Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
File:                     uzvV1-GZJNhitqQb80x_27vpHG0.mft (raw, json)
Hash identifier:          H1uE3Dm/lcwYbONNFnhuXwj82RUidqHBx8qQrE4nhwA=
Subject key identifier:   00:EC:46:68:80:75:CA:C7:D8:B1:E0:6D:4F:09:20:D8:13:44:CC:66
Authority key identifier: BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D
Certificate issuer:       /CN=A91CA735/serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
Manifest number:          31
Signing time:             Thu 21 Nov 2024 05:43:45 +0000
Manifest this update:     Thu 21 Nov 2024 05:43:44 +0000
Manifest next update:     Thu 28 Nov 2024 05:43:44 +0000
Files and hashes:         1: uzvV1-GZJNhitqQb80x_27vpHG0.crl (hash: cU0SWBc2VuhUOrxdDeZEXTMgW79ifuKk4SWUiu/6TnM=)
                          2: 385E3308639D11EFB668775FC4F9AE02.roa (hash: LXvvIFvrSNuKdk49zG4/lilXd1uzEXFwF73jkXgbGks=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl
                          rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA735/serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D
        Validity
            Not Before: Nov 21 05:43:44 2024 GMT
            Not After : Nov 28 05:43:44 2024 GMT
        Subject: CN=673ec890-8b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:51:59:32:ac:73:75:dd:e2:eb:2e:5e:c4:
                    81:2d:db:52:7b:64:08:0c:26:97:c2:85:d0:af:ca:
                    6a:f9:a2:5f:b7:34:fc:a4:e3:12:1f:58:87:ce:70:
                    dc:ff:54:3f:8d:69:bd:e6:2c:1b:ab:9f:81:31:7e:
                    99:5c:d7:04:a0:eb:97:31:92:02:08:13:b6:be:99:
                    70:88:9a:3b:9f:6c:d2:6f:26:a1:e9:9b:89:9a:3b:
                    ff:0a:40:59:a8:02:fe:17:8d:a5:33:4d:63:ab:c3:
                    6a:aa:ce:75:24:64:21:aa:9b:ef:95:dd:f9:12:bd:
                    70:59:7e:13:ee:11:28:88:93:8e:66:4d:db:d8:ec:
                    85:6d:c3:9a:10:3c:30:35:9b:c0:ec:ea:ac:87:13:
                    df:52:bb:0b:3e:cc:29:a6:31:71:94:21:6a:3b:6f:
                    2c:ff:fa:d8:55:e8:8d:cc:e2:e3:d6:73:8e:d5:5b:
                    58:2c:61:45:c5:c1:65:1e:da:4a:53:f9:9f:8c:7c:
                    fe:08:e0:f8:b9:0c:e3:ce:cd:c4:fb:ef:8a:55:a8:
                    8c:24:8e:0c:6c:b4:0c:7a:f0:fc:8b:ce:a0:31:f5:
                    f8:53:04:26:0d:8c:b3:9e:d2:fa:84:06:4c:67:a8:
                    ec:91:76:6e:ec:7e:05:b7:c4:8c:5b:07:83:49:87:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EC:46:68:80:75:CA:C7:D8:B1:E0:6D:4F:09:20:D8:13:44:CC:66
            X509v3 Authority Key Identifier:
                keyid:BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b8:8d:e5:28:1e:38:25:84:4d:73:5b:dd:f4:c8:d9:a2:91:
         44:5a:98:79:47:47:06:cc:cb:cf:10:b8:74:e2:8b:84:46:9d:
         19:45:b5:f6:a0:52:d7:4e:11:d9:2c:2a:9c:87:a3:65:75:49:
         50:12:d3:32:a7:be:24:7c:b1:b9:73:5c:ca:9d:fa:b1:43:d4:
         22:41:af:55:dd:54:26:10:16:b0:01:02:03:40:63:10:d5:61:
         2c:d3:2b:cc:2e:50:62:25:d3:6b:40:d9:de:d9:8a:82:4e:4f:
         30:27:18:8b:fb:11:02:08:8b:b6:54:b5:57:fe:8b:8e:53:13:
         e6:d2:cb:44:6d:ca:94:08:a2:45:98:4a:5e:da:07:4b:4b:77:
         bc:2e:78:f1:7b:8d:21:77:65:9b:3b:72:1f:40:2e:62:15:2b:
         8b:b9:9a:4f:c2:dd:3d:bc:4c:8a:a0:d7:2c:52:c6:4d:ae:70:
         6e:0c:5b:47:6c:30:8b:e4:b0:1a:f2:a2:93:2c:d1:30:f7:37:
         a2:72:b9:6d:1e:0f:4c:a3:56:e0:f0:b7:68:69:1b:6a:18:81:
         3d:32:db:1d:b3:c1:d2:63:c3:e9:df:70:33:20:8a:99:9f:a7:
         d6:e5:27:95:5c:f1:86:f2:d4:cd:d6:9c:f6:41:a5:bc:ab:b4:
         a5:bb:f8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org