Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          dvDQUuulpNgZpXsHEMcuyfOQl6rX96kfSoS9JYap7b8=
Subject key identifier:   A9:21:26:28:55:A4:5D:2E:59:3A:0B:92:1F:12:21:09:F2:EE:5E:10
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          0170
Signing time:             Sat 23 Nov 2024 02:15:21 +0000
Manifest this update:     Sat 23 Nov 2024 02:15:20 +0000
Manifest next update:     Sat 30 Nov 2024 02:15:20 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: 0XvQDSCFax21q4WVMMr+B8EJ3gjADovgTaTiMCFAGho=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: 8fiulkMzmoz7dwE1F+YA2x7XYbzmFEAme4dQMleRYl8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: Nov 23 02:15:20 2024 GMT
            Not After : Nov 30 02:15:20 2024 GMT
        Subject: CN=67413ab8-4687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:dc:cc:2a:70:07:87:ab:14:b9:70:2d:31:
                    fa:d9:a2:d0:bd:81:7f:29:08:9b:e6:af:a7:56:a2:
                    b8:e5:41:da:6b:18:40:8b:98:fe:43:03:d5:99:44:
                    4d:5b:ff:3a:05:ca:e4:88:1c:bb:b1:74:ac:28:f8:
                    70:57:8c:91:9f:25:70:72:36:18:f0:6a:b3:d1:d6:
                    69:59:0f:15:26:2c:1b:83:c2:51:a8:57:20:aa:0f:
                    75:fc:d4:cb:bd:83:a2:1b:2d:e3:a3:f0:af:17:ac:
                    2c:5c:04:bc:9f:50:11:c9:20:3f:91:e5:53:b4:65:
                    aa:ab:46:75:f4:63:8f:07:05:0d:db:f2:35:38:38:
                    a1:81:9b:6a:07:60:c6:6c:77:bc:3e:f0:39:3b:6a:
                    58:c1:d9:f7:09:8a:2c:43:7b:6d:d8:20:2e:3c:0d:
                    6b:d5:c8:e5:5b:e5:bd:12:34:2f:5e:b6:ea:87:08:
                    e2:c3:b2:4b:1b:99:84:f3:48:d4:f4:bf:39:81:16:
                    41:08:a9:d3:fa:ab:d1:87:73:08:be:f3:b2:df:11:
                    5c:a1:a7:04:34:27:cf:34:b5:47:5e:c4:ef:9d:ed:
                    6e:ff:81:80:0d:77:04:28:53:85:63:92:46:6e:60:
                    ee:29:97:9a:12:e1:dd:70:f0:5b:49:0d:dd:de:ea:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:21:26:28:55:A4:5D:2E:59:3A:0B:92:1F:12:21:09:F2:EE:5E:10
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:09:60:63:7d:45:ae:0e:c3:82:b3:a4:53:c7:5d:e1:de:98:
         47:08:db:7e:15:9a:cb:30:08:4f:db:18:ea:79:2c:b4:9e:10:
         74:87:4c:03:40:c7:6e:46:1f:1b:40:c9:7f:8f:74:fe:44:51:
         33:34:97:8f:68:80:a7:53:5b:8e:ca:65:8d:54:48:3d:3c:5c:
         53:20:14:03:ec:69:55:87:c6:89:f9:d8:90:8f:63:c8:ba:bd:
         b1:5e:15:94:36:6f:28:3c:70:e9:02:55:e8:17:00:95:d4:81:
         49:7f:6e:00:36:97:d0:cd:9a:df:e2:04:27:13:a7:85:34:3a:
         0c:af:53:8d:7c:4d:87:a2:a2:76:20:f4:bc:1a:fe:38:01:06:
         3d:14:71:c5:1d:b6:8e:38:48:23:6b:1e:d0:9a:38:2a:fd:32:
         f1:75:99:a2:d5:a8:82:6b:87:8e:18:a1:2d:cf:59:c8:e5:60:
         08:6e:3e:45:a1:25:12:13:76:c3:e7:61:1e:f7:3c:18:c2:95:
         c0:9e:2e:46:43:38:96:7d:8f:c3:f9:26:6a:5e:ff:30:d5:8f:
         17:8a:5b:b7:98:d6:ef:96:c8:1b:10:89:a4:75:98:53:d3:3e:
         ac:0b:d4:2a:ea:5c:48:a8:4f:27:aa:43:bd:0d:c4:2d:6b:2d:
         41:76:f6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org