b4:6f:e7:47:3a:17:f7:bd:ef:1b:8c:2e:c2:
         19:c4:48:d4:14:a8:c5:7c:30:45:90:aa:cb:1d:94:a6:a9:3d:
         61:32:40:5d:c2:cc:7e:01:ff:47:60:49:7e:22:4a:44:cd:25:
         6d:2d:96:fe:55:fe:13:ec:bc:1e:11:02:b8:51:d2:46:9d:00:
         b7:73:95:24:47:95:a5:4d:eb:80:ec:f2:e6:5c:af:50:05:ee:
         50:a8:03:07:91:8b:7a:0d:03:17:b3:52:93:a6:18:bd:0b:f3:
         9b:25:90:1b:78:e7:12:a1:bb:97:11:7c:d1:1e:52:64:40:9a:
         55:7b:25:c7:03:1b:e7:cd:d0:b9:2c:71:94:17:c4:8e:3f:57:
         b1:f4:8a:51:ab:bb:fb:f2:7e:d2:58:ba:36:a1:e5:41:fc:e2:
         b6:11:22:87:85:96:a6:e7:fa:b9:2a:a8:19:a8:55:f6:aa:e3:
         ef:f7:55:c7:79:73:1f:8d:ea:4e:79:8b:2d:05:88:69:b9:b6:
         dc:ed:0a:32:82:6f:66:ed:9a:4a:0a:8d:55:80:de:ae:d6:29:
         19:5b:ed:69:88:b1:5c:12:4d:0f:6a:4f:5b:da:5f:c8:6f:c6:
         f7:7c:ae:50:f5:2b:2f:a7:9f:aa:93:61:72:6b:14:c5:a5:21:
         d1:73:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:40 2024 by rpki-client on console-fra.rpki-client.org