Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
File:                     LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json)
Hash identifier:          b0lvzxtoP6MOw9Ur1rjLA+h32SGIc4cDvL0AQ6WNvjQ=
Subject key identifier:   15:43:CD:E5:73:A1:69:70:C9:57:26:0D:F3:2F:8E:93:04:F7:97:2F
Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
Certificate issuer:       /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
Certificate serial:       0B31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
Manifest number:          0B28
Signing time:             Fri 22 Nov 2024 19:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:47 +0000
Manifest next update:     Fri 29 Nov 2024 19:00:47 +0000
Files and hashes:         1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: 52pZpa4XesSM1oQob9wSESK+/qD0lFtWsuH6GULKGxw=)
                          2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: Rji9v2vl0PMJCU+S/aNCxihdmwOiSNCJIoglgTlCMfk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl
                          rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2865 (0xb31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
        Validity
            Not Before: Nov 22 19:00:47 2024 GMT
            Not After : Nov 29 19:00:47 2024 GMT
        Subject: CN=6740d4e0-2a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9f:1f:cd:34:fa:c4:41:4d:ee:5d:6f:ef:1d:
                    0a:70:cb:c4:d1:ea:1e:64:7f:0d:e6:24:b5:84:83:
                    5c:fd:fc:b4:be:49:8b:8b:05:4b:85:88:09:59:93:
                    c7:c2:00:0b:5e:2f:a7:ce:2f:e0:cb:a4:ef:e5:18:
                    15:e0:8e:23:22:69:5a:f0:3a:48:41:06:ce:ca:92:
                    49:82:a3:b0:d0:26:e7:9a:2f:56:53:b7:68:84:5b:
                    c3:30:6c:2c:c2:20:46:21:a9:21:f9:a4:7a:07:2b:
                    89:ff:50:e0:64:8d:de:da:ea:e6:ef:51:db:1f:4c:
                    ae:5c:75:08:c8:9a:0e:30:06:36:23:d8:09:5b:fd:
                    d2:30:14:b9:5a:1c:5e:73:a7:ee:67:3e:74:fe:a4:
                    84:9f:8b:8e:87:11:26:53:ab:e7:c3:05:d8:7c:19:
                    ea:39:70:33:42:bc:1a:c5:45:c8:c2:8f:af:07:be:
                    eb:9a:47:dc:36:77:02:f4:5a:25:af:51:e2:bd:8e:
                    b7:cf:c3:94:12:e9:43:2e:90:77:3d:c4:da:43:41:
                    48:f9:7b:d4:41:be:24:3b:6b:65:6c:cd:c5:de:f9:
                    1a:dc:41:5c:bf:d2:5b:e2:29:ad:f1:49:80:f8:6a:
                    bc:f6:9d:fe:7b:ee:0e:48:2e:3e:00:07:18:c8:82:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:43:CD:E5:73:A1:69:70:C9:57:26:0D:F3:2F:8E:93:04:F7:97:2F
            X509v3 Authority Key Identifier:
                keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c1:d7:c3:c5:dc:4e:1b:f5:7d:17:0a:41:34:10:e1:06:fc:
         f8:45:b5:8f:b8:fa:e7:87:4c:b1:65:75:7b:f1:af:00:a2:f7:
         1b:ef:a2:ec:92:0a:b7:f6:6d:01:3e:0d:7b:8d:6a:15:85:66:
         0c:72:bc:e6:89:33:9b:65:ff:6b:78:72:aa:4d:4f:64:b2:cc:
         95:3e:d0:16:35:d7:cb:14:ac:82:51:de:92:72:73:bd:7e:1a:
         80:93:09:49:ef:bc:bc:af:b4:28:fe:11:dd:a1:b9:c2:08:72:
         0f:4b:32:95:14:a5:31:15:f7:72:83:69:f6:22:bf:72:99:de:
         2c:9c:3f:21:53:e3:b3:3c:f5:ad:7a:ad:3f:8a:ad:18:39:48:
         6a:85:d1:02:46:5f:64:5a:2b:cf:0b:e8:f7:d7:84:d1:3a:e9:
         eb:72:ed:cb:7b:c4:07:6f:9c:14:18:f4:00:70:e7:ce:63:f6:
         a1:03:a8:b8:91:38:0c:a2:b9:3b:5e:21:be:a1:db:fd:a4:7a:
         56:ab:f9:c9:41:b8:a8:86:cf:52:7d:ca:36:b0:d7:e0:13:c6:
         b2:57:9a:20:1c:e8:78:ec:43:59:88:2c:3b:ae:17:6b:81:c7:
         92:91:81:71:02:bb:01:2f:1d:38:9d:ee:8a:a4:cc:fe:f5:2c:
         fc:64:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org