Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
File:                     xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json)
Hash identifier:          2naHanRcsXzISCuGh0UT6ykHYhDtYzMk7oAex+8oVho=
Subject key identifier:   7F:12:A4:9E:9C:F8:6D:7D:47:2F:B8:36:68:4E:B3:ED:38:33:A9:1F
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Certificate issuer:       /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
Manifest number:          0101
Signing time:             Thu 21 Nov 2024 03:19:49 +0000
Manifest this update:     Thu 21 Nov 2024 03:19:49 +0000
Manifest next update:     Thu 28 Nov 2024 03:19:49 +0000
Files and hashes:         1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: pkJGuE3mDeTQG/ahkYHaB9TnN3DqxpkRdjeLCC7W6/Q=)
                          2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: DCf9qWND7QA7KzN3251dDDXozk2L05NK9fYFAhwBS80=)
                          3: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: PB+Fwr7+OFv5312gtz53yebHRvlqOj9H0ezMU/u7UvY=)
                          4: 302B59C64EEF11EFB111F530C4F9AE02.roa (hash: aQ/AH7PdJFNkSR1Nh6TGi7Jf84xG8OlYq5cmgQwsJ0Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
                          rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
        Validity
            Not Before: Nov 21 03:19:49 2024 GMT
            Not After : Nov 28 03:19:49 2024 GMT
        Subject: CN=673ea6d5-6f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8e:e3:d5:ff:9a:ba:92:45:20:fd:18:96:5b:
                    bb:05:98:6b:b9:30:50:ab:8c:a8:f9:33:02:c1:b7:
                    e2:1c:00:7e:e2:c3:f2:cf:97:a6:d0:11:f3:02:95:
                    80:64:2a:9c:99:3b:68:fa:50:2a:a4:76:22:70:a4:
                    f2:3f:3e:7a:b0:10:53:d5:0e:a7:f7:70:81:94:d1:
                    47:f1:cf:b1:a2:26:f7:7e:4f:db:6d:8c:58:b2:d3:
                    3a:f0:51:75:f7:bb:8b:90:20:b2:0b:d0:4b:82:2b:
                    97:c2:6e:e2:32:f7:bb:a5:77:9e:17:34:ff:e5:11:
                    f8:c0:c1:c5:8e:0f:a0:40:6f:cc:80:20:f7:ff:15:
                    e0:19:1c:24:61:d8:e4:91:41:8e:17:a3:2a:7d:32:
                    59:8c:8a:d2:b5:43:49:a5:b1:d1:9b:62:4c:cc:2c:
                    0e:87:e3:0d:a2:6a:a1:6c:46:67:f2:ea:33:56:bd:
                    17:ca:37:15:ab:0b:11:22:51:f3:9e:ad:80:3a:e7:
                    08:23:7c:b7:88:66:bf:62:2e:67:30:e1:be:04:27:
                    5b:0a:57:f3:4a:29:80:5c:9c:d7:6a:5f:1e:fa:94:
                    63:c5:0c:1e:97:b4:1a:2a:d5:a2:6f:06:8a:1d:29:
                    dc:21:7e:82:7e:bb:bc:aa:9f:de:21:3c:55:4a:6d:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:12:A4:9E:9C:F8:6D:7D:47:2F:B8:36:68:4E:B3:ED:38:33:A9:1F
            X509v3 Authority Key Identifier:
                keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:73:45:c8:71:2a:58:bc:10:6b:09:79:f1:a5:39:2e:96:0f:
         fd:18:84:9a:a2:f6:8b:24:e3:2b:bb:c3:da:5c:9a:08:37:14:
         21:c1:42:6d:fa:b3:ae:b6:5f:24:9c:42:7d:50:7a:35:d1:a7:
         40:94:ee:5f:03:62:62:6a:53:be:04:29:5e:8e:48:01:73:a6:
         d8:37:f6:0b:a8:31:13:73:a3:f4:a4:3b:7d:a1:00:79:d3:9f:
         d2:79:c7:a8:96:75:e2:ad:08:ea:bb:8d:86:e0:57:35:c4:e6:
         51:45:08:21:75:be:67:a5:c2:84:a1:77:3a:dc:5a:5d:72:09:
         8c:0d:3b:5f:0f:99:c4:a9:1c:36:63:44:27:93:31:73:d8:44:
         9c:e6:46:5c:37:79:d6:33:2b:6f:00:dc:a7:0c:03:fd:2e:77:
         63:ee:95:54:cf:95:d9:bc:fe:24:36:80:a5:bb:11:88:26:7a:
         b9:26:af:40:4a:6d:cf:a7:cc:a2:0a:0a:8a:96:d6:ec:e2:38:
         1f:48:26:b4:41:97:ef:c1:1f:5f:73:74:b4:f4:14:86:e3:34:
         eb:3e:9e:60:5f:49:11:0a:ca:45:6b:10:a5:6a:96:e7:06:f7:
         b4:01:3c:1b:f5:42:a6:a9:d1:6d:a9:db:28:cd:9f:07:19:e2:
         93:4f:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org