Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
File:                     d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json)
Hash identifier:          GhSCYKMfU4Pimc5+6YeME7DVp+hXlbphkkOwVgOKn0Q=
Subject key identifier:   9B:EE:40:57:40:71:2F:4A:F4:00:1C:68:EF:D2:78:50:AD:5C:12:88
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Certificate issuer:       /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial:       3426
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
Manifest number:          3424
Signing time:             Fri 22 Nov 2024 15:18:54 +0000
Manifest this update:     Fri 22 Nov 2024 15:18:53 +0000
Manifest next update:     Fri 29 Nov 2024 15:18:53 +0000
Files and hashes:         1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: IXSZ8bhfKsdQIfgJRlRR7sdC3GS9VojpHgH+7yMhBDk=)
                          2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: T0vLNfEgBch3bsiblE/evabl1DzjIixOq/fxALt/2Ao=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
                          rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13350 (0x3426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
        Validity
            Not Before: Nov 22 15:18:53 2024 GMT
            Not After : Nov 29 15:18:53 2024 GMT
        Subject: CN=6740a0dd-bac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:17:95:53:a8:c8:1e:b1:3f:7b:15:d7:82:
                    e1:af:50:a8:53:96:94:2d:1f:28:53:b1:62:0f:04:
                    6a:20:d8:db:bc:76:7f:f0:5d:aa:0b:02:2c:c2:d7:
                    1e:e5:60:63:da:b1:b9:7e:d4:c2:e6:fa:dc:4c:09:
                    d0:31:6c:27:0c:73:4d:cb:98:d6:38:1e:52:43:ed:
                    85:0c:78:8b:1b:67:a9:a9:63:86:71:7e:93:fd:d2:
                    5f:36:74:62:fe:ec:f3:a7:9d:0d:a4:71:cb:81:fd:
                    35:15:33:0f:b3:dd:f6:ad:87:1c:fb:30:1a:a7:a6:
                    fa:d1:cd:f2:56:a4:93:c0:79:be:c0:83:46:37:05:
                    f1:aa:48:9c:1b:36:6e:0a:e1:85:36:ac:c2:a2:da:
                    45:57:59:6d:3e:c4:b5:5d:56:ab:a6:ed:a6:09:86:
                    68:0d:c3:7f:3b:c5:8c:7a:c4:af:8e:e1:42:f3:c4:
                    df:c3:67:be:e4:c3:90:b4:c5:c5:4c:88:36:f7:c3:
                    42:52:4b:1d:70:a6:ac:35:c9:10:27:ff:f8:42:45:
                    63:5f:ac:f8:40:67:c6:86:f7:a7:9d:d7:35:97:04:
                    64:cb:ee:15:49:58:b1:68:63:b8:6e:0e:55:d8:9c:
                    b8:a7:91:e1:46:4b:40:9b:f3:f8:8b:92:9c:c5:13:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EE:40:57:40:71:2F:4A:F4:00:1C:68:EF:D2:78:50:AD:5C:12:88
            X509v3 Authority Key Identifier:
                keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:fe:80:22:86:90:43:c8:a9:42:33:41:ef:8f:76:2e:7a:
         d0:bd:93:fe:ab:31:d1:c0:75:ae:73:ba:f8:2d:89:04:76:8b:
         41:9f:23:ae:4f:3b:0a:5c:43:1f:1f:6d:c5:5e:1b:98:63:d2:
         44:67:91:76:87:f8:b4:69:6a:ad:85:49:92:8e:d9:13:1b:6f:
         64:5b:ee:ab:e0:cf:ce:34:fd:1b:33:45:52:32:bf:38:86:71:
         e5:dc:58:20:a5:81:72:1a:30:62:9f:d1:60:ad:60:14:a1:44:
         af:45:39:55:6d:97:27:fd:05:e0:a3:69:e2:25:6f:11:a3:25:
         0b:db:c8:f3:33:cc:7f:b7:1f:49:72:b6:ad:06:dd:0f:0d:93:
         d9:40:51:f5:e7:4f:46:53:8f:11:d4:7c:c3:1d:95:19:e7:d9:
         4c:b2:19:fd:e6:87:df:98:fc:7f:65:9c:58:66:a3:56:ff:b3:
         2f:6d:4d:8b:c4:da:5c:2a:28:b6:c7:8d:b3:e4:d3:82:b5:16:
         bb:26:3f:3c:00:e4:f5:95:a3:f9:21:28:f3:01:4d:d7:34:99:
         7d:ea:07:8e:32:90:74:62:a2:ed:94:9a:c8:5c:04:05:7f:25:
         11:27:dc:1a:54:78:73:15:1d:e4:5e:45:84:4e:f3:da:a1:8d:
         08:d4:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org