Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
File:                     Ht151WWBY19_MpfG0nDHN0l4nj0.mft (raw, json)
Hash identifier:          Zfdj9CWWGxr2VCnHMslxsGWDMuaJC25ILmSR7hMedCw=
Subject key identifier:   2C:6C:62:FD:98:5F:59:EE:48:8D:55:F9:3E:64:C1:A3:15:EA:DA:9E
Authority key identifier: 1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D
Certificate issuer:       /CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D
Certificate serial:       0526
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
Manifest number:          051E
Signing time:             Fri 22 Nov 2024 23:10:43 +0000
Manifest this update:     Fri 22 Nov 2024 23:10:42 +0000
Manifest next update:     Fri 29 Nov 2024 23:10:42 +0000
Files and hashes:         1: Ht151WWBY19_MpfG0nDHN0l4nj0.crl (hash: RTw0UhBMbN8N7T8vNJl1eobTcUoT/o39/31rpAeHfe4=)
                          2: 23331070F9FB11EB8CFF5E7DC4F9AE02.roa (hash: F+k1pgKAm7HpOhKtY5/4J+QSbulAvGQUTiDf7IqkyBg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D
        Validity
            Not Before: Nov 22 23:10:42 2024 GMT
            Not After : Nov 29 23:10:42 2024 GMT
        Subject: CN=67410f72-ebf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:bf:64:60:79:ea:b5:16:ef:4f:44:3c:f5:
                    01:b3:1f:6f:32:6a:3e:ad:79:5c:57:6a:19:43:71:
                    83:14:12:d1:33:b7:b6:73:17:6c:b2:81:f9:eb:2a:
                    2a:fd:06:b4:19:26:e3:ba:08:12:d9:93:30:c2:99:
                    bf:5b:7f:6c:e5:6b:f1:c4:af:2e:f8:15:3e:4b:00:
                    f8:28:70:e5:db:c9:91:77:5e:12:bb:9f:7e:c7:fa:
                    e9:6a:b0:81:ba:51:fd:db:e7:f9:db:02:27:e4:d4:
                    4e:50:4d:a5:21:37:0a:3f:65:60:9d:a9:c4:cd:b2:
                    a2:bd:71:30:2d:36:a6:b2:59:bd:fa:e8:84:97:5c:
                    19:b1:2f:ac:69:75:12:7c:ad:3d:bb:20:c4:c1:5c:
                    13:fa:88:c1:94:19:05:29:86:08:86:ed:22:60:c9:
                    8b:6c:57:1d:eb:9f:5f:08:79:ee:8a:ae:54:0f:a2:
                    20:8f:d7:67:2c:30:2e:ee:88:5c:93:b4:47:c0:a8:
                    10:05:63:17:8e:f4:df:6c:23:1e:09:56:26:05:af:
                    ae:1b:6a:f3:5d:24:08:0a:b2:64:6b:b4:fc:f2:60:
                    2f:5c:33:36:3c:80:9b:1c:24:92:f5:60:92:7b:49:
                    ec:3a:18:9b:7d:5d:51:d7:c7:fa:ef:bb:b6:f9:5a:
                    2a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6C:62:FD:98:5F:59:EE:48:8D:55:F9:3E:64:C1:A3:15:EA:DA:9E
            X509v3 Authority Key Identifier:
                keyid:1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f4:b5:4e:4f:72:95:ce:df:8e:11:84:43:e4:8e:a6:dd:5f:
         d0:16:6a:c7:63:14:f2:ff:49:5a:a2:70:64:f0:4a:b6:41:1a:
         cc:84:8b:5c:a6:75:44:95:64:0d:a9:5e:a6:74:9b:ea:bb:17:
         e8:ad:c9:01:c1:09:d6:8c:80:69:df:92:d8:66:ff:af:dd:48:
         fe:a4:59:b6:7c:ff:fd:51:99:16:3a:85:a6:bc:59:b8:6d:8d:
         e4:a1:92:2a:ef:f3:ba:29:e8:68:25:9a:89:94:63:38:41:58:
         90:e9:df:b8:b4:5f:1d:ff:8c:f5:48:44:50:1c:6b:f1:37:0b:
         48:74:04:6f:4b:81:df:f5:d0:36:a5:9b:1f:ee:8f:82:4b:4d:
         39:a0:98:ad:0b:e4:28:6b:b5:3a:69:12:1e:b7:a8:ad:bc:3b:
         3d:d6:b5:72:d6:3e:4d:b3:8a:58:8d:dd:df:81:55:57:8e:10:
         9d:57:9b:99:37:48:3e:ec:43:93:e5:4b:0b:58:c8:b8:ec:dd:
         3b:6e:4f:d4:3f:b9:b6:93:cb:7b:58:05:04:1a:a2:0b:29:64:
         ba:3d:df:17:26:c4:d4:e1:5e:4c:08:21:63:9a:2e:85:72:34:
         d3:e0:ea:da:14:5f:37:03:a0:3c:b6:d9:c6:a2:b3:02:ae:fc:
         9c:8a:78:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org