Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
File:                     vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json)
Hash identifier:          MUO/8gtruhSez8wKqNLPuBUyr/a7vcXyqU0BZQS2JJU=
Subject key identifier:   B1:87:65:5D:8F:C4:A6:A4:FA:A2:83:89:7A:D1:27:69:93:4E:D5:95
Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6
Certificate issuer:       /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
Manifest number:          010F
Signing time:             Thu 21 Nov 2024 03:08:16 +0000
Manifest this update:     Thu 21 Nov 2024 03:08:15 +0000
Manifest next update:     Thu 28 Nov 2024 03:08:15 +0000
Files and hashes:         1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: jC+H8nIVtga71NH6vGwypsZiK4yWJmg2nmymzqCL87I=)
                          2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: A02rwfVNBQfsMotmEpSHcGKxAIis7L1vdf/V5rNai7M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl
                          rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
        Validity
            Not Before: Nov 21 03:08:15 2024 GMT
            Not After : Nov 28 03:08:15 2024 GMT
        Subject: CN=673ea41f-c409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f9:a3:23:7b:4e:02:5a:63:12:8f:f4:f3:05:
                    e4:4d:f1:f0:91:46:3a:af:c8:3f:06:1a:3e:f5:0b:
                    98:71:31:4e:cd:d3:25:74:2b:23:b2:2f:df:70:18:
                    e1:af:f5:c1:c8:9b:4e:47:eb:21:1b:a7:2c:f6:69:
                    ad:03:06:e2:3e:33:6e:c9:d0:b6:5f:29:75:19:16:
                    59:8f:37:ea:2d:43:14:5e:cb:7f:a1:cc:26:55:f8:
                    2b:b6:6d:e8:46:fb:21:a3:8f:eb:77:ba:bb:88:23:
                    fb:41:71:71:81:47:24:58:b9:16:6b:2d:37:6f:73:
                    3c:25:bb:00:de:8b:e2:40:a5:7f:31:78:6d:a3:75:
                    6b:57:a3:bd:2a:78:7e:a5:14:fc:a8:0c:05:36:c7:
                    df:69:e3:b5:01:e5:bf:c5:7b:cf:54:c8:27:a1:9d:
                    18:e5:59:ff:0e:2c:1a:19:80:b6:9c:9e:da:e3:f4:
                    b0:48:e3:a0:3b:2b:5d:87:ef:2e:e7:37:c8:d9:75:
                    da:53:e3:ad:2d:c7:d9:40:2a:ad:13:8f:09:1b:5e:
                    79:c8:8b:63:71:f6:29:a6:2a:19:bb:dc:20:da:84:
                    13:ba:da:4c:f2:a4:29:8f:74:24:56:93:e8:52:70:
                    14:1f:93:6b:cc:bb:15:55:57:d9:56:6d:33:0c:6c:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:87:65:5D:8F:C4:A6:A4:FA:A2:83:89:7A:D1:27:69:93:4E:D5:95
            X509v3 Authority Key Identifier:
                keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:3d:f4:6c:5a:81:76:e4:6f:49:f2:9b:1d:1b:69:6a:76:39:
         46:a0:d8:47:28:3c:5c:d0:4b:78:cd:54:65:ff:94:91:52:0f:
         a3:e8:b4:bd:0e:9e:3e:8f:0c:47:c4:17:63:58:4e:12:e2:b6:
         ba:30:16:45:46:56:46:a9:5f:85:f9:3b:7f:d1:12:7a:28:de:
         27:f7:05:f2:5f:56:de:61:73:70:18:69:a9:67:d4:3a:63:48:
         6e:07:fc:16:03:83:41:c7:0a:30:b1:6d:71:09:98:0e:e5:ab:
         a7:99:fb:2f:2b:37:40:bd:ff:94:1d:ce:c5:1e:81:65:5d:31:
         31:a8:90:43:23:34:21:f1:90:1b:55:88:9b:c2:dc:d6:c8:e3:
         26:7b:43:18:e8:99:ca:d7:0c:1c:6a:9a:15:c3:04:08:be:bc:
         d9:ab:db:d0:8a:8e:0c:4d:62:5b:60:21:22:88:46:95:fe:91:
         ff:af:ce:21:f7:88:e1:ea:5b:e0:c9:fa:94:6f:cc:10:3d:ad:
         85:70:d3:44:46:4d:f6:2a:f0:e1:35:0a:45:66:d3:d7:62:38:
         39:58:f8:74:67:75:47:5f:2d:80:50:e7:c4:7a:b1:d4:fa:76:
         08:35:72:df:f1:94:16:8f:c2:4c:e2:19:41:e6:69:36:f9:ca:
         e1:32:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:04 2024 by rpki-client on console-fra.rpki-client.org