Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
File:                     tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json)
Hash identifier:          kR+l3ma5GuauIp4kp1OyxpYALIXvPuqLmVYpFKRpRp4=
Subject key identifier:   6F:A9:45:79:AC:01:41:97:76:D3:D5:4A:B7:51:5E:D4:08:CD:34:D0
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Certificate issuer:       /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
Manifest number:          18
Signing time:             Thu 21 Nov 2024 06:04:19 +0000
Manifest this update:     Thu 21 Nov 2024 06:04:18 +0000
Manifest next update:     Thu 28 Nov 2024 06:04:18 +0000
Files and hashes:         1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: lrp5FH0XCURNCCLcKo09E0ok3KN2NEkmRr1ryJwT4uQ=)
                          2: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: cDCnZ6S5cO6eBk1U2D1sq10sR7mDNYW0+AjbicEv2TY=)
                          3: BB701D0A8C5211EF8F13723AC4F9AE02.roa (hash: xQtZ27HCMJDhRu2GTHStInAtAmFTEPOOnXaNIlpTnQQ=)
                          4: BA7E9CDC8C5211EF8F13723AC4F9AE02.roa (hash: oRcI0RAcajaeSK1ybyUg5l6tgEwWUvh9sWy8LSWR+Ts=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
                          rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
        Validity
            Not Before: Nov 21 06:04:18 2024 GMT
            Not After : Nov 28 06:04:18 2024 GMT
        Subject: CN=673ecd62-17e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:87:ce:0d:d0:e2:af:41:f2:54:aa:3c:15:
                    ba:64:86:c1:de:03:32:d1:5e:77:a1:a0:ef:f1:6c:
                    cd:93:17:3a:5d:33:ce:6a:ce:50:ed:18:82:35:7e:
                    39:c8:00:b6:b4:ab:82:e3:69:d4:9e:66:65:1c:5a:
                    8c:5c:78:33:65:ca:a8:c2:f9:dd:6d:6b:65:fd:1f:
                    f0:02:19:a4:8a:f6:86:30:bc:13:92:d9:de:ef:71:
                    d1:83:82:ca:6d:70:36:30:1a:78:eb:1e:51:fa:1f:
                    ce:0d:bd:8a:d3:4f:54:b3:56:ac:23:bc:c2:08:03:
                    4f:52:d6:c9:be:18:5c:ba:c9:56:31:f0:a0:fd:e2:
                    56:f7:f7:80:aa:80:f8:4f:94:e1:80:d8:56:0c:26:
                    9d:35:3b:23:52:19:f4:65:77:8c:35:34:f6:f7:41:
                    28:ec:73:f3:e7:26:d6:54:69:03:ac:6d:de:96:7f:
                    dc:e0:d2:53:89:47:7c:7f:c9:36:b3:d9:dc:e9:53:
                    d3:25:58:b0:5d:71:f4:9d:26:3e:20:19:dc:55:68:
                    95:5c:b7:d4:b7:55:6e:d4:83:6b:cf:b1:92:18:87:
                    8b:bc:65:50:02:f7:97:d8:0a:e3:ad:55:e6:b1:83:
                    1f:ad:db:f7:c2:46:24:1a:b3:9b:b4:dc:c0:f2:99:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A9:45:79:AC:01:41:97:76:D3:D5:4A:B7:51:5E:D4:08:CD:34:D0
            X509v3 Authority Key Identifier:
                keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:97:2b:3c:de:15:25:22:d2:af:3a:84:40:fd:66:29:bb:a1:
         e2:b6:1d:fb:2c:73:b4:f1:6f:d5:31:96:44:d1:15:e4:1e:81:
         a1:55:70:a9:bb:53:6c:3d:dc:db:60:27:b4:88:a2:16:80:74:
         67:ee:2b:a2:b3:61:0e:f7:08:f5:fa:84:00:76:b9:29:b3:1e:
         4c:1e:4c:99:bf:03:b3:78:4d:73:a1:bf:28:76:ff:94:bb:55:
         d4:68:9d:0a:ff:e0:5f:b1:c7:68:51:df:0b:8a:1d:63:00:89:
         d5:4b:26:ea:35:8f:34:41:fb:40:eb:9a:f7:c0:83:52:1c:33:
         c7:fe:e5:f2:14:19:db:05:aa:c4:da:69:3a:e8:d1:d9:c8:d6:
         df:36:ea:68:b2:88:cc:c1:de:6e:f4:9b:9e:da:b2:9a:53:76:
         bf:80:04:e9:fd:f3:fc:21:cc:f4:36:bb:56:67:fa:02:c1:d2:
         ab:b2:fb:dc:f1:a0:fd:5c:9c:69:e0:6e:64:8a:a3:4c:40:e7:
         11:92:42:80:24:26:ab:f8:d5:ce:ae:d4:79:a0:19:13:07:48:
         84:0a:97:68:5a:67:16:11:e0:b7:c3:00:d5:70:01:25:a0:13:
         10:a2:45:5c:98:a9:f1:35:ba:dd:6b:b1:09:18:4b:ec:91:c6:
         b5:11:78:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:37 2024 by rpki-client on console-ams.rpki-client.org