Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
File:                     VIQw6riOTjePtQBa-uXKucAAeho.mft (raw, json)
Hash identifier:          X5ygzuHjkQ4XYAM0tNSGUmdoEGf3rMyB5kRxatmD10c=
Subject key identifier:   17:E9:C6:7A:53:A2:62:FD:9E:8E:3F:63:BB:C5:CC:44:47:48:24:4A
Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
Certificate issuer:       /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
Manifest number:          19
Signing time:             Thu 21 Nov 2024 06:06:46 +0000
Manifest this update:     Thu 21 Nov 2024 06:06:46 +0000
Manifest next update:     Thu 28 Nov 2024 06:06:46 +0000
Files and hashes:         1: VIQw6riOTjePtQBa-uXKucAAeho.crl (hash: 3hkniTuUq8kUzpjHLT5hLaee/T0XU2DlN7zWNI7NdqQ=)
                          2: B91F8BF69EE211EF883C7D14C4F9AE02.roa (hash: YHRgzTcRXYcY+vg2gna0SRLiEWL1Wmt2RotdYv8L8KM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
        Validity
            Not Before: Nov 21 06:06:46 2024 GMT
            Not After : Nov 28 06:06:46 2024 GMT
        Subject: CN=673ecdf6-32ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:ac:28:eb:63:4e:1c:6c:5a:75:4d:be:2a:
                    48:1e:c5:3a:cb:ad:b2:d0:7b:a9:13:1f:c1:bd:02:
                    fa:24:85:10:9a:db:07:36:1b:40:b8:01:84:82:27:
                    f2:6a:9b:77:77:f1:10:f2:a8:62:07:d7:85:07:bc:
                    27:3b:19:46:13:46:13:df:94:2d:d5:63:d4:f2:dd:
                    52:03:20:51:ba:a0:24:12:cf:69:0c:4d:a9:03:f9:
                    fc:e4:bd:46:0c:4a:44:05:7c:bd:6f:01:0f:fa:28:
                    f1:6b:09:92:f3:83:9e:75:d8:16:e6:e4:c2:f5:e6:
                    87:e6:b4:d2:2a:0a:3f:20:90:d3:df:7f:e4:23:31:
                    74:28:9b:f7:54:45:d9:0b:e8:eb:78:de:5a:73:25:
                    25:ee:ae:2b:68:35:5c:44:3b:14:70:92:a4:6e:fa:
                    5c:96:6d:86:1f:5f:02:a5:14:57:5e:32:8e:76:b7:
                    18:39:9f:70:03:ca:63:4b:16:c7:5f:87:fd:67:83:
                    d1:53:78:0a:00:40:c6:86:0a:79:75:c3:0a:69:cb:
                    a9:9f:9a:39:f6:ad:9d:70:57:c6:09:d9:1a:35:e7:
                    63:f0:77:35:59:2b:12:d8:08:e4:3b:68:62:ca:2a:
                    96:1f:c0:42:88:47:11:4c:ad:b9:c0:14:68:83:95:
                    20:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E9:C6:7A:53:A2:62:FD:9E:8E:3F:63:BB:C5:CC:44:47:48:24:4A
            X509v3 Authority Key Identifier:
                keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:df:9d:b3:51:51:d9:5f:c3:49:de:f4:72:91:a8:fa:6e:c3:
         d4:b5:80:48:b0:b4:8c:e6:60:72:3f:29:54:84:8f:1c:a3:21:
         4a:7e:a4:44:9f:50:aa:f5:6d:e9:36:af:a4:bd:cf:bf:c5:14:
         68:6a:05:6e:c9:4d:31:3a:49:1f:1a:04:ac:1f:7b:39:50:c2:
         ed:57:dc:0f:72:43:d0:2c:01:ee:96:1c:17:ef:db:b0:4a:fc:
         c8:fb:dc:ed:66:31:32:00:73:58:f7:cd:72:2c:cc:ff:6b:11:
         6f:b1:f9:ca:de:46:27:bd:e9:e6:ae:0e:2b:6b:0c:69:d3:8e:
         08:73:2e:65:0f:d1:96:fc:84:a8:1b:f6:d3:f9:96:c3:ef:6a:
         3c:75:40:03:93:55:c6:7d:30:d2:5e:28:4b:f4:ba:18:8a:49:
         fc:9e:fe:32:bd:fb:2a:cf:d5:01:45:41:20:30:ab:1f:02:57:
         b5:be:32:61:91:9a:e9:fd:12:86:b9:a5:25:13:f5:17:14:cd:
         97:76:87:81:8c:db:34:83:f0:3c:11:46:f6:a2:0d:e2:15:e7:
         45:0d:8b:33:68:c4:4f:48:b8:88:13:3f:37:df:5e:1e:b4:47:
         a7:9d:a5:5a:11:d6:43:08:72:49:5c:b1:09:d6:a5:80:5d:9a:
         e2:ad:b0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:46 2024 by rpki-client on console-fra.rpki-client.org