Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
File:                     7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft (raw, json)
Hash identifier:          q1x22fQxeYYnVCC0LDTt5E667IiSYAoAsDb2m3OLp0g=
Subject key identifier:   D9:80:DD:96:26:12:E5:F5:E3:AB:3B:12:E6:75:95:D1:AD:6B:90:80
Authority key identifier: EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46
Certificate issuer:       /CN=A91C0FF9/serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46
Certificate serial:       060A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
Manifest number:          0605
Signing time:             Fri 22 Nov 2024 22:16:51 +0000
Manifest this update:     Fri 22 Nov 2024 22:16:50 +0000
Manifest next update:     Fri 29 Nov 2024 22:16:50 +0000
Files and hashes:         1: 7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl (hash: a6/pNQjnjQsocvMDQVw1tkQO4UeK+wNReGcNvDTpWGg=)
                          2: 98536A8A8D1811EBA3DEC15BC4F9AE02.roa (hash: yBiHe4ubd0Yaxe8iEusni96SzNhOMH8U/S+1PM3373k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1546 (0x60a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FF9/serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46
        Validity
            Not Before: Nov 22 22:16:50 2024 GMT
            Not After : Nov 29 22:16:50 2024 GMT
        Subject: CN=674102d2-a0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:bd:65:e1:c1:c9:49:bc:2a:5a:7c:ae:f2:9d:
                    41:c5:91:65:b7:17:e1:d2:53:1b:41:fb:ec:44:b8:
                    63:32:8e:9b:eb:6f:5d:49:e3:ea:44:ba:2e:b3:89:
                    da:c9:2d:f1:65:8d:1d:a4:a5:4f:6f:ed:0f:63:b7:
                    dc:8d:ae:bf:1c:ad:a3:72:eb:c8:7e:d9:3e:08:f4:
                    a7:16:80:16:89:d5:00:80:ce:74:d1:48:a5:0a:5e:
                    7d:f6:4c:2f:c7:25:e3:2e:97:ce:73:51:9f:1f:9d:
                    59:f4:19:ec:2e:8b:27:38:d5:c9:e2:3f:58:44:59:
                    22:1e:28:4c:ae:ef:f4:3d:fd:f9:c1:15:7e:f5:21:
                    51:a7:e0:34:6a:c7:2d:a8:b0:26:f7:0f:f4:70:81:
                    91:cf:72:af:c1:7e:14:60:58:4e:07:5b:1f:e4:46:
                    05:23:ca:8c:35:3a:f6:51:bf:eb:84:83:14:55:9d:
                    9c:2d:12:ab:62:aa:f7:47:33:4e:01:3b:3a:96:85:
                    cc:d9:d0:9f:b3:46:66:b2:ff:fb:24:18:cf:f3:a9:
                    77:08:fb:f9:0e:e5:bc:41:03:86:c5:32:f0:ce:53:
                    6b:7a:a2:18:94:06:54:a6:8c:d7:01:e8:ce:6b:56:
                    99:81:ef:4f:20:de:63:2e:a9:f6:df:78:18:9e:d1:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:80:DD:96:26:12:E5:F5:E3:AB:3B:12:E6:75:95:D1:AD:6B:90:80
            X509v3 Authority Key Identifier:
                keyid:EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:53:f2:7b:d6:9f:82:05:c6:17:cf:8f:ad:74:68:a1:89:21:
         1e:c7:8f:b4:4f:55:a9:70:2a:ee:b3:fc:ce:6e:c5:e3:8e:a1:
         70:52:25:d8:33:26:6a:3e:e1:a7:d1:c3:dd:28:34:8d:d4:bd:
         38:4b:4a:f4:e4:60:2c:b4:b0:59:1a:66:2f:a7:cf:bf:cc:71:
         48:62:dd:0b:a2:2d:95:46:03:34:bf:66:01:1c:a6:23:24:5b:
         a3:cf:44:be:b4:c2:18:f0:91:67:71:b0:63:77:c6:b2:d2:3e:
         4e:74:00:2b:d9:43:5c:ee:39:0e:45:eb:12:83:91:82:8c:5f:
         f0:65:9b:a5:e7:76:1d:fc:17:c4:89:b0:2d:9a:03:f7:3a:5f:
         83:bb:06:76:d5:3f:f0:5f:39:1d:59:a2:2b:b9:3a:1d:53:9d:
         de:5a:ff:ca:fb:2c:eb:aa:29:07:f6:7a:24:fb:d5:6d:1c:92:
         53:85:ad:67:80:45:9e:34:67:55:28:a0:cb:39:c0:1a:51:23:
         cd:67:e1:6b:c2:4f:bb:96:5a:b3:ad:f1:53:59:a8:eb:af:ea:
         6c:c5:78:9d:d9:82:c9:d7:93:f3:7c:82:44:f7:ce:aa:8f:3e:
         6c:f5:92:00:82:73:31:09:dc:9c:b5:f0:01:96:8a:81:93:15:
         72:d3:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:33 2024 by rpki-client on console-fra.rpki-client.org