Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
File:                     TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json)
Hash identifier:          ZosvDIwuQxuaGA5ycrQdWNXh5NeIv4L4I4HdP00HTns=
Subject key identifier:   1A:7D:E2:B9:46:3F:00:CD:F6:3D:57:0B:10:24:D0:AA:DE:A6:93:87
Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
Certificate issuer:       /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
Certificate serial:       0818
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
Manifest number:          0811
Signing time:             Fri 22 Nov 2024 20:34:54 +0000
Manifest this update:     Fri 22 Nov 2024 20:34:54 +0000
Manifest next update:     Fri 29 Nov 2024 20:34:54 +0000
Files and hashes:         1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: SaI00q/uXV208mXaywP2gSww3fIfrY4jU2qlcfiXliE=)
                          2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: Z6w/oPaxagp7eRDDT5xLlgr2cfNwseIx7hDDJJ9ovPA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072 (0x818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
        Validity
            Not Before: Nov 22 20:34:54 2024 GMT
            Not After : Nov 29 20:34:54 2024 GMT
        Subject: CN=6740eaee-e316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:b5:a1:2b:25:06:d0:1b:ce:08:3b:29:bc:
                    32:09:4e:cd:f0:eb:10:24:c2:44:59:8c:f5:9f:f0:
                    b2:2f:5d:e9:97:ae:c5:3c:6f:c3:5e:2e:fa:47:dc:
                    72:9d:55:29:39:ad:8f:bb:9b:58:4c:be:f7:8a:87:
                    4d:ea:76:0c:97:5c:cb:0f:ca:4b:53:9c:14:e8:1f:
                    22:fe:82:0d:f2:52:fd:cf:6b:99:48:b2:83:f9:66:
                    c4:18:0e:a8:aa:de:6f:8e:18:ba:ae:af:19:ca:83:
                    f3:94:d2:e6:51:ee:12:0a:4d:25:17:b8:bb:7d:27:
                    d3:0b:d4:9b:f6:2d:16:d6:8e:8d:14:71:76:bf:85:
                    cc:90:83:a9:a2:37:34:95:4f:58:6c:6f:50:ad:07:
                    26:60:99:09:6e:6e:27:46:ae:53:4d:fd:f3:b9:1d:
                    97:ae:87:0d:04:3e:15:31:74:3a:15:8d:d2:15:0f:
                    67:9a:7d:9d:24:23:af:26:3f:67:b6:37:42:25:50:
                    ee:14:98:2f:e7:f3:3e:b8:ee:56:8c:80:08:5e:68:
                    41:b8:60:92:66:78:94:63:a7:a6:94:da:f2:6e:06:
                    e8:dd:03:66:ea:84:91:c5:39:04:a7:ff:63:9f:f8:
                    56:a4:dd:1b:f7:01:3a:1c:1d:45:c6:3d:45:dd:0e:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7D:E2:B9:46:3F:00:CD:F6:3D:57:0B:10:24:D0:AA:DE:A6:93:87
            X509v3 Authority Key Identifier:
                keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:16:8e:22:c4:58:0e:43:61:7e:44:80:52:92:38:e7:f6:eb:
         90:00:95:9f:93:e5:cb:1c:f4:b7:d8:dd:85:d6:1d:c3:90:37:
         83:54:f7:f9:53:be:4a:16:49:9c:f4:9f:68:20:9a:df:61:ef:
         56:52:79:ba:47:f7:9e:b8:39:e0:3a:0f:0f:a5:23:e3:22:b5:
         4b:6e:11:26:83:45:4f:49:9d:66:1e:64:6a:6d:41:fe:70:33:
         ca:5a:3f:f4:8a:ac:76:21:44:4b:dc:a6:9e:e3:57:dc:09:3a:
         18:90:f0:3c:bc:b9:90:15:10:0d:cc:0d:45:87:a4:17:cb:c4:
         be:b5:6b:4c:84:28:b2:33:17:57:41:cc:d0:4d:8a:44:12:23:
         23:27:b0:09:0e:de:15:48:8e:22:bb:dc:17:7e:cb:93:3c:49:
         7c:e5:0c:13:9b:67:53:e0:40:91:bd:b6:90:96:41:42:2d:04:
         5e:6e:ea:b7:ab:71:00:3a:26:0a:96:ab:7c:d3:fb:d7:a7:3e:
         2b:94:90:ff:13:f7:70:84:19:b2:47:32:57:9d:8f:57:39:66:
         27:4c:d5:50:8d:57:87:3b:17:cc:62:ab:37:41:97:ae:58:ef:
         f7:78:60:99:6a:ba:85:3f:0a:35:99:8d:3d:6f:58:50:34:74:
         a5:15:52:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org