Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
File:                     FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json)
Hash identifier:          I67ejfq3aGN1Qe8pN0WLGepGgi3Soe9Tul2pXiLyOho=
Subject key identifier:   AE:06:A5:EE:1E:31:88:9B:6E:10:C8:71:DF:8F:E0:09:87:8B:7F:3D
Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
Certificate issuer:       /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
Manifest number:          0171
Signing time:             Sat 23 Nov 2024 02:14:05 +0000
Manifest this update:     Sat 23 Nov 2024 02:14:04 +0000
Manifest next update:     Sat 30 Nov 2024 02:14:04 +0000
Files and hashes:         1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: CdI8ZX/9xpIDRrtoPKGmO2ycrhwvcPdju11GvQLMYmA=)
                          2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: ZvVWR24fiTgTKL1AgxjjU+8hvOzH690FD/ftf9Pub2A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
                          rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
        Validity
            Not Before: Nov 23 02:14:04 2024 GMT
            Not After : Nov 30 02:14:04 2024 GMT
        Subject: CN=67413a6c-f6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:87:6e:0e:62:c6:c7:a0:9e:8c:f0:89:1d:
                    d2:62:c5:31:f9:a9:fa:3c:0d:23:17:97:d2:95:c4:
                    53:ad:b2:ce:6a:9c:35:0e:be:c0:7f:3d:ca:b3:c5:
                    dd:86:3f:43:74:41:6f:32:5c:a8:26:ad:96:d5:d5:
                    fa:e4:ec:eb:18:cc:a8:0f:a0:16:81:5c:c4:42:31:
                    18:ec:9b:de:d6:20:c9:c3:b7:38:23:f1:91:dc:3d:
                    37:b8:c4:4d:4e:aa:56:76:18:74:4c:d1:50:a7:fa:
                    4b:19:8f:6a:89:ff:54:32:7f:fd:eb:b0:36:36:bd:
                    a6:a1:90:9f:71:87:46:db:80:79:9d:a4:fd:3f:06:
                    69:0d:f5:4c:85:a5:fe:a6:ce:27:a3:57:f4:5f:ed:
                    75:1f:10:33:0c:63:3c:76:2a:ad:4f:83:b8:94:e1:
                    40:b3:87:3b:9e:a0:77:09:36:07:01:01:85:88:97:
                    10:e7:93:2b:6c:13:e3:aa:2f:27:b9:5e:d8:f5:34:
                    24:14:e1:66:6f:dc:b3:bf:10:8f:24:bb:75:1d:7e:
                    58:ec:d6:18:51:7d:62:e7:e4:41:78:c4:a2:33:a8:
                    9f:a8:2a:1e:96:b1:27:76:33:3e:92:9c:00:61:78:
                    f6:6d:1b:c6:30:1a:ec:45:a6:1f:97:d4:5d:b6:03:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:06:A5:EE:1E:31:88:9B:6E:10:C8:71:DF:8F:E0:09:87:8B:7F:3D
            X509v3 Authority Key Identifier:
                keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ed:41:88:62:45:a6:be:25:6c:d5:ae:0c:7e:57:64:c4:a7:
         ec:e5:6b:19:59:c3:ef:b7:6b:96:5d:d2:83:21:25:25:4d:48:
         ea:0a:96:12:91:7e:c8:40:e9:83:b1:e3:8a:b1:7e:f7:43:e0:
         56:ac:73:9b:d7:51:24:61:10:d7:e5:6e:47:7c:e3:74:93:90:
         7e:c4:3b:c9:de:b1:55:27:04:39:71:f2:ff:5b:95:8e:d9:ad:
         da:15:eb:ff:5f:fa:41:f8:c6:34:3d:2e:82:d8:90:4e:f6:6d:
         83:9a:39:9a:52:6b:50:89:24:34:7c:1f:d5:95:ec:f0:d4:c5:
         5a:b0:67:ff:25:20:76:94:26:eb:d6:6c:ad:3e:98:c9:3a:60:
         80:0e:b0:70:72:2f:33:73:0c:52:21:94:b6:12:f6:d8:75:63:
         66:dd:9e:44:ed:7b:42:4b:97:c7:18:aa:f9:57:21:b2:4e:47:
         be:39:5e:70:42:bd:53:1b:0e:3b:71:19:1b:02:94:ca:97:a8:
         e1:75:65:49:50:7f:8e:f3:d9:2e:fe:0d:e3:82:21:dc:3a:a5:
         85:ca:36:5d:9b:f8:74:45:78:51:12:a3:65:9f:5c:e8:04:eb:
         3f:ee:a8:d8:e5:78:4c:b5:ea:34:28:e6:13:41:a4:4e:cd:ba:
         27:0d:9f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org