Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
File:                     m1FsBRZinvsTjrDmhbBboA6_Tn8.mft (raw, json)
Hash identifier:          JDRQTjJzJrglVST8H5rJCMUekQvc1g2Qa8OG9ofa+6M=
Subject key identifier:   45:C4:45:19:61:48:0F:FE:E6:68:B0:D1:F0:5F:7A:EC:7B:64:04:62
Authority key identifier: 9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F
Certificate issuer:       /CN=A9193552/serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
Manifest number:          26
Signing time:             Sun 15 Sep 2024 10:13:19 +0000
Manifest this update:     Sun 15 Sep 2024 10:13:18 +0000
Manifest next update:     Sun 22 Sep 2024 10:13:18 +0000
Files and hashes:         1: m1FsBRZinvsTjrDmhbBboA6_Tn8.crl (hash: UHF0UjzUw7bo3iHz2y8tAasYPFlcYMsNGB7GsDszcl4=)
                          2: 8426E9543A8211EF9F1ED16FC4F9AE02.roa (hash: mvI32UqgcXrq4Dic68miAY5GJVO3OvbFSa1SeVN9nus=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl
                          rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193552/serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
        Validity
            Not Before: Sep 15 10:13:18 2024 GMT
            Not After : Sep 22 10:13:18 2024 GMT
        Subject: CN=66e6b33f-8880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:9d:7c:43:28:63:4d:6d:3f:64:59:fa:0d:
                    ec:b9:a6:ec:6b:e2:1d:de:f0:05:bd:17:c3:ce:39:
                    96:d4:b2:6b:02:b7:36:d3:cf:ad:97:aa:b7:67:24:
                    43:17:b1:7f:27:98:fb:c9:d3:ca:36:32:59:bc:2d:
                    e5:22:73:57:83:58:5a:34:84:91:af:2a:07:9b:1d:
                    e0:c5:e4:7e:b5:6b:59:cb:09:a2:a1:15:dc:b7:cd:
                    fc:29:4b:bb:42:3e:89:86:b2:7a:85:fa:1a:50:ec:
                    a2:74:0e:2c:c5:df:d1:26:b3:b3:be:8b:a0:62:25:
                    14:af:9e:a6:85:fb:b5:47:55:1f:fe:2a:ce:89:6d:
                    25:00:ec:f3:ab:24:0c:79:c0:55:99:8c:69:3a:57:
                    a3:81:7a:8c:2e:4f:02:db:36:02:05:88:41:f8:ee:
                    20:55:a8:3e:95:66:e5:7f:88:10:d6:07:50:30:54:
                    07:e5:d7:a7:d5:dc:d2:4d:ef:bb:23:a2:2d:d7:86:
                    d3:04:09:0b:77:d6:ba:4e:2b:84:62:c3:d5:0e:cb:
                    4e:05:ce:08:e8:e3:63:71:36:52:d0:86:8d:48:4a:
                    2b:c0:33:10:46:cf:30:84:0a:ec:97:f7:04:61:14:
                    65:5d:f8:8f:ed:cb:4b:9d:92:29:93:a9:8d:1d:e0:
                    dc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C4:45:19:61:48:0F:FE:E6:68:B0:D1:F0:5F:7A:EC:7B:64:04:62
            X509v3 Authority Key Identifier:
                keyid:9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fd:4f:8c:ea:ec:6e:97:8c:ff:32:4d:4a:19:88:ed:0d:a4:
         e8:9c:30:f3:39:fe:74:3f:cb:72:de:26:58:3e:15:e3:27:79:
         0e:ac:6e:87:06:7b:21:2f:45:e9:79:27:e3:d6:5d:8a:28:42:
         bd:d9:a3:17:48:33:52:a2:5c:d4:e2:47:5a:49:ae:91:0a:1a:
         cd:fb:36:f6:0a:72:30:9b:0c:96:c5:be:dc:52:c1:8e:ef:e2:
         dd:80:3a:67:f9:db:62:e1:bb:84:55:8b:c0:f3:99:3c:18:4d:
         6e:69:f3:50:c2:08:42:7b:e8:54:cf:03:bf:f8:9b:5d:c0:ff:
         42:56:df:72:de:c7:cc:f5:3f:b5:a9:12:03:ee:24:15:2e:da:
         fb:90:25:26:c5:3a:5d:20:ba:ad:f6:9d:39:ad:78:06:e8:23:
         c9:32:2b:0e:4d:04:6f:ed:aa:6f:3d:15:86:e9:a3:2b:9f:50:
         1c:da:5d:76:37:06:fd:00:3b:1d:f8:32:f2:4f:70:31:9c:43:
         0a:3f:38:2b:0b:ac:97:df:ba:9c:1f:66:71:72:27:64:c3:0a:
         23:58:61:85:31:d6:b4:41:87:bc:9c:35:b9:6d:4c:0f:7b:b2:
         09:9b:ba:19:ae:20:02:78:d4:f8:35:47:f2:00:14:69:86:c9:
         3c:f5:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 13:42:43 2024 by rpki-client on console-fra.rpki-client.org