Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
File:                     _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json)
Hash identifier:          y2etfj+H1/Sc9Tbe7yCv88JjzVdjCRFOVIE5fSA0hbM=
Subject key identifier:   12:11:1F:2E:20:34:50:6F:A4:E1:D1:1A:8F:C1:E6:3C:6F:73:12:26
Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
Certificate issuer:       /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Certificate serial:       030C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
Manifest number:          0300
Signing time:             Sat 23 Nov 2024 00:48:42 +0000
Manifest this update:     Sat 23 Nov 2024 00:48:42 +0000
Manifest next update:     Sat 30 Nov 2024 00:48:42 +0000
Files and hashes:         1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: dzNd3aG3RnotYNidgm8yo2HpIAo5RzaePwlmRVjB3LU=)
                          2: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: YYjlPAti43wnuGn+eT8matxHDnOUwzHN9T3OjstTfu8=)
                          3: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: EeX8Q5zf2nyJcmEtUQEot71vzZAwJeCr2eUPG92eMrI=)
                          4: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: 7Oc4l/ja0E02zMqJLQgSwY4btjYC0BXYK3WYalX2Llg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
                          rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 00:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
        Validity
            Not Before: Nov 23 00:48:42 2024 GMT
            Not After : Nov 30 00:48:42 2024 GMT
        Subject: CN=6741266a-7612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:1b:a0:ed:59:a8:00:41:d5:87:15:c2:8e:
                    2a:bb:a0:a4:b1:62:53:cd:f7:5c:64:83:13:e8:e5:
                    95:91:24:13:38:1d:8e:8d:45:ba:c2:ed:f0:b0:9a:
                    ef:1b:b5:00:ec:b4:d1:a2:1e:62:d4:b4:62:ea:e9:
                    c4:92:6c:4e:ef:a1:af:2c:28:7b:1c:ec:d4:4c:35:
                    3e:05:06:1c:42:cf:b6:fb:0b:d8:f8:84:b1:06:d4:
                    30:a2:2e:5a:aa:b7:d8:8c:08:0e:ba:d9:fc:45:8f:
                    f3:54:70:ba:90:e9:aa:66:cb:6b:8f:2a:c8:e4:cd:
                    f4:a4:58:4c:40:d8:4d:14:39:21:4b:ff:d3:29:55:
                    78:d5:6e:6c:19:c4:d3:38:65:44:00:81:e8:5f:b6:
                    33:b5:1f:ea:a5:ba:6f:29:bb:94:b4:80:62:f0:c1:
                    ae:ea:89:4f:e0:d5:28:88:9c:1a:a4:6c:35:da:25:
                    b9:84:b7:a6:10:8b:13:10:35:a9:85:5f:98:33:95:
                    bf:83:8f:db:36:37:fc:12:bd:2d:16:4a:9f:cd:c0:
                    1c:c7:3a:e8:ca:b9:fb:f2:ad:f3:ec:3d:4e:58:a3:
                    97:30:88:93:21:4b:df:b1:41:c7:f3:21:01:52:f6:
                    6e:ce:67:51:84:2b:4d:0d:e7:b8:a7:60:9c:80:92:
                    49:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:11:1F:2E:20:34:50:6F:A4:E1:D1:1A:8F:C1:E6:3C:6F:73:12:26
            X509v3 Authority Key Identifier:
                keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:bd:c5:72:be:2e:37:b0:8e:4f:fe:0b:fb:ea:1a:06:b8:8e:
         56:a3:60:1c:fe:2b:7d:b4:aa:da:76:62:fa:ff:a7:7a:e0:63:
         2a:4f:1d:56:f5:3e:a4:da:99:7e:62:dd:26:75:a0:37:b8:9c:
         a1:63:89:90:04:6e:25:3f:25:b7:6d:0a:b0:e6:ba:a0:5e:d8:
         f7:89:1e:3a:68:73:4a:87:12:af:a1:79:56:af:d7:eb:be:30:
         c4:aa:ea:ed:91:79:79:e3:d2:3f:80:bc:59:57:48:22:ad:6d:
         f9:4f:d9:93:87:78:d0:b0:1b:d2:95:b1:f8:b3:73:19:f0:8a:
         fd:da:27:f7:26:e9:c9:81:20:80:6a:e1:49:f3:22:cf:b9:7e:
         37:cd:29:1b:e7:23:f4:c7:8c:e0:01:7d:21:8e:84:c4:c3:ab:
         b3:5e:f9:20:92:3f:3d:ff:85:e1:0f:10:93:87:71:b2:17:90:
         d0:a0:0b:16:e3:f5:77:57:78:35:28:88:c0:4b:04:07:68:16:
         ba:02:2d:c1:60:a7:23:f2:dc:a2:13:da:5a:1e:d1:7c:fa:69:
         14:4b:6c:e9:14:c4:21:0c:ee:90:a6:e2:f9:f8:17:db:2b:30:
         4a:d8:f9:19:ad:8c:7a:f5:72:4a:31:89:35:9f:30:2d:8a:4a:
         63:a3:67:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org