Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
File:                     vLfPRDC7mOoEhRw0BybliBUOE50.mft (raw, json)
Hash identifier:          65dAL7qdQqW1spWcS02rn04pT3YYuLZwhVA5kILmsBE=
Subject key identifier:   F6:63:06:FF:42:E8:F7:51:57:F5:D3:8C:D0:94:E5:8F:3C:5D:B6:49
Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D
Certificate issuer:       /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
Manifest number:          66
Signing time:             Thu 17 Oct 2024 05:35:02 +0000
Manifest this update:     Thu 17 Oct 2024 05:35:01 +0000
Manifest next update:     Thu 24 Oct 2024 05:35:01 +0000
Files and hashes:         1: vLfPRDC7mOoEhRw0BybliBUOE50.crl (hash: PSMz0owB45E5h8GZnI1rKJAvZ4blEDeLTjs8BkeX1Rw=)
                          2: BD5B75800C4E11EF85EEFC1FC4F9AE02.roa (hash: nV0vvomgUuYAvIzu+zUsDjepnjclen17WArrRDCOOcE=)
                          3: F9393E440C4811EF97CBBC31C4F9AE02.roa (hash: 8Rz14qqnLJzTDtmQhY87UU9ZmhRFExlX0EXdINFDVKA=)
                          4: D6871FC40C5711EFBD14BD5AC4F9AE02.roa (hash: pMueZdZNVsSO9dkMJ6HNJEYyNaRswTRPg4jNaq1x/N8=)
                          5: BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa (hash: kU3sDSAugxDvj2jONja3ZA3jP5BMAHMZw6R2ums+q7s=)
                          6: 8F64B3240C4B11EFACEF2C6FC4F9AE02.roa (hash: Oc+7IC+W0+Xbte63+cuJ+plpWgmKJWGeEg9BO4bYTrQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl
                          rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Oct 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
        Validity
            Not Before: Oct 17 05:35:01 2024 GMT
            Not After : Oct 24 05:35:01 2024 GMT
        Subject: CN=6710a206-2bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:2d:45:82:ce:03:06:3f:82:b9:00:1a:9e:
                    80:e9:0f:91:77:44:67:ed:39:5e:3d:dc:a1:b5:3e:
                    0e:2c:91:25:10:48:43:98:1a:a7:c9:e6:a4:3d:78:
                    5c:c3:7e:21:4d:e9:21:59:b0:3f:dc:74:d2:08:65:
                    f6:ea:56:e6:c7:0c:31:99:07:b3:fd:18:15:21:d0:
                    8e:a7:88:e2:d4:44:d9:da:73:c2:33:4b:62:ec:ae:
                    4b:16:b6:09:a6:cf:5b:a2:14:55:c4:ec:37:20:cf:
                    ee:22:3a:69:95:d4:68:b7:fb:78:21:98:ae:47:a0:
                    1d:54:30:56:54:16:bb:6a:c9:10:3d:e1:66:9d:73:
                    35:5c:b2:c4:5d:6c:e5:ce:da:67:4b:9e:b7:0d:dc:
                    9f:86:60:e7:19:24:64:3e:0d:ac:13:ca:e0:4c:ca:
                    33:e3:44:20:ab:88:5a:e1:6e:ab:d4:bb:33:44:05:
                    a9:42:0a:8e:f8:7d:7a:c7:03:9f:32:14:7d:53:dc:
                    bd:33:7a:d4:d1:2e:9f:72:da:5b:3a:b1:d9:2f:48:
                    e6:58:d5:85:62:0f:70:51:62:27:4d:5a:92:f2:d5:
                    18:21:fc:56:54:62:2b:71:95:37:09:64:35:52:d9:
                    e7:93:bd:a5:a8:57:1e:26:57:40:9b:bf:60:bf:5f:
                    0d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:63:06:FF:42:E8:F7:51:57:F5:D3:8C:D0:94:E5:8F:3C:5D:B6:49
            X509v3 Authority Key Identifier:
                keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2b:de:46:bd:e2:41:14:74:2c:06:80:b3:0f:79:8e:eb:e5:
         05:7b:69:5d:17:64:8b:90:87:6a:4d:b3:d7:9b:84:a0:f5:16:
         0f:7f:57:7f:ea:de:32:b4:29:51:8b:19:0f:f5:15:7d:0a:99:
         d0:89:56:7d:9a:5e:4f:99:82:4e:00:ce:8f:44:df:a7:d0:fe:
         ba:08:92:96:60:ea:61:7d:2f:16:b6:21:b7:ee:10:d2:ad:be:
         45:41:85:2f:f4:76:a5:1f:7a:cc:82:31:17:e9:21:9b:f0:f6:
         54:52:55:b9:87:b2:13:16:82:ef:3c:2e:61:f2:d3:7b:bc:16:
         a7:0c:52:4d:43:81:65:5c:a6:1a:3f:b9:be:80:44:08:92:e2:
         be:62:5f:80:2d:87:fd:12:8e:0b:5a:1c:65:72:b5:2f:8d:5e:
         27:3d:9b:a8:20:b0:76:6a:c0:1e:25:8b:02:54:1c:38:9c:ee:
         e9:e4:2f:97:b8:6b:79:2c:3d:e4:9e:99:8c:4e:fc:4e:7e:2a:
         f4:64:ca:ee:7a:52:9c:ad:b0:bd:cf:f4:c4:e7:7d:11:6e:8d:
         04:88:02:83:e2:7d:f7:aa:d8:85:e0:68:26:f7:c0:04:11:a6:
         f9:4c:bf:41:8f:8c:4f:58:47:42:43:70:a1:d9:4c:aa:fa:e0:
         74:87:75:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 08:06:24 2024 by rpki-client on console-ams.rpki-client.org