Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
File:                     ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft (raw, json)
Hash identifier:          rXiYH3fsQF8tNMaL9GsiVMmGeHYN4dTSiuFo3Sn1oHE=
Subject key identifier:   CD:C6:91:71:1C:EB:E6:2E:E5:3A:05:CB:0F:3F:85:20:1D:A3:99:6D
Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4
Certificate issuer:       /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
Certificate serial:       0346
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
Manifest number:          0335
Signing time:             Sat 23 Nov 2024 00:40:20 +0000
Manifest this update:     Sat 23 Nov 2024 00:40:20 +0000
Manifest next update:     Sat 30 Nov 2024 00:40:20 +0000
Files and hashes:         1: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl (hash: 2d4147gsNNpN+BrD27gl0STm3XjGQH4I5tjkvPG1YHQ=)
                          2: 1E2EB8D09F3811ECBB84BD76C4F9AE02.roa (hash: 1WpEdRwcGN3vtWhbe0YafVKHoyPb3PH+roug1Q45T04=)
                          3: 1F26C9129F3811ECBB84BD76C4F9AE02.roa (hash: MGQuIf7b8pEJs0FKmZr0E0D/ZU/TElOpmNPZAx/GWO8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
        Validity
            Not Before: Nov 23 00:40:20 2024 GMT
            Not After : Nov 30 00:40:20 2024 GMT
        Subject: CN=67412474-b57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:7c:45:b0:2e:30:b4:19:8f:d6:c8:42:6b:
                    27:7a:4c:8b:a9:32:0c:a0:b4:cd:1e:46:4e:d4:df:
                    20:99:bf:aa:58:be:7c:0d:79:07:b5:d1:a7:9f:8d:
                    e6:da:3d:96:6c:5b:61:80:dd:44:49:15:62:30:d1:
                    77:1f:5b:c2:15:52:9a:de:79:82:f0:fe:ca:04:54:
                    73:fd:15:74:71:0e:7a:71:44:e1:ed:90:af:d3:73:
                    d5:c7:f3:5c:59:7f:51:03:01:7d:6c:6a:0a:dd:5a:
                    e2:28:ab:be:c3:d8:55:49:91:2c:d6:c5:8f:71:45:
                    92:a2:e9:7e:fe:cf:09:7c:52:0e:51:69:8e:19:4c:
                    5d:2b:b6:fd:80:09:fb:70:79:6f:3d:c0:00:d7:5d:
                    7a:d2:3e:8c:4f:c2:0f:0b:3c:2b:73:6d:12:29:d4:
                    44:ee:63:e3:52:52:96:57:8e:d8:55:7c:8c:10:1d:
                    09:db:6e:96:a0:16:de:a9:d8:bb:c2:3f:3f:fb:0d:
                    e2:14:37:df:47:11:4f:35:0e:06:cb:be:9d:5b:c5:
                    1b:c4:10:51:8b:dc:25:78:75:db:a3:c5:b0:5e:b8:
                    68:e5:5d:30:56:3a:a8:2c:40:70:4c:a8:c2:95:24:
                    8e:80:8a:dc:fe:31:57:34:44:f0:4d:53:86:d7:86:
                    07:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C6:91:71:1C:EB:E6:2E:E5:3A:05:CB:0F:3F:85:20:1D:A3:99:6D
            X509v3 Authority Key Identifier:
                keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0b:ed:b4:3d:99:60:93:26:12:e3:6e:8d:52:5a:94:7a:0c:
         4c:89:ba:25:13:45:16:f3:c6:6b:1c:78:1f:61:b4:7d:26:e6:
         ba:f9:3c:39:bb:65:10:52:1c:a2:df:de:0c:05:e8:78:ba:76:
         48:52:e8:ab:de:4a:cd:63:4f:cf:8d:82:5c:13:18:c2:10:f2:
         83:7f:0b:e0:6c:a6:35:44:a4:37:ad:af:97:8d:fd:06:87:58:
         4c:c5:15:96:f3:f8:3e:77:7e:d3:9b:49:7d:b3:3d:4d:7a:87:
         03:8f:09:3d:4f:28:98:96:74:bc:5d:c6:94:93:00:06:49:43:
         c4:27:e2:5e:a4:fa:9c:76:40:c3:56:bb:3f:24:c9:5b:be:92:
         9d:e6:07:94:1e:b6:3f:31:f2:e3:c0:ca:fa:47:66:79:ef:90:
         2f:7d:a5:43:0d:f5:6f:cf:b2:2d:dc:2f:b8:19:2c:9f:ef:90:
         42:d3:7b:a7:f0:7e:33:42:dd:42:63:09:aa:21:4f:9c:87:65:
         b1:16:28:b8:15:66:c3:9a:90:a3:b4:2a:84:3a:79:07:ae:3d:
         b2:88:e8:52:ee:13:de:bc:2e:cb:24:5b:28:a1:5d:9e:76:5c:
         16:ef:74:d3:f3:e8:83:bd:06:2f:72:53:b0:63:0f:a5:a2:c2:
         3a:58:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org