Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
File:                     OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json)
Hash identifier:          VrgjbthZGijPOe+N1r5zyQ0BEttE6SoIKxIeZwj/i1k=
Subject key identifier:   10:A1:C4:3C:DA:A8:DC:95:8B:D6:84:25:65:35:94:B5:8E:2D:C5:8D
Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
Certificate issuer:       /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Certificate serial:       063B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
Manifest number:          0630
Signing time:             Fri 22 Nov 2024 22:06:27 +0000
Manifest this update:     Fri 22 Nov 2024 22:06:27 +0000
Manifest next update:     Fri 29 Nov 2024 22:06:27 +0000
Files and hashes:         1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: R2WZi93e7WAFc6oqQhVXMXoycN+8gR6ag9GrEw4D8M8=)
                          2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: xd+kZGDM6lidBL503M6KRPrbZpmB555muvLLsOdJRog=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
        Validity
            Not Before: Nov 22 22:06:27 2024 GMT
            Not After : Nov 29 22:06:27 2024 GMT
        Subject: CN=67410063-786b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:ab:71:af:18:0a:9e:cc:32:9c:f9:d6:ad:
                    9e:9f:27:e5:78:cf:84:b1:47:ac:de:c6:36:36:19:
                    08:dc:b9:09:4d:60:d1:3f:ea:66:71:f8:59:4a:0a:
                    59:f8:f9:56:c3:9b:2b:ac:03:22:25:af:48:66:51:
                    7b:93:c6:f2:0d:84:16:33:d9:36:22:49:d2:c5:42:
                    d3:d2:2d:77:db:98:bf:cf:76:79:ee:15:35:37:a9:
                    9f:c4:ba:c2:48:28:0c:88:51:27:43:98:5f:46:6f:
                    c3:a4:58:5c:13:6c:8f:f2:45:a2:e8:5e:4b:20:bf:
                    fe:85:84:bf:51:50:29:8a:1d:c0:e4:25:ea:38:eb:
                    cf:86:b8:b3:e9:0e:6d:48:20:eb:a5:88:d7:b8:47:
                    fd:5f:0f:82:6a:cb:50:ac:6b:b0:54:7e:46:65:20:
                    d1:ae:a7:8c:38:3d:21:7d:de:56:74:e9:bb:6e:da:
                    20:12:71:12:ac:e3:ce:bb:49:76:f8:90:a7:59:92:
                    3a:17:22:57:3b:bd:6e:54:35:c1:02:ba:f5:93:3d:
                    a2:75:83:61:d3:ae:c9:e9:03:1e:e8:ac:4f:df:fb:
                    75:9d:ce:26:c4:d3:60:8b:1c:3b:d0:57:9f:05:e4:
                    4b:25:8c:36:5a:10:0d:61:59:5c:a5:40:e7:7b:d9:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A1:C4:3C:DA:A8:DC:95:8B:D6:84:25:65:35:94:B5:8E:2D:C5:8D
            X509v3 Authority Key Identifier:
                keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f4:c1:02:f9:1b:c3:ac:3a:22:14:f9:ab:8f:98:13:83:2f:
         92:43:bc:26:fb:34:2e:c3:7e:45:40:cf:74:e9:0e:e4:e7:f6:
         40:cf:ae:3f:78:b1:91:0f:58:1b:af:aa:2e:fc:b9:b0:e2:4a:
         f7:2c:5a:b1:ba:b2:d0:27:f1:77:93:f0:0b:8b:eb:4b:71:ef:
         15:e6:10:dd:94:49:a6:44:82:ec:9f:c8:8a:76:bd:4b:63:0c:
         62:9c:3c:54:ea:e1:a9:72:6f:ad:95:1b:9d:ae:a6:f3:cc:90:
         9d:14:66:05:2f:b5:43:8c:92:49:df:e3:b3:75:a8:4e:5c:31:
         7a:ac:cb:3a:13:e3:13:fc:4b:b1:6a:71:db:ae:ab:4c:0f:cf:
         e9:24:fa:cb:da:4a:24:26:11:17:25:12:67:e8:4d:a4:14:81:
         63:a9:c5:ba:d2:f4:2a:c2:f1:0b:5b:00:0a:ee:4f:c2:6a:f3:
         dd:4f:70:24:c7:71:e4:b1:b4:15:35:98:a4:bf:32:27:fd:b5:
         ea:2a:21:6c:e8:78:4f:cc:58:e4:8c:11:1c:70:53:87:bf:f3:
         8c:5e:d0:b7:90:48:f6:dc:1e:c9:ea:97:7b:4d:76:a7:a5:32:
         4f:10:2a:5f:7a:e8:dd:be:70:df:7f:1e:3a:78:6a:55:a9:1e:
         60:b7:0b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org