Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
File:                     uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json)
Hash identifier:          O3wofeKA/zAzuJdVpO6nhXLt385xcW6In8llkBeWEgI=
Subject key identifier:   0A:DE:E7:13:49:97:B9:BC:BA:75:57:D7:D5:7A:21:70:C5:67:75:86
Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
Certificate issuer:       /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
Manifest number:          06
Signing time:             Wed 23 Oct 2024 06:54:52 +0000
Manifest this update:     Wed 23 Oct 2024 06:54:52 +0000
Manifest next update:     Wed 30 Oct 2024 06:54:52 +0000
Files and hashes:         1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: jyHUu6ATskPoVakqpZxNWNHFAU8QN4J5UzNVydMeFbA=)
                          2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: NvjP/LYwW9l6MqSSpH5THMx2WmCXtMYC8PmhjmLmzIg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
        Validity
            Not Before: Oct 23 06:54:52 2024 GMT
            Not After : Oct 30 06:54:52 2024 GMT
        Subject: CN=67189dbc-7ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:f3:40:cf:0a:d6:50:09:9e:0a:25:6b:d2:
                    cc:99:dc:9d:06:68:af:ed:ae:b4:c1:ac:08:d8:38:
                    b5:3e:42:dc:e8:d6:5e:c0:72:df:c5:d6:a4:4e:e6:
                    0e:c3:7f:ce:2c:e0:05:e8:64:41:f0:d4:ac:83:aa:
                    7c:e1:cf:ca:3f:c0:98:8c:04:b1:a6:3e:9d:89:63:
                    fd:45:8d:72:24:27:bb:e7:12:27:6b:2d:10:e1:43:
                    a9:b0:3a:1d:30:0f:b4:a0:7c:12:4d:72:b9:84:3e:
                    84:cd:07:d5:a7:a3:11:86:2f:8a:80:11:09:59:38:
                    b3:45:e0:65:da:5e:23:2e:f3:ce:2b:44:e9:0b:9f:
                    13:fe:7e:d5:c9:1e:ed:86:a8:cd:0b:10:d4:92:ff:
                    9a:81:2a:bd:19:69:ba:c2:b9:f6:30:95:2f:99:25:
                    9d:f6:f0:bb:7f:82:d0:6c:eb:79:52:48:8f:21:79:
                    d9:78:5d:00:9c:9b:08:6e:b3:f5:7d:25:f6:21:ee:
                    f3:46:05:34:48:0c:8a:e4:33:c8:21:2c:a3:6f:6b:
                    af:c0:36:4e:e2:a8:a3:01:14:06:c3:68:0d:0b:72:
                    0a:6a:e4:26:ab:0d:05:22:31:f1:2c:86:0f:61:d7:
                    9d:c3:36:54:16:36:ac:10:1c:40:18:b6:59:ce:ff:
                    f5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DE:E7:13:49:97:B9:BC:BA:75:57:D7:D5:7A:21:70:C5:67:75:86
            X509v3 Authority Key Identifier:
                keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b0:59:5d:2d:55:92:3f:97:80:0a:5d:65:c4:64:02:85:3b:
         b1:94:05:b2:3f:3f:45:d8:57:2c:41:fd:76:b7:8b:94:63:3d:
         70:39:bf:e5:53:d6:c4:1f:44:e8:c2:46:39:8d:70:6e:e2:bd:
         3b:61:68:18:fb:39:6d:a9:b8:47:15:b7:9a:8b:99:67:06:d9:
         51:aa:54:db:0f:85:9f:3d:18:cc:0f:bc:6a:3d:e7:ef:4c:03:
         9e:76:a7:d6:e6:74:36:3c:ad:b4:7f:03:a3:b8:d5:5a:39:c7:
         12:a3:e0:37:35:3f:f9:de:39:7a:fd:00:31:c1:92:89:80:3a:
         23:20:94:41:9a:6a:e7:70:07:1f:01:47:1a:d7:96:1a:f8:b8:
         ba:b1:b7:f5:05:96:10:25:e6:dc:9b:09:5d:9f:e0:2c:95:5a:
         67:d6:fe:12:7f:9c:8e:a6:42:c0:0c:dc:ae:5d:43:91:b9:71:
         4c:77:f7:d4:9c:58:66:f7:42:8b:57:53:e6:e8:4b:fd:d6:72:
         09:29:87:c6:e5:43:13:51:d3:c9:57:c0:dc:10:ff:f5:49:8c:
         f7:cf:5b:13:c8:61:40:0a:69:d1:10:63:ea:0f:5c:b9:55:5e:
         28:4f:96:37:6a:65:28:7e:0c:5f:cd:2d:14:65:33:bb:8d:a1:
         8d:9a:53:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:23 2024 by rpki-client on console-fra.rpki-client.org