Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
File:                     RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json)
Hash identifier:          5urGeYMMN67Gh0KzcPusaO5GKEGBf+ZzEQAX21U99Yc=
Subject key identifier:   19:4F:22:2B:7B:63:17:EE:A5:7C:B0:3B:E5:72:E1:6A:9E:61:B1:B5
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Certificate issuer:       /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
Manifest number:          015C
Signing time:             Mon 25 Nov 2024 02:16:20 +0000
Manifest this update:     Mon 25 Nov 2024 02:16:19 +0000
Manifest next update:     Mon 02 Dec 2024 02:16:19 +0000
Files and hashes:         1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: wLOSsus90/nnm8B5Vstw9VRvwhQ2TsJD6U2H7EoU790=)
                          2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: aWeGcwo+7uKNQSW4Ntew9XLYTtyOnPpUefRzhFuvQqc=)
                          3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: epiQvTpBAPUjrJhksVffAMtVFi86tak47vpaBV0eqns=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
                          rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
        Validity
            Not Before: Nov 25 02:16:19 2024 GMT
            Not After : Dec  2 02:16:19 2024 GMT
        Subject: CN=6743ddf4-c542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:8a:c9:5e:22:68:6e:d0:bd:d5:be:a3:42:
                    ec:ec:f2:bb:b7:d7:7d:25:09:2a:14:07:7c:e1:36:
                    9c:4b:1d:ff:e9:62:2c:0a:de:13:f8:fe:3d:ef:46:
                    7d:b2:c1:69:ef:7c:45:38:03:51:88:ef:80:9b:d8:
                    b9:15:64:e4:dd:64:da:24:25:02:5a:12:38:31:46:
                    91:4d:de:85:55:5f:13:52:51:df:42:2d:29:5f:f3:
                    7c:fa:5d:89:7d:07:9b:5b:0c:84:1c:42:17:5a:f2:
                    81:7f:88:b1:5c:3e:08:f8:f6:40:5a:1a:f0:37:60:
                    05:e8:b0:c2:a7:33:50:b1:ab:6d:e4:b3:de:e4:22:
                    da:21:62:06:f7:03:e2:cc:00:d4:78:61:36:c0:6c:
                    61:bd:45:70:15:00:dd:66:e5:a4:26:c0:45:2a:bc:
                    8c:ee:25:ad:d4:7d:37:72:9d:03:b5:51:94:67:ae:
                    af:4d:0b:54:46:58:10:ff:fa:6f:34:84:7b:70:72:
                    08:27:5d:b3:3e:b4:9b:cf:d3:f2:53:a8:76:19:e3:
                    2d:84:66:f2:db:85:e6:53:84:ac:fe:af:f5:45:e8:
                    ba:95:f8:36:f1:b3:90:4a:5f:fc:e1:48:14:e3:46:
                    76:70:07:32:26:1b:ce:ac:ba:d3:9b:47:ca:dd:a5:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4F:22:2B:7B:63:17:EE:A5:7C:B0:3B:E5:72:E1:6A:9E:61:B1:B5
            X509v3 Authority Key Identifier:
                keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a0:1f:81:de:66:63:d5:bf:43:07:ef:c2:be:85:7c:f3:b8:
         69:bb:31:ff:03:4e:9a:e5:76:88:5d:3f:84:3e:e2:2b:1a:4e:
         93:75:46:ec:14:c9:df:c2:ae:82:ec:ed:bc:9b:25:4a:b3:86:
         61:84:ed:c8:ec:70:d7:00:2a:59:ad:da:75:c7:e6:65:d9:6c:
         42:18:30:3c:91:9a:77:ab:b9:69:38:f5:95:f6:2e:e1:6a:7c:
         e2:d6:97:0d:46:4f:9b:54:e8:03:2c:e3:36:34:82:7e:a3:3a:
         1f:18:e3:54:31:db:76:85:43:e8:64:7c:18:61:69:02:f6:76:
         10:8d:f6:c4:fb:14:e9:7e:14:00:bd:e9:4b:70:0f:f2:54:16:
         c1:aa:fd:06:41:0f:ab:c7:fc:e7:b1:ec:d3:08:c1:74:c4:fb:
         bd:04:06:6a:ba:ee:44:b3:e4:6c:f3:1c:4d:ae:df:68:ab:f0:
         37:53:46:0d:ff:ea:6d:1a:df:1f:b3:8f:89:e8:7b:27:0f:6a:
         42:69:20:a2:2a:3b:84:ea:33:ca:11:62:bd:97:7d:ed:d1:5b:
         d8:6e:4a:80:6b:ae:42:ca:98:28:52:ec:63:40:6d:b5:98:69:
         ea:8d:13:0b:00:75:54:e6:1e:30:70:b7:6f:d5:16:77:7b:d2:
         0f:c6:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:24 2024 by rpki-client on console-fra.rpki-client.org