Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
File:                     mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json)
Hash identifier:          M0NRKT3Sj9SAUENunhZK6+44Kf3rXSX+DEAIwAWr8zM=
Subject key identifier:   FB:05:B6:0B:FD:0C:B7:E6:6D:F2:11:4D:15:5C:A1:E4:F4:68:8D:C2
Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43
Certificate issuer:       /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
Certificate serial:       0371
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
Manifest number:          036D
Signing time:             Sat 23 Nov 2024 00:28:16 +0000
Manifest this update:     Sat 23 Nov 2024 00:28:16 +0000
Manifest next update:     Sat 30 Nov 2024 00:28:16 +0000
Files and hashes:         1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: jMbAWCNVwpofw1Nu24pubfd6xyXBQ61uu1vcZvx9Xlo=)
                          2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: NvR9oTP8aVtW41+HpR5ZnWPqrkmQ4StnKs9ffYZOrLM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl
                          rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
        Validity
            Not Before: Nov 23 00:28:16 2024 GMT
            Not After : Nov 30 00:28:16 2024 GMT
        Subject: CN=674121a0-1ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bd:08:e4:ea:0e:38:9d:90:56:5f:da:d6:33:
                    66:d0:56:71:a3:e5:eb:ea:08:56:9a:4b:ff:31:33:
                    e5:8b:7a:3b:ec:41:03:3c:b5:5d:01:b8:10:4b:44:
                    da:12:ef:c7:0c:c0:65:f7:f6:5d:d2:77:66:83:ad:
                    cf:1e:c7:39:33:25:7a:4c:93:a1:f3:a4:64:c4:54:
                    46:ea:78:36:6f:1e:e7:c7:ba:a2:20:63:01:b5:61:
                    7c:72:dd:84:09:d9:70:45:e9:20:44:c0:fc:82:6d:
                    2a:d7:e7:f9:6a:95:66:4e:7d:33:f2:58:d7:86:21:
                    97:24:26:a4:41:48:ba:d8:22:61:8f:b7:a2:49:6a:
                    b7:c1:15:38:00:56:06:aa:0a:5b:31:0c:72:d5:cd:
                    1b:3f:30:5c:18:e7:7f:75:54:3e:e2:ce:87:84:b6:
                    f5:bb:aa:49:25:c7:2d:54:46:0f:6c:a7:83:12:33:
                    ad:60:60:f8:fb:ff:0a:93:be:f8:27:21:79:d1:57:
                    51:6a:e5:81:c6:f3:41:19:c8:d7:e9:3e:7d:ea:43:
                    38:b0:e3:75:b4:5e:52:53:47:e2:9d:23:40:82:52:
                    7b:31:c1:16:77:1b:e9:06:4b:33:81:53:bb:09:e2:
                    63:92:ab:3e:c8:32:e8:70:b7:c9:3f:37:52:e5:80:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:05:B6:0B:FD:0C:B7:E6:6D:F2:11:4D:15:5C:A1:E4:F4:68:8D:C2
            X509v3 Authority Key Identifier:
                keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:16:81:61:a3:1d:d5:9c:9b:67:09:90:53:6d:4b:5b:4d:d8:
         5a:f1:e2:cf:30:75:e2:6e:ac:84:40:dc:a0:13:4c:13:f4:64:
         49:2a:50:96:fd:37:c2:66:e0:a5:0a:2b:e9:22:69:60:3d:39:
         74:42:3f:47:55:a0:8e:3e:3b:78:c1:73:07:fa:32:3e:a5:8e:
         94:05:db:ee:68:08:54:a4:eb:91:a2:a5:85:ee:06:ee:78:87:
         06:07:d8:18:a4:a5:d2:78:e2:79:f0:a9:77:82:57:f1:a1:5c:
         27:6f:56:cd:3b:73:90:b6:52:ed:72:8f:c2:d6:b5:9b:7b:fb:
         7b:ab:46:3d:83:07:81:75:69:a3:82:cd:ce:f7:d0:fc:bb:01:
         59:5a:57:26:e3:cc:ed:13:ce:d5:18:71:6d:53:bb:f9:1e:d2:
         78:e9:8d:94:06:4c:fb:4e:b3:bc:7c:1e:98:96:93:53:6a:36:
         4e:3d:55:ce:91:82:98:e2:2d:fd:1a:b7:43:d2:b7:8a:d4:41:
         da:07:8a:7d:75:5e:0e:19:3d:b5:ef:63:47:24:17:e1:f7:87:
         22:67:07:d1:37:e3:3d:ff:6c:c7:37:1b:57:ca:2d:a5:88:ef:
         b0:88:1e:a0:dd:1e:1f:bf:1d:2e:bc:e9:04:f7:62:a1:89:c4:
         6a:a1:09:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:41 2024 by rpki-client on console-fra.rpki-client.org