Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
File:                     hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json)
Hash identifier:          RkwNkxPxsGcCNnrDIrIuBnNUBVOH+mkMbZ0V5LqNhBg=
Subject key identifier:   6E:39:F1:7B:EF:22:25:55:6F:3B:4B:DD:4F:0D:16:8B:64:AC:81:96
Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94
Certificate issuer:       /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
Manifest number:          025E
Signing time:             Thu 21 Nov 2024 01:16:13 +0000
Manifest this update:     Thu 21 Nov 2024 01:16:12 +0000
Manifest next update:     Thu 28 Nov 2024 01:16:12 +0000
Files and hashes:         1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: pkHaOy3tJsmE255ccxfOF4jkndHDx4WP9+D0VB16Adc=)
                          2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: tIjRYvm7kHb3Z/vuy4/Hasw9Jy2neJdJRNnPansBj78=)
                          3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: llPQK6RAm7smNmRGwi10ZC04JcuM8comzd+cTfPYGBM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694
        Validity
            Not Before: Nov 21 01:16:12 2024 GMT
            Not After : Nov 28 01:16:12 2024 GMT
        Subject: CN=673e89dc-e03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:36:4a:ae:6a:78:41:fb:30:d8:97:f8:0c:
                    1f:1a:f6:4b:14:a5:f4:f9:c4:57:b7:e1:58:77:7a:
                    de:f8:c8:0d:35:c2:40:0d:7c:74:62:cb:8b:dd:61:
                    98:46:d7:ed:5d:df:05:a3:89:b1:ce:96:b2:25:d8:
                    4c:0e:d7:a5:a4:13:6d:67:86:52:a0:bb:b0:36:56:
                    0c:8e:7d:e1:d6:e5:3f:06:1f:81:1e:3f:0f:e2:a4:
                    8e:cd:fe:e9:ef:5b:2e:15:a6:7a:47:71:51:90:86:
                    be:cb:77:ae:2c:8d:ac:38:ee:93:73:e7:fd:7b:d5:
                    2d:15:7f:e6:a3:af:d7:03:27:73:ae:ff:08:56:45:
                    12:66:d5:31:d2:0b:49:29:a8:2a:67:97:aa:16:51:
                    4a:27:fb:49:bd:03:cc:b0:f9:d7:5c:4a:e7:23:d3:
                    59:45:c6:a8:72:fa:83:ad:ff:b1:e6:66:24:83:ec:
                    b5:17:b2:ea:29:05:a0:11:95:82:8e:a9:e4:d2:56:
                    b5:f5:d0:18:6d:bb:6c:36:bf:5e:5a:81:76:75:d1:
                    ea:66:32:d5:7b:b0:1c:20:20:02:44:78:0a:ea:c7:
                    83:fc:bb:c2:f9:c4:a5:f3:13:4d:00:37:ef:69:a3:
                    d9:c1:66:4e:05:66:7b:95:f0:72:51:d2:4d:b9:1b:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:39:F1:7B:EF:22:25:55:6F:3B:4B:DD:4F:0D:16:8B:64:AC:81:96
            X509v3 Authority Key Identifier:
                keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ee:ec:ab:2f:2b:2b:89:f0:ff:1b:90:d8:a2:56:1d:3c:be:
         65:a9:e3:eb:8c:0f:9b:d6:f4:f4:b0:ae:44:ef:04:35:f9:c6:
         e6:c8:41:9a:a9:51:3a:6e:85:5c:6d:0d:26:ac:de:fc:59:c3:
         7d:4d:56:f3:1e:4e:e6:0b:54:4c:63:29:29:e6:85:eb:63:b4:
         48:1b:7f:d2:d4:ff:6b:3d:ad:28:6c:ef:19:92:2a:45:db:9d:
         67:66:c9:cf:16:76:e1:26:35:8e:cf:df:18:c2:36:7a:80:2f:
         c5:3d:25:da:b4:47:23:d7:28:0c:7d:0e:54:99:4a:43:d9:3c:
         17:c6:02:64:84:cb:08:b6:13:3c:f3:e2:9a:52:ae:88:aa:92:
         c6:d7:12:8a:25:76:95:9e:ea:a0:54:f6:cd:6c:8e:11:10:92:
         db:ff:a7:b0:33:46:ad:75:be:a7:58:d1:1d:be:b3:7d:7d:22:
         44:f8:ea:13:8b:4c:4d:f1:a5:2a:56:1d:9c:89:51:49:0f:9a:
         a6:4b:72:60:30:c5:47:4a:bf:23:be:5d:71:74:65:c2:90:8e:
         d5:3c:8c:42:46:b2:50:38:c7:21:e4:6d:de:40:51:dd:24:c1:
         75:7d:9b:27:ca:b1:06:bf:ff:57:ed:4a:c9:fb:13:f5:36:4c:
         de:61:1a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:51 2024 by rpki-client on console-ams.rpki-client.org