Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
File:                     dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json)
Hash identifier:          t7ZN8p11RRfFmfb5zpR4YdiH3Px8HzaDpKHSIUgGOW0=
Subject key identifier:   3D:8A:1F:16:75:EE:1F:BC:DE:F3:80:A7:D6:29:B9:1F:FB:FF:94:F5
Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
Certificate issuer:       /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
Manifest number:          019B
Signing time:             Sat 23 Nov 2024 01:51:00 +0000
Manifest this update:     Sat 23 Nov 2024 01:51:00 +0000
Manifest next update:     Sat 30 Nov 2024 01:51:00 +0000
Files and hashes:         1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: 0MTRlrez2A4CyhcU8wB/mAfdV52tkoyn37hqNkPVRC4=)
                          2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: m+UggDiKnlsr7oDYe2JvPaLjrumOSk4OCYStSoz32JE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
                          rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
        Validity
            Not Before: Nov 23 01:51:00 2024 GMT
            Not After : Nov 30 01:51:00 2024 GMT
        Subject: CN=67413504-df60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:94:ca:e4:36:43:d3:23:9e:aa:d9:5b:74:c8:
                    51:cb:87:b5:87:5a:af:b5:fe:e2:db:22:25:fa:b5:
                    e8:9e:a6:c8:91:ac:56:a0:e6:a7:38:ec:44:f1:10:
                    0e:45:44:92:c3:b6:90:ec:45:9f:28:fa:1f:8a:be:
                    98:f1:26:44:49:d7:c0:37:4f:8c:ef:0b:de:7f:dc:
                    7a:ab:58:11:c1:af:fe:22:25:91:c7:75:7a:e4:5a:
                    c9:c5:2b:49:56:31:ea:38:6a:0b:7e:2e:98:aa:43:
                    94:e6:d7:09:7e:0b:0a:25:cd:e9:cc:52:e9:2a:89:
                    b6:46:48:59:79:3f:54:f8:f1:39:fa:56:d8:dd:0c:
                    eb:73:3f:aa:7b:bc:22:97:7e:06:77:8d:c2:2c:52:
                    98:52:1f:24:43:57:1c:97:d5:d6:89:87:3e:73:22:
                    2b:db:3e:80:50:7c:ce:9a:6d:a8:4c:ea:62:47:bf:
                    6e:ec:20:9e:50:78:52:86:6d:43:b4:98:c4:b6:9c:
                    0d:81:46:59:09:9a:60:5f:5a:2d:98:c5:6a:0f:ae:
                    b8:3c:e1:ad:6a:88:f8:9b:d6:5a:b9:2d:91:b9:7a:
                    d2:44:ed:08:3b:b5:e3:a1:81:ed:83:9a:a3:0b:d9:
                    e5:a6:b4:54:f2:f1:8c:54:39:c8:f7:f4:2e:2d:13:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8A:1F:16:75:EE:1F:BC:DE:F3:80:A7:D6:29:B9:1F:FB:FF:94:F5
            X509v3 Authority Key Identifier:
                keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:eb:12:95:10:c7:d0:30:84:81:14:1c:93:1a:3c:a7:60:0e:
         d6:92:ef:0b:e3:9a:61:e8:ad:c5:73:53:34:73:52:a4:d9:3f:
         8c:cd:cc:95:f5:32:ae:df:ef:e9:dd:1a:a3:9e:48:c7:be:ad:
         9d:c8:a1:59:7e:a1:5b:ef:e5:6c:1c:d0:73:27:f6:b6:78:bd:
         5b:ba:2e:18:cf:53:c0:20:98:21:5e:09:7f:0d:c4:fa:ea:84:
         d0:9a:c6:f3:29:a8:a4:2e:4b:58:25:ea:e6:33:82:84:f5:93:
         45:34:96:b7:7a:ea:2f:0b:44:b6:c8:a4:ec:b5:fa:71:fa:aa:
         81:a3:f9:9b:8a:26:d1:1d:11:6c:3e:d7:0f:bf:79:2d:42:21:
         5e:9c:39:58:43:c0:87:4e:9d:57:b3:75:43:80:c5:54:22:f5:
         ab:17:1b:66:3a:75:1d:e0:f0:6d:77:60:e3:91:9e:1e:03:a7:
         04:80:5c:e4:e9:46:c4:d7:1d:5c:66:64:74:9e:e8:43:2f:3c:
         e2:44:d4:40:98:8c:e7:0e:ed:9a:82:4d:34:1c:d0:24:39:e8:
         b4:44:10:38:6e:18:43:10:77:c1:d6:cf:f1:55:c7:96:87:51:
         2d:a4:9e:64:f6:fb:68:77:c4:e7:ef:e0:91:d1:f0:58:cd:25:
         c7:fd:9e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org