Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
File:                     18TeE2hvQ1WFNoORXlQd7XU66zo.mft (raw, json)
Hash identifier:          DdoO2pcJAHb2lB5dp60esyU79afJ6T4KvIfZrpY3zeA=
Subject key identifier:   FC:CC:68:6D:24:50:B1:31:32:19:0C:CC:25:9D:EB:4F:A9:D4:95:E5
Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
Certificate issuer:       /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
Manifest number:          46
Signing time:             Sun 15 Sep 2024 09:44:33 +0000
Manifest this update:     Sun 15 Sep 2024 09:44:33 +0000
Manifest next update:     Sun 22 Sep 2024 09:44:33 +0000
Files and hashes:         1: 18TeE2hvQ1WFNoORXlQd7XU66zo.crl (hash: 3hB7PnCUtf9yNQsPrnroGCjhN9xbryYJXASJxcUc28k=)
                          2: 35A11C66086C11EFB8BD7815C4F9AE02.roa (hash: jx27R9R8a3ve62AOIqb5E0ou30ap1JUun3eJwYMuDqE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl
                          rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
        Validity
            Not Before: Sep 15 09:44:33 2024 GMT
            Not After : Sep 22 09:44:33 2024 GMT
        Subject: CN=66e6ac81-56c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:98:b3:09:8c:22:18:d8:98:e7:32:39:b1:1c:
                    a2:1d:0b:4c:1c:9e:ab:e9:52:51:e7:fd:7c:df:98:
                    24:e7:61:50:f3:6e:12:fd:d9:d7:18:91:28:05:a3:
                    b8:9a:bd:c1:97:93:c1:89:90:ca:ae:17:be:07:f1:
                    26:e5:ff:13:c8:e5:d9:c1:58:2c:eb:fe:5c:e0:23:
                    bc:9b:11:1b:3c:87:b5:db:9e:52:fc:f5:4b:58:f7:
                    54:14:2b:e2:5f:d6:9f:c5:62:66:84:2d:47:19:db:
                    6d:b9:0a:3a:75:10:da:4e:ce:6a:94:83:08:63:51:
                    31:f9:a5:d5:27:f0:bd:05:a7:6a:16:44:05:11:b5:
                    90:dd:98:93:dd:15:f4:a8:05:7a:c4:51:34:e5:19:
                    6c:ee:c2:51:6e:ad:23:64:96:cb:aa:f9:03:70:0f:
                    b5:fe:50:db:47:75:b2:a4:42:68:70:bf:a8:15:55:
                    4d:71:a5:45:3e:e5:84:68:96:3e:f6:ac:55:b5:f5:
                    ce:c1:b9:74:37:c6:a3:54:73:46:79:a4:b6:9f:a2:
                    9a:db:7a:50:40:7e:56:a2:47:32:ae:0a:c5:f1:d3:
                    18:75:cc:33:db:8f:34:50:79:a2:1d:70:5a:e0:20:
                    a2:5a:2c:65:36:f6:c0:7a:26:49:e3:86:ea:f8:a6:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CC:68:6D:24:50:B1:31:32:19:0C:CC:25:9D:EB:4F:A9:D4:95:E5
            X509v3 Authority Key Identifier:
                keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:31:49:b9:f8:b4:21:ad:2e:ce:ae:27:3d:7b:7a:9c:45:ab:
         8c:89:43:b6:be:5a:59:66:4c:22:c3:21:1b:f1:47:2c:4d:53:
         25:48:81:1c:92:42:d4:4e:ec:9f:e4:58:88:93:2f:eb:58:c5:
         65:5c:2d:5e:de:cd:78:a3:87:f9:97:f1:e5:b0:b1:d8:50:d7:
         af:d8:1e:fe:fa:56:9b:f9:a1:61:12:47:7d:4c:1b:ad:f0:89:
         98:82:02:67:8e:7b:5e:46:43:50:5c:10:a1:21:85:0d:f7:68:
         ce:c9:36:66:fb:98:b7:69:ea:0a:c4:d7:4a:62:41:12:7e:fc:
         4f:b7:0a:fc:f5:f2:e1:e1:88:08:f6:d9:5b:9e:19:73:fb:aa:
         e9:6f:7b:55:36:96:cb:2e:63:61:a1:b2:34:ba:e5:13:36:59:
         bf:3c:09:04:77:09:2e:1a:90:2e:ba:84:29:ca:e5:b6:9b:71:
         05:33:c4:88:c1:8f:3e:d7:38:3b:9c:49:9a:ed:c3:ca:66:6b:
         4c:19:05:20:52:5f:7e:a9:a7:6d:15:a4:75:74:a8:aa:b7:73:
         14:43:42:4d:c0:36:9f:58:ee:8e:6f:ab:0d:49:2a:49:94:d5:
         c2:99:39:b5:28:43:ab:90:b1:4f:60:77:ec:ef:e8:79:a7:03:
         09:33:09:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 10:45:11 2024 by rpki-client on console-fra.rpki-client.org