Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
File:                     vv---O_FAnw03_cEx5-ygSpxMx4.mft (raw, json)
Hash identifier:          +Pmy10uiNu0edyA/k1NxS4qn7yc34bTIR6a6Y/cM4OA=
Subject key identifier:   ED:5C:4B:B5:C5:7B:85:51:03:81:3D:A5:D0:CF:A9:6C:2C:1E:CA:58
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Certificate issuer:       /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
Manifest number:          A9
Signing time:             Sat 23 Nov 2024 04:15:39 +0000
Manifest this update:     Sat 23 Nov 2024 04:15:39 +0000
Manifest next update:     Sat 30 Nov 2024 04:15:39 +0000
Files and hashes:         1: vv---O_FAnw03_cEx5-ygSpxMx4.crl (hash: mqKUfrbVuXOIC28H17yOcehjSSrgFhBkmgLs10/9mSA=)
                          2: 32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa (hash: ahyXQ4Lm+79APPoe5vKdDvkPQen1I/FoTAFBCvMh1/Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
        Validity
            Not Before: Nov 23 04:15:39 2024 GMT
            Not After : Nov 30 04:15:39 2024 GMT
        Subject: CN=674156eb-fdcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:73:43:a6:4d:03:5b:42:fb:16:bc:5b:9d:
                    7b:9b:74:49:3d:16:1a:56:e9:b3:74:a6:e9:cb:2d:
                    14:8e:e4:2f:9f:fa:81:d1:87:90:f6:19:d8:b6:30:
                    93:e6:8b:fd:69:f4:37:1d:a8:35:93:75:a4:76:e8:
                    bc:96:09:59:e4:98:d2:36:cc:29:d8:cd:ed:7a:c7:
                    e3:13:5a:fe:3c:bb:17:39:0e:c4:60:db:8b:ae:0c:
                    1f:29:23:c1:55:61:32:cd:8c:8a:7a:7c:1b:a9:b3:
                    bc:7b:9c:70:fd:b0:df:34:bd:76:af:c3:70:df:77:
                    3b:52:7d:45:8d:76:b9:e5:92:d8:2c:6d:4f:26:a1:
                    db:c8:4e:93:68:89:50:5e:44:c4:95:4c:cb:b9:ac:
                    5f:ec:0a:4a:c4:69:76:61:19:98:c3:25:bd:f0:07:
                    e9:85:96:0e:3d:0e:44:f8:09:d3:1f:99:61:b2:29:
                    ab:65:65:38:4b:14:a2:67:96:49:44:ef:46:72:37:
                    39:b0:23:5e:0c:04:7e:db:94:ce:c4:e5:2b:db:3a:
                    f6:a8:31:f3:98:75:13:88:1f:5d:7b:f4:b8:b2:a3:
                    ec:51:5b:2b:f7:f0:a8:0f:a7:72:a7:23:1f:3f:13:
                    01:1f:cb:04:87:9d:14:22:1b:22:39:54:3a:39:e5:
                    00:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5C:4B:B5:C5:7B:85:51:03:81:3D:A5:D0:CF:A9:6C:2C:1E:CA:58
            X509v3 Authority Key Identifier:
                keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:b2:29:a1:81:9a:7c:56:61:38:f6:0a:96:e6:2c:15:1f:6f:
         72:f5:28:dd:c0:bc:50:7b:39:cb:3f:8b:7b:74:e0:56:28:39:
         e7:7f:93:af:83:5d:a5:28:7a:c4:59:4b:4e:8b:cd:d2:36:8b:
         01:0a:be:06:50:51:24:95:cb:9d:e6:a5:70:1d:e9:f6:b7:9d:
         f5:cb:59:93:f4:6f:41:4e:fe:8e:36:b4:cb:6f:4a:bd:6e:66:
         2d:b7:e3:c1:12:42:d7:ef:c7:39:23:2a:c2:f9:4e:a6:92:5f:
         4d:fc:a9:01:c1:b1:1d:c7:d6:e1:2b:79:c1:c6:87:26:82:81:
         cc:b3:a3:61:e8:81:73:56:aa:a9:45:fb:c6:07:ac:b5:54:bd:
         87:ef:a7:cf:f6:42:c9:1b:50:fd:da:f1:30:11:68:a1:8a:77:
         fa:13:7f:60:ca:88:bd:57:ce:e0:16:f0:43:92:c3:d7:b8:c7:
         fc:2b:44:38:4b:2d:72:38:12:aa:a3:90:bd:74:d4:5a:36:ef:
         49:69:90:12:44:7c:83:30:79:eb:06:01:88:22:2c:b8:ce:c6:
         c7:04:13:6b:32:eb:a2:41:ce:36:49:50:5f:2c:fc:e6:06:69:
         18:89:1d:6a:a6:bf:6d:7b:42:18:29:c8:72:aa:bf:02:88:bf:
         0e:0a:b7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:19 2024 by rpki-client on console-ams.rpki-client.org