Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
File:                     MIoPBCNx10Tky2KrUekE9wys03o.mft (raw, json)
Hash identifier:          wt8ZZ2she0nl8SUTDIvX2NCx917PtUKIGwlH8/c/+UY=
Subject key identifier:   2A:0B:BE:9C:19:C5:11:C8:1A:9F:09:01:BF:82:86:BF:A8:DB:93:FA
Authority key identifier: 30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A
Certificate issuer:       /CN=A91B2252/serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A
Certificate serial:       0774
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
Manifest number:          076A
Signing time:             Fri 22 Nov 2024 20:59:52 +0000
Manifest this update:     Fri 22 Nov 2024 20:59:51 +0000
Manifest next update:     Fri 29 Nov 2024 20:59:51 +0000
Files and hashes:         1: MIoPBCNx10Tky2KrUekE9wys03o.crl (hash: RMT4xjCv/5M4kJ5txlcBasX6xr0FkC7vXy/Q3mX5V0A=)
                          2: 727EECD2678811EF99602F53C4F9AE02.roa (hash: WvAkrs/LiVkRHkVog2xW2/ey9F5S8FH9WKoT4JG9/2M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl
                          rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908 (0x774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2252/serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A
        Validity
            Not Before: Nov 22 20:59:51 2024 GMT
            Not After : Nov 29 20:59:51 2024 GMT
        Subject: CN=6740f0c7-83b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:d8:d5:a0:24:5d:5c:76:90:a9:25:e7:63:
                    b8:dc:ce:68:25:2c:96:7b:77:f8:ac:53:22:15:65:
                    0f:29:1c:57:e4:ec:22:9b:19:21:0d:27:b7:40:a4:
                    2d:44:ce:c1:4b:c2:3a:80:13:9b:b4:52:2d:5a:44:
                    e0:9f:8c:41:65:98:30:a8:bd:97:eb:62:a0:09:46:
                    58:2c:ef:63:de:37:4e:12:b4:0f:8e:50:a7:bb:1c:
                    62:73:e1:84:64:53:4e:af:db:2a:05:a8:c2:da:92:
                    18:58:2d:35:66:3e:0b:c6:c4:0f:be:4e:c8:c8:af:
                    38:14:ba:f6:0d:47:c8:f4:21:b9:60:59:9a:72:d2:
                    94:80:7e:fa:a7:09:e4:81:6b:69:0c:79:7e:b8:09:
                    8c:34:81:9e:7c:0c:e8:48:2a:ff:40:2a:58:54:25:
                    b7:37:20:cd:4e:6e:d7:a4:ca:bb:22:ab:ff:9d:e5:
                    d2:37:d6:7b:3c:4a:a3:e2:f4:ec:2d:61:e0:f5:14:
                    f8:aa:e3:22:04:e4:26:14:ee:12:de:72:70:ce:59:
                    59:6f:fe:23:0b:40:00:b6:d1:cc:8c:9e:b3:18:de:
                    06:ae:ab:77:27:26:90:c1:71:84:8c:0e:c6:05:26:
                    f9:9e:a7:91:89:de:f4:48:e2:db:2b:0b:15:68:95:
                    c5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0B:BE:9C:19:C5:11:C8:1A:9F:09:01:BF:82:86:BF:A8:DB:93:FA
            X509v3 Authority Key Identifier:
                keyid:30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:bd:bb:59:fb:71:29:4b:48:79:68:8d:1f:31:23:bc:7b:31:
         e9:78:89:11:61:55:80:1c:80:f0:41:87:a5:0f:c1:87:90:75:
         d9:9b:5b:cb:8a:92:59:53:b8:a7:37:bd:b4:3e:97:1d:eb:6d:
         77:9f:59:57:d8:2d:1d:7c:7e:dd:07:86:5f:9d:7b:0c:c7:06:
         74:1b:93:24:89:14:61:ce:77:4b:b8:f8:9f:43:88:c0:80:b5:
         fc:40:5f:c8:5e:37:57:17:56:7b:db:d0:aa:53:3f:93:19:ab:
         66:b5:66:53:e9:2c:7c:59:ca:2f:f3:bc:6c:ba:12:8b:e6:98:
         fb:ed:9d:9a:41:e2:21:65:11:22:c3:91:cd:1c:b4:ca:14:f6:
         96:b5:09:18:c4:e7:49:ac:5b:28:e7:be:cb:a4:19:ea:0a:b6:
         9a:12:28:3c:30:d1:c1:fd:0f:db:c3:a9:60:8b:0a:23:a8:82:
         f8:8d:53:8b:56:e3:9e:f1:49:f7:f3:78:8f:a0:db:d8:73:3c:
         e5:17:8b:4f:1c:7c:fa:a7:68:50:be:d8:6b:93:c4:28:a6:64:
         c5:6e:f4:1d:73:5c:06:d0:06:15:09:5d:47:d4:9e:66:bf:f6:
         b2:bf:c4:c2:ae:ff:cc:b2:93:ca:c2:64:c5:7a:87:7a:84:cb:
         84:cb:0b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org