Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
File:                     ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json)
Hash identifier:          gmqwfzD9naf76KKqsNSrYayEHrTn97pQyxDCueZhwQQ=
Subject key identifier:   B8:9E:70:C5:06:BE:45:92:17:CB:A1:07:4C:78:58:0E:7A:37:A5:6C
Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Certificate issuer:       /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Certificate serial:       0B41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
Manifest number:          0B36
Signing time:             Fri 22 Nov 2024 18:58:45 +0000
Manifest this update:     Fri 22 Nov 2024 18:58:44 +0000
Manifest next update:     Fri 29 Nov 2024 18:58:44 +0000
Files and hashes:         1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: 4RSyNpJVs3YSIlmytlvUHG8EJ1+VWT7CLdv5WMS/sR8=)
                          2: FB5C375499DB11EBBC50C376C4F9AE02.roa (hash: ajVn4diWFPT8JIGqvgdW0p8NW0uUNco4psFMwsNIN3M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
                          rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2881 (0xb41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
        Validity
            Not Before: Nov 22 18:58:44 2024 GMT
            Not After : Nov 29 18:58:44 2024 GMT
        Subject: CN=6740d465-0035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:3c:a6:50:e6:0a:62:e7:99:ba:8a:2e:b1:
                    6b:47:60:cd:e0:59:de:9d:9f:3a:ad:ff:9d:eb:18:
                    49:c4:a8:c2:a1:cf:51:b6:78:88:b8:57:07:5c:cc:
                    fd:c8:34:57:df:b8:de:ab:b9:ab:31:aa:93:21:95:
                    97:f3:4d:8b:e1:4b:2b:05:bf:0d:92:67:cc:16:52:
                    c8:a1:be:cb:35:91:43:4b:f9:bb:57:93:18:4f:2d:
                    94:e7:c8:70:bf:2f:fe:4c:ed:43:a4:15:ea:88:d8:
                    9f:4f:82:c1:68:63:b1:e3:17:ae:4a:ec:0f:aa:37:
                    a8:d2:b5:13:37:f3:a7:63:21:be:e2:f2:a5:88:fd:
                    11:b5:36:0e:0f:15:c9:a8:12:e3:c1:1d:28:74:69:
                    3d:37:21:31:cb:83:42:d2:07:51:bc:96:8d:4e:1c:
                    09:a5:e0:44:d9:14:10:bb:60:c7:20:a4:87:d1:26:
                    1d:9c:d7:c5:83:e7:a3:6b:52:f4:a3:04:0f:6e:7f:
                    1b:1b:d2:e3:fd:62:7f:78:5f:18:25:34:5e:e1:39:
                    ac:48:ce:45:da:59:a6:93:88:ed:ba:bd:5c:82:14:
                    08:16:10:80:e3:c3:e7:6f:35:ef:db:25:1a:7b:07:
                    35:b8:c1:d6:5f:87:0b:a0:87:1d:fd:78:38:21:b3:
                    a9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9E:70:C5:06:BE:45:92:17:CB:A1:07:4C:78:58:0E:7A:37:A5:6C
            X509v3 Authority Key Identifier:
                keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:70:ff:3f:7e:7a:d5:9c:3b:32:22:6e:5d:16:0f:e7:1b:b7:
         f5:16:97:bb:3d:7e:70:24:76:32:07:ad:ae:39:ab:19:74:77:
         10:81:0e:a2:76:d0:8d:e1:52:2f:d9:46:88:be:10:4a:1c:bc:
         53:a6:92:3a:1f:c5:39:04:63:a4:93:84:b0:e8:74:a6:9b:55:
         34:2f:e0:5c:f3:02:76:ac:ea:02:5d:76:3d:45:e6:0d:0f:29:
         ba:e3:44:71:b6:0e:c8:21:58:60:fe:68:68:08:10:99:68:98:
         55:09:3b:69:e6:30:98:17:08:c5:d8:22:8b:fa:e7:1c:be:68:
         b9:22:42:07:ff:d1:11:a3:80:7b:f3:3b:fd:46:67:9a:14:c7:
         3a:3e:4d:c0:54:fe:66:9f:7a:24:74:b7:18:18:a8:c6:47:28:
         3f:0c:b9:b2:40:57:f5:bd:54:df:95:52:7e:1d:b7:d1:80:46:
         c6:6f:ed:90:bb:e5:6a:bb:35:3c:d2:5a:28:ac:8e:5e:87:22:
         df:0f:db:d3:c3:ba:45:e4:92:f9:d4:0a:8e:ce:65:70:2a:2a:
         17:e1:f9:d6:07:48:5b:20:59:bd:4e:19:3e:6c:52:05:41:3e:
         50:68:6b:a2:c4:cf:e2:b6:90:d8:e9:07:1c:d1:0d:ee:63:9b:
         13:8c:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org