Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
File:                     VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json)
Hash identifier:          G9V0KAOns/yPyUtmuH4Zfh8hngDlcysptBlyEc4TuPo=
Subject key identifier:   07:C0:04:D0:66:6C:61:DA:82:17:7F:B2:7F:92:B7:BC:F2:F2:32:50
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Certificate issuer:       /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
Manifest number:          2E
Signing time:             Thu 21 Nov 2024 05:44:21 +0000
Manifest this update:     Thu 21 Nov 2024 05:44:20 +0000
Manifest next update:     Thu 28 Nov 2024 05:44:20 +0000
Files and hashes:         1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: 9VA6IokbyNSi+GUm8se1XLqD8rifkOwYJD0ZlVSJmBA=)
                          2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: 0MmgAOsynAk/z75v6F6/3mM/hRV1GTY1/gUKJqE0crQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
                          rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
        Validity
            Not Before: Nov 21 05:44:20 2024 GMT
            Not After : Nov 28 05:44:20 2024 GMT
        Subject: CN=673ec8b5-841c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4f:d1:5b:e5:1c:6c:9c:77:d6:6e:1c:ec:ae:
                    a2:6d:95:c7:37:14:eb:8f:e4:eb:05:77:d1:00:e3:
                    92:63:1a:0f:be:41:af:7f:3c:fc:7c:5a:37:2f:ac:
                    6f:be:c9:b9:ec:58:0b:ea:15:9f:09:7c:2e:40:86:
                    94:ed:d3:19:b9:78:1b:29:2c:2e:8f:13:9a:26:b8:
                    b0:ee:31:17:e1:5d:1e:d9:8e:06:2a:e8:5c:d1:80:
                    5c:50:a6:4b:bf:15:26:6b:18:20:f3:ca:5b:fc:d5:
                    87:41:be:1f:1d:06:a9:93:ca:19:f4:b3:96:2e:42:
                    2f:e2:63:d4:d7:3c:51:13:c9:60:b3:6b:bc:d2:2e:
                    ec:3b:7a:6a:42:34:ca:0e:b6:d3:bf:ba:ee:7e:fc:
                    75:84:07:df:d0:37:fc:aa:c8:32:ce:f2:a2:8c:86:
                    8c:e4:f0:94:5f:e9:38:15:52:59:54:a1:c2:d2:5d:
                    4b:40:f0:59:86:3b:9e:93:cd:7b:56:a5:7b:2c:9a:
                    32:b1:31:73:5b:c7:e4:7d:44:39:6c:96:3a:0d:e6:
                    31:9a:9c:73:61:7f:f0:77:c9:1e:a9:e8:70:0f:47:
                    12:a7:e6:da:6c:f3:76:63:b4:e3:c6:03:c9:b3:64:
                    22:f8:c9:b4:49:86:18:cf:42:9a:6a:c8:8f:1a:85:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C0:04:D0:66:6C:61:DA:82:17:7F:B2:7F:92:B7:BC:F2:F2:32:50
            X509v3 Authority Key Identifier:
                keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:40:1e:1a:05:6d:81:d6:d3:d8:9b:bc:fc:d7:87:bc:ce:26:
         f6:05:68:94:43:a5:6f:c4:2b:75:c2:06:9f:26:0a:e2:7f:b1:
         9c:0a:b4:e5:d4:a2:e7:72:31:db:02:85:9d:4d:88:17:b0:30:
         ce:cc:54:07:aa:f0:9e:d3:36:8f:2e:4d:d2:97:1d:c1:19:88:
         08:83:18:cc:6f:6a:13:19:ab:ff:dd:e5:75:63:03:b5:d3:a6:
         72:76:98:59:e3:24:24:88:b9:29:a0:6f:0b:b5:ae:ce:96:bb:
         8f:10:16:4c:b8:22:54:3d:3c:75:9a:a8:96:45:cf:37:6a:85:
         bd:f9:f9:16:bf:b3:48:db:7d:f8:f5:b8:10:43:27:51:d4:89:
         40:54:f3:0d:21:a2:2b:cb:11:16:12:d0:06:2c:64:e9:d2:f2:
         41:c3:c2:81:9d:35:13:ac:23:ca:d6:a2:b9:92:1f:f6:7a:b6:
         25:37:ea:58:99:19:5f:39:f8:93:87:0a:94:1b:5f:7c:a1:bc:
         9d:ea:00:78:90:35:af:78:3d:cc:5a:6d:9e:8d:f1:6e:78:2d:
         2d:a6:5c:d6:b0:0d:eb:8f:52:b6:93:48:ef:ab:f7:c0:93:1d:
         23:e4:14:fc:68:c7:c7:54:c6:43:bd:8b:e9:6b:58:82:7a:e8:
         64:9d:4c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:07 2024 by rpki-client on console-ams.rpki-client.org