Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
File:                     HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json)
Hash identifier:          2sXdwHJLFeNnD4CuBeT4OIPBiWj0pdMFF+9ZnjeA3KI=
Subject key identifier:   D8:4F:8F:E5:06:83:B5:BB:E7:0B:E3:0E:98:18:78:69:FB:09:50:76
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Certificate issuer:       /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
Manifest number:          01FA
Signing time:             Thu 21 Nov 2024 01:39:07 +0000
Manifest this update:     Thu 21 Nov 2024 01:39:07 +0000
Manifest next update:     Thu 28 Nov 2024 01:39:07 +0000
Files and hashes:         1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: Bd2w5F1hC+TWzQQmbh73DaB1LmthR2kI9UeVGYtxXH0=)
                          2: 8BF25C3C777D11ED9F54B75EC4F9AE02.roa (hash: tvzj3tzfI8FoOtT4Sv2qeoWxVx8nmv/haifKFcWk9eE=)
                          3: 2080359097F711EF91AB0436C4F9AE02.roa (hash: gciK0yNDrtj7QWiNKwvkaRxFbo52Lv+ZpsDvj/21B+E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
                          rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
        Validity
            Not Before: Nov 21 01:39:07 2024 GMT
            Not After : Nov 28 01:39:07 2024 GMT
        Subject: CN=673e8f3b-0594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cd:54:ac:df:65:3b:b7:2e:87:21:af:88:64:
                    34:9b:6c:83:47:ce:e6:56:2b:87:b9:0c:c4:31:16:
                    85:dd:47:82:3b:6a:e5:5c:18:0d:17:e9:6d:ac:2a:
                    b1:07:a1:7a:df:e5:6e:35:f2:f1:74:0d:f8:06:ce:
                    1d:a8:51:1a:bc:d8:d9:01:08:4a:a5:36:55:5a:7e:
                    1f:8e:44:c8:b8:0c:f0:61:9f:2d:32:ca:b2:c2:33:
                    ef:8b:ed:3a:8b:c6:26:b3:be:99:f7:da:cc:65:4f:
                    f3:07:a0:c9:15:51:73:df:2b:55:e3:ae:a9:5d:6a:
                    75:6a:b5:b5:d0:28:c4:66:34:99:16:4f:56:7c:1e:
                    7b:b6:39:15:de:7f:26:88:3f:61:e9:11:73:68:d3:
                    1c:24:cb:41:60:b2:38:0d:59:6b:03:7e:86:74:19:
                    7f:e0:1d:2e:11:bb:3e:65:63:64:20:07:2d:19:4d:
                    19:21:7e:b6:01:b4:dc:13:4b:e9:bb:a1:41:ca:9f:
                    b5:42:ff:cf:e6:25:cf:93:15:4c:72:0f:5e:b9:bb:
                    5c:87:88:df:fb:52:17:1a:c6:37:75:57:16:86:8a:
                    9c:85:ae:75:ae:9c:c6:93:34:6b:dc:6c:33:d2:31:
                    ed:30:5d:46:48:17:87:e5:93:7d:e9:30:1f:00:02:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4F:8F:E5:06:83:B5:BB:E7:0B:E3:0E:98:18:78:69:FB:09:50:76
            X509v3 Authority Key Identifier:
                keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ec:a6:d5:49:29:ee:fc:3e:46:90:98:5c:af:a1:67:21:ad:
         a6:36:40:37:9f:a1:10:30:ba:58:07:de:c7:95:f5:91:62:c6:
         94:3a:af:29:8e:d8:67:e6:41:4e:da:e3:a3:07:b1:b7:a2:ed:
         bf:13:41:8f:05:1d:09:28:7f:9d:4d:22:5d:58:8b:45:40:59:
         4d:58:22:51:fa:56:a5:80:57:cd:90:f0:d9:63:93:c6:46:6a:
         ef:4a:2d:e7:78:06:ad:bc:ec:9d:bd:d0:1b:1b:74:41:23:92:
         79:bb:6e:59:65:50:8f:85:99:20:fe:ff:44:dd:d3:53:3b:2e:
         07:b4:f8:73:be:46:3e:53:ac:fe:3a:bc:67:db:20:0f:2a:c7:
         78:3d:a8:34:a3:fa:15:32:6e:88:96:f1:8f:8e:ad:75:aa:40:
         b3:a7:b9:c0:b1:6a:72:27:5f:b8:e9:df:94:94:3c:cb:b1:33:
         c3:9b:10:2b:f4:f4:89:44:b2:d6:78:ca:7b:3e:44:11:d4:14:
         a5:d3:58:85:53:8c:cf:65:88:c3:85:44:68:68:0b:8b:52:78:
         ef:04:52:04:46:04:25:1f:f7:3e:d5:db:88:96:1c:62:e3:dd:
         0a:ac:05:12:17:c3:8d:28:85:73:dc:e2:10:92:30:68:e5:64:
         6b:95:16:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:50 2024 by rpki-client on console-ams.rpki-client.org