Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
File:                     Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft (raw, json)
Hash identifier:          BTjrLiV4Lok3mRLE1txPCXkRvZvQB3w1jNZSw6jyPPQ=
Subject key identifier:   80:9F:B2:D1:E1:BC:98:2F:13:8D:3B:F2:6C:13:90:42:44:63:15:7B
Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43
Certificate issuer:       /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
Manifest number:          017C
Signing time:             Thu 21 Nov 2024 02:14:29 +0000
Manifest this update:     Thu 21 Nov 2024 02:14:28 +0000
Manifest next update:     Thu 28 Nov 2024 02:14:28 +0000
Files and hashes:         1: Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl (hash: jFN0t9U7KB7Q/3Vl5sXGNb+teAFYsrxes2EFkJgiF1U=)
                          2: 538172167F5211ED8A16EF81C4F9AE02.roa (hash: t+tOioULLbdadbVo+wcXgqHV26aKT7BFQ5ZKogdQLMI=)
                          3: E6EB68347F4F11EDBD813D85C4F9AE02.roa (hash: 68t7AoSZP/afLoYmZ2cIjMvIFXrWh3T5i52ayRfPKe4=)
                          4: FA05DFF47F4911ED847FF862C4F9AE02.roa (hash: J6vqwZm1lCenuly0yp2d06eQQieFO+C8qbrJwg1f8lA=)
                          5: F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa (hash: oOv8IWm3CJSx/2lXFPDKWEyMUTroKLJl6Cmo0UJ6tYQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl
                          rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
        Validity
            Not Before: Nov 21 02:14:28 2024 GMT
            Not After : Nov 28 02:14:28 2024 GMT
        Subject: CN=673e9784-fb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:e2:3f:f7:d3:41:df:91:de:dd:dd:cc:0a:
                    72:fa:1d:33:25:8c:62:4d:4f:65:70:88:97:5e:17:
                    8a:7d:9b:5b:b6:1d:f4:0f:fc:dd:63:df:b4:2f:a2:
                    65:fc:9e:c4:12:3b:a7:7f:bc:f0:dc:d6:0c:e4:ec:
                    9b:61:fe:af:97:7b:a2:06:0f:ce:25:ad:09:d5:fe:
                    8c:80:1d:7d:1b:5a:3f:87:c7:14:34:b2:93:6c:c8:
                    a6:ea:e4:f3:71:3b:ce:f2:46:46:e7:13:99:1b:af:
                    0c:56:95:0b:3f:03:94:d6:1f:75:f1:6a:07:c3:29:
                    86:cc:a3:0c:55:7b:02:18:29:61:84:8a:1f:e0:15:
                    8b:f0:81:4b:68:3e:73:83:08:54:84:c2:06:7f:1d:
                    e7:e2:44:97:ef:9a:ae:3f:01:d9:21:93:a6:10:6c:
                    97:95:80:92:2e:7c:5d:c7:a8:7f:78:91:8e:fa:54:
                    ce:3b:c1:5f:54:01:19:a4:18:62:ff:25:77:81:8f:
                    f8:05:35:40:f5:08:e7:c7:37:c0:bf:a8:ad:9e:7b:
                    86:7f:38:ee:5a:7a:92:cc:ed:c2:73:47:71:60:bb:
                    69:7d:03:b0:12:5a:ae:34:60:24:c3:0d:00:f9:49:
                    87:b4:11:97:90:64:b6:b8:52:b9:02:d7:a4:7b:f5:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9F:B2:D1:E1:BC:98:2F:13:8D:3B:F2:6C:13:90:42:44:63:15:7B
            X509v3 Authority Key Identifier:
                keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:71:d7:1f:d2:92:96:85:11:25:43:8e:19:29:4b:58:48:ad:
         f4:ce:12:51:88:c4:5f:9a:65:e6:e4:db:d8:ab:a9:10:39:2e:
         eb:2a:be:52:c1:1a:6a:f9:ce:6d:9c:c5:ea:a9:fa:ad:d3:6f:
         63:c1:e3:ff:5f:68:be:0e:10:de:b4:28:b0:74:1e:18:fc:da:
         3c:e3:b4:53:8c:9b:aa:03:22:78:47:cc:14:f3:70:0d:de:c7:
         4b:22:9c:f7:f4:50:45:b8:36:79:ea:09:f8:df:ea:8e:82:b7:
         30:64:ee:09:77:97:fa:e6:85:a6:91:96:63:4c:1c:e9:b4:f6:
         36:dd:8b:66:d2:59:2e:9a:30:50:ab:fe:18:1e:32:be:1e:00:
         01:40:49:83:e1:31:38:45:fa:f2:e9:8a:5b:85:54:91:a1:29:
         92:16:37:cc:12:ce:52:e6:bf:95:f3:45:19:36:95:e9:f6:3f:
         fe:89:db:0b:0c:88:83:9d:70:a6:2a:b6:d3:7a:b0:65:14:f8:
         69:a8:84:21:be:94:93:40:4b:8c:86:d2:59:6e:86:18:63:48:
         8f:be:8a:3f:52:aa:d5:99:9c:8b:02:06:58:fd:ae:fe:3c:8c:
         d2:ab:d6:a0:fe:62:60:8d:81:82:f5:c8:05:9a:0c:ed:16:5e:
         6d:84:24:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:49 2024 by rpki-client on console-ams.rpki-client.org