Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft
File:                     rRAu0CidxOT63nCzTXZgyg0rvSs.mft (raw, json)
Hash identifier:          bOHOeYv7rZHaCynzyJJeg04EmhT8ucRVvu4FSwOz200=
Subject key identifier:   3C:11:1F:7E:58:A1:05:42:B6:AB:8F:BF:ED:FE:E4:8D:9D:8C:C4:FC
Authority key identifier: AD:10:2E:D0:28:9D:C4:E4:FA:DE:70:B3:4D:76:60:CA:0D:2B:BD:2B
Certificate issuer:       /CN=A91A3B91/serialNumber=AD102ED0289DC4E4FADE70B34D7660CA0D2BBD2B
Certificate serial:       043D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRAu0CidxOT63nCzTXZgyg0rvSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft
Manifest number:          0431
Signing time:             Fri 22 Nov 2024 23:53:31 +0000
Manifest this update:     Fri 22 Nov 2024 23:53:30 +0000
Manifest next update:     Fri 29 Nov 2024 23:53:30 +0000
Files and hashes:         1: rRAu0CidxOT63nCzTXZgyg0rvSs.crl (hash: 0uoZ9sY4P+PcAnRo2bikjLUrl9ZZLPu3kqcm/VbeDQU=)
                          2: A82A33A6C0A711EE97A2E984C4F9AE02.roa (hash: SOn2/YoiOnQcCPNXa5HjTXOEZ/tUCYCahIULlvuRhw4=)
                          3: A71C6AA6C0A711EE97A2E984C4F9AE02.roa (hash: Fh/+vA6aajr1dkhgtc06wN1A4vHZYI5kkLjFn7c39SU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.crl
                          rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRAu0CidxOT63nCzTXZgyg0rvSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3B91/serialNumber=AD102ED0289DC4E4FADE70B34D7660CA0D2BBD2B
        Validity
            Not Before: Nov 22 23:53:30 2024 GMT
            Not After : Nov 29 23:53:30 2024 GMT
        Subject: CN=6741197a-d297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:82:2e:ec:62:81:8d:d3:02:d6:bd:51:ae:
                    34:57:0f:f7:ec:ad:48:c0:07:bd:42:5e:c3:62:5d:
                    a9:9a:73:97:14:b3:70:77:40:70:4e:dd:09:2b:08:
                    cb:47:ea:bd:33:bd:93:01:e6:c4:77:6c:b5:15:32:
                    f7:63:e3:67:3e:4b:24:cd:5a:32:a3:0c:0a:f4:8d:
                    65:10:ed:42:2f:e8:6b:6b:a7:5b:dd:cf:63:03:56:
                    83:05:cc:30:e8:b6:89:5e:5b:65:83:e4:b9:72:13:
                    20:83:78:36:48:09:65:44:5d:f5:78:9c:0f:ab:cb:
                    f8:be:ae:ef:17:8c:17:47:c8:67:0b:66:03:a1:5f:
                    0a:73:d3:32:6e:99:6f:61:18:43:9a:1a:31:92:70:
                    36:54:66:ea:e6:06:bd:ec:6c:4b:78:ca:e6:0c:04:
                    ea:92:80:d2:e6:56:47:ee:a9:79:9a:c4:c0:7f:63:
                    99:f5:c7:97:a9:5f:3d:fd:12:e9:f4:6f:4c:2b:97:
                    b9:57:33:72:67:14:87:be:2f:c8:56:40:33:d5:04:
                    92:73:47:2f:0b:1f:f4:bd:da:9e:d6:69:f1:88:cd:
                    02:a4:c6:22:dd:79:b0:c8:e1:3c:81:10:c4:21:65:
                    7e:c5:4e:61:bb:93:83:a5:ae:a2:83:a4:53:70:73:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:11:1F:7E:58:A1:05:42:B6:AB:8F:BF:ED:FE:E4:8D:9D:8C:C4:FC
            X509v3 Authority Key Identifier:
                keyid:AD:10:2E:D0:28:9D:C4:E4:FA:DE:70:B3:4D:76:60:CA:0D:2B:BD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRAu0CidxOT63nCzTXZgyg0rvSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:72:d5:64:2a:0f:e2:13:cc:fc:48:14:51:31:9f:b5:e1:84:
         de:04:06:ec:6f:8d:a4:0c:ce:80:43:e0:d1:c6:70:7e:1e:0b:
         61:61:78:7a:fc:f0:70:30:03:94:ab:33:a4:48:8e:85:fa:60:
         f1:5c:a6:71:e7:6f:e3:21:66:af:f8:50:c5:66:70:4f:71:32:
         04:fc:d9:b4:e5:48:f0:88:66:b0:8f:f4:b5:53:8d:4d:ae:bf:
         d0:3c:78:03:b7:06:a1:b9:af:60:9d:0d:63:97:56:11:2c:61:
         6d:b7:1c:fb:95:33:fa:8a:fa:5d:93:c1:4c:b4:c2:d8:c7:58:
         c6:09:7c:53:68:02:b1:b2:46:d2:34:3d:ed:ed:2a:c6:a3:9b:
         e6:50:b8:62:c5:cd:89:8a:83:59:7f:22:b5:58:34:49:16:96:
         67:6c:5f:82:75:62:92:1e:2e:d7:13:68:a1:02:90:9b:b5:13:
         67:7d:51:35:61:07:cc:3f:eb:c8:90:c8:9b:40:92:e8:d2:64:
         02:87:e2:67:11:e7:e6:fb:a5:84:b7:11:3a:df:93:89:8c:80:
         ee:2e:6d:c3:26:c5:52:1c:8b:6d:00:45:cc:a4:79:e3:f8:6d:
         2c:65:72:9b:92:eb:f6:2c:0d:ed:c3:a7:78:58:71:02:72:c2:
         a5:06:dc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org