Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
File:                     0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json)
Hash identifier:          exSo0H1Rz4RBTJoOMgpWBIMfzny049C4Kaw7b9tloII=
Subject key identifier:   B8:FD:70:67:EE:06:53:E6:EA:8C:F2:DA:8D:1D:0F:A3:84:58:62:15
Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
Certificate issuer:       /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Certificate serial:       0836
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
Manifest number:          082C
Signing time:             Fri 22 Nov 2024 20:31:34 +0000
Manifest this update:     Fri 22 Nov 2024 20:31:33 +0000
Manifest next update:     Fri 29 Nov 2024 20:31:33 +0000
Files and hashes:         1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: eGwG09anv4oMIUxBiEEKpeky8/D5/jJ6XRranQ0wvuY=)
                          2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: z3K04y8FAXseRSAao3Z4/OGvZnmija66bg8pyXugrIU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
        Validity
            Not Before: Nov 22 20:31:33 2024 GMT
            Not After : Nov 29 20:31:33 2024 GMT
        Subject: CN=6740ea25-7aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:d5:40:24:54:8a:73:17:91:db:32:af:b3:
                    60:60:be:e1:b8:31:ef:50:eb:f7:53:01:5f:ca:3b:
                    ca:e7:93:13:a7:71:be:c6:5f:78:a8:d1:eb:38:76:
                    12:f2:cc:c2:65:9e:c0:b2:b2:c5:f1:28:42:2f:8c:
                    b1:00:55:0d:f9:5b:12:f7:9c:f6:a5:99:9c:75:42:
                    83:ae:8d:df:56:36:9a:31:c6:9d:8d:e5:23:c3:c7:
                    d5:35:e1:75:74:32:a4:84:4d:08:fa:a9:60:c8:62:
                    ac:f2:6a:2d:48:cc:23:a0:04:34:c7:2a:eb:e1:6b:
                    08:dc:ef:25:3b:c4:a7:e8:8d:4a:a5:c5:01:d4:6d:
                    96:a8:db:a1:bb:c0:36:5c:61:dc:3d:ed:6c:78:dd:
                    9b:93:ca:36:fe:e8:4c:45:4b:cd:3a:08:76:4e:75:
                    3f:63:1f:e6:9f:18:4d:69:74:b4:20:f5:6a:fd:82:
                    2c:cd:d7:9a:30:89:a3:83:0c:da:28:01:8e:05:4f:
                    ec:8e:d9:72:be:af:eb:85:28:fc:51:90:9d:ef:68:
                    04:1b:b9:ac:27:32:2d:b3:5b:ce:d3:4b:2b:bb:68:
                    7e:c8:aa:78:a0:ce:e8:42:97:72:65:2a:3d:42:d0:
                    1b:e5:dc:e7:25:c7:dd:f5:1a:fb:9c:b4:39:0b:1e:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:70:67:EE:06:53:E6:EA:8C:F2:DA:8D:1D:0F:A3:84:58:62:15
            X509v3 Authority Key Identifier:
                keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ee:b8:13:49:b2:7a:4f:c0:7b:a9:a0:51:fc:c5:82:ff:58:
         47:ce:30:10:6c:38:ce:6b:03:d8:ad:b2:2b:30:1a:d1:76:1b:
         46:82:a1:77:df:e7:8d:2c:25:01:90:d5:b7:ac:dd:6d:35:87:
         48:9b:e1:a8:8d:d9:d0:40:1d:1f:1f:f8:f2:70:5a:d4:c1:44:
         cf:83:c5:06:f1:17:f7:08:16:67:13:cc:dd:c6:a4:69:f4:54:
         d5:bd:e5:10:dd:d1:4e:d8:8a:58:ff:c6:5e:30:e6:52:57:02:
         88:b1:dc:b9:18:6d:a6:a1:a1:cb:e3:cf:9a:c1:db:d7:c1:82:
         d3:44:ee:4d:48:6e:02:e3:55:0a:71:d2:16:a1:33:c2:94:6c:
         a5:d3:3f:b0:42:b7:d0:81:5f:90:ba:44:c7:4f:8b:fa:77:d8:
         e6:36:35:65:ff:3f:f5:3b:24:c4:8f:cb:7e:de:75:20:df:7d:
         d2:bb:f4:7b:c0:e9:32:d9:77:f4:ee:c3:db:32:19:17:05:fb:
         0a:3b:70:97:54:a1:66:c6:00:36:d8:32:72:65:8e:06:85:bd:
         3d:4c:dc:97:47:18:8e:c3:ad:05:d8:67:d4:26:5a:74:8e:da:
         57:d5:8f:a5:69:1d:01:2a:70:79:cc:ff:20:4e:4c:81:3c:1c:
         dc:4f:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org