Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
File:                     AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft (raw, json)
Hash identifier:          nBhP1t6tmZnxafiMBMg/VsU8zxoaM7tcMZJ6mz1xyyg=
Subject key identifier:   11:71:DC:1F:0A:05:5E:D5:63:56:C2:6B:DC:99:EF:0D:9B:7B:B1:63
Authority key identifier: 01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9
Certificate issuer:       /CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
Manifest number:          C3
Signing time:             Sat 23 Nov 2024 03:57:38 +0000
Manifest this update:     Sat 23 Nov 2024 03:57:38 +0000
Manifest next update:     Sat 30 Nov 2024 03:57:38 +0000
Files and hashes:         1: AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl (hash: w7y8GX5Y5T64DfjaD7XGcISPllHvQsXC5xTNdb8cxwc=)
                          2: 110A7248841F11EEAF514B09C4F9AE02.roa (hash: 3UMzDkmaCKQSgaeBeiUzWqmgHjiQdo/Y4B6yGA1t2M4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl
                          rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9
        Validity
            Not Before: Nov 23 03:57:38 2024 GMT
            Not After : Nov 30 03:57:38 2024 GMT
        Subject: CN=674152b2-c018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:f3:0b:98:1e:d4:1f:7e:94:45:f0:2c:30:
                    18:61:15:63:01:1a:20:b2:54:e3:cd:62:95:10:0e:
                    46:42:c8:f8:42:b6:0a:9c:ff:00:c0:b3:78:a7:37:
                    bd:03:b7:f7:d1:d0:be:0c:c8:90:28:89:40:44:b1:
                    6f:ff:28:37:e8:a1:fc:14:fa:bb:90:04:ea:27:9f:
                    2c:78:42:8e:03:08:ed:f0:f7:21:02:67:16:f6:e1:
                    07:43:d0:f7:e3:7d:41:04:a7:2f:02:d9:2a:1b:46:
                    6c:4d:1d:36:4d:5e:ba:6d:e7:73:76:14:73:94:9b:
                    70:65:9b:a1:21:5c:f6:03:91:fe:14:82:74:ac:2f:
                    c6:1a:f9:8c:ab:1b:07:c5:ee:d1:75:0b:97:d0:d3:
                    b5:8e:d2:8b:33:2e:4a:aa:0e:76:0c:44:92:4a:c0:
                    c6:d8:b7:d5:d6:a4:53:81:9b:24:b1:99:0e:3f:bc:
                    05:f4:ca:f6:51:0f:14:d2:0b:78:68:b4:15:3a:03:
                    c8:69:db:33:59:72:4d:74:3b:c9:26:40:5d:db:d8:
                    9d:2f:19:67:c1:4e:4d:c6:e6:9d:f7:70:5d:43:7f:
                    b5:6d:2d:ba:14:b4:29:81:59:82:41:9d:87:76:bb:
                    c1:3b:68:62:41:15:e6:99:10:a0:31:2c:bc:10:da:
                    59:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:71:DC:1F:0A:05:5E:D5:63:56:C2:6B:DC:99:EF:0D:9B:7B:B1:63
            X509v3 Authority Key Identifier:
                keyid:01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0e:9e:38:cb:3f:30:08:90:f8:fd:42:ff:95:0b:c9:20:11:
         53:ba:fc:32:4a:fc:8f:d8:ff:d4:e7:2e:6a:1c:f5:64:b9:8f:
         cf:b7:6a:2e:fd:af:cf:bc:df:56:90:e0:f0:6b:8e:7f:0d:b1:
         48:48:2b:93:4b:b5:cb:76:5b:c2:b0:cb:af:ec:73:37:dc:2e:
         b2:1c:93:89:ed:67:ca:43:46:a1:38:ee:fb:35:dc:76:5b:f4:
         d7:82:c3:dd:89:fe:b9:76:9c:eb:6c:61:49:12:09:10:14:47:
         7d:7d:d8:11:91:c9:20:1a:56:2e:d1:f1:18:29:c8:0c:bc:ca:
         42:85:2b:ee:93:77:79:5a:d0:42:5c:41:7d:2d:60:60:34:61:
         2c:40:03:a4:d0:e5:db:ff:32:ab:66:a7:64:e6:d7:37:68:30:
         96:2b:34:2c:18:35:3b:a8:d1:91:61:ef:4f:e6:e1:e9:00:2f:
         0c:43:2a:b0:1d:e3:89:6c:e5:89:f6:a8:8f:09:b8:53:70:22:
         d0:d0:03:c4:15:c9:32:84:6e:b4:55:dc:5d:05:96:5c:b5:bd:
         b2:aa:86:75:e0:58:e4:77:ba:35:0b:c5:b7:4b:fe:27:57:54:
         86:81:91:3f:4a:6b:a3:24:67:da:17:9c:4b:34:c6:b0:00:88:
         73:a5:cd:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNDNTIxMTAvBgNVBAUTKDAxQjZEQjRCRjFEMzNBMzQxRjQ3NjBBOThDODVGODc2
MTAzRkFFRTkwHhcNMjQxMTIzMDM1NzM4WhcNMjQxMTMwMDM1NzM4WjAYMRYwFAYD
VQQDEw02NzQxNTJiMi1jMDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAonvzC5ge1B9+lEXwLDAYYRVjARogslTjzWKVEA5GQsj4QrYKnP8AwLN4pze9
A7f30dC+DMiQKIlARLFv/yg36KH8FPq7kATqJ58seEKOAwjt8PchAmcW9uEHQ9D3
431BBKcvAtkqG0ZsTR02TV66bedzdhRzlJtwZZuhIVz2A5H+FIJ0rC/GGvmMqxsH
xe7RdQuX0NO1jtKLMy5Kqg52DESSSsDG2LfV1qRTgZsksZkOP7wF9Mr2UQ8U0gt4
aLQVOgPIadszWXJNdDvJJkBd29idLxlnwU5Nxuad93BdQ3+1bS26FLQpgVmCQZ2H
drvBO2hiQRXmmRCgMSy8ENpZYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFx3B8K
BV7VY1bCa9yZ7w2be7FjMB8GA1UdIwQYMBaAFAG220vx0zo0H0dgqYyF+HYQP67p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0M1Mi83REMzQTM0Mjg0
MUUxMUVFODg5ODMwODdDNEY5QUUwMi9BYmJiU19IVE9qUWZSMkNwaklYNGRoQV9y
dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FiYmJTX0hUT2pRZlIyQ3BqSVg0ZGhBX3J1ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0M1Mi83REMzQTM0Mjg0MUUxMUVFODg5ODMwODdDNEY5QUUwMi9BYmJiU19IVE9q
UWZSMkNwaklYNGRoQV9ydWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLDp44yz8wCJD4/UL/lQvJIBFTuvwySvyP2P/U5y5qHPVkuY/Pt2ou
/a/PvN9WkODwa45/DbFISCuTS7XLdlvCsMuv7HM33C6yHJOJ7WfKQ0ahOO77Ndx2
W/TXgsPdif65dpzrbGFJEgkQFEd9fdgRkckgGlYu0fEYKcgMvMpChSvuk3d5WtBC
XEF9LWBgNGEsQAOk0OXb/zKrZqdk5tc3aDCWKzQsGDU7qNGRYe9P5uHpAC8MQyqw
HeOJbOWJ9qiPCbhTcCLQ0APEFckyhG60VdxdBZZctb2yqoZ14Fjkd7o1C8W3S/4n
V1SGgZE/SmujJGfaF5xLNMawAIhzpc2O
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org