Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
File:                     97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json)
Hash identifier:          qRA0wqt93rn2aY2tFyrY9uLYIZx4hxR62qaElYCBDkk=
Subject key identifier:   28:E3:71:92:2C:B5:2A:BD:29:03:BC:E8:CE:BD:6D:71:FB:77:B2:87
Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
Certificate issuer:       /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
Manifest number:          0177
Signing time:             Sat 23 Nov 2024 02:10:16 +0000
Manifest this update:     Sat 23 Nov 2024 02:10:15 +0000
Manifest next update:     Sat 30 Nov 2024 02:10:15 +0000
Files and hashes:         1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: phnOTAsag3tVCiEinL2LiVombgDYxnIQPWsi2lHmkGw=)
                          2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: cSUwwlMJ5mfc3+KfZCUgcz8ae7weryNy8ZVQhlARvAQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
                          rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
        Validity
            Not Before: Nov 23 02:10:15 2024 GMT
            Not After : Nov 30 02:10:15 2024 GMT
        Subject: CN=67413988-1957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:2d:ec:63:bd:09:4a:fa:2d:48:f4:4c:90:
                    5b:93:09:3b:e9:59:ae:c3:4a:4e:92:3f:c2:33:13:
                    9a:ad:06:82:c8:e6:21:0f:e7:8a:f5:36:04:36:07:
                    25:c4:a6:6e:bd:0f:64:e6:24:78:ea:0a:41:22:3f:
                    a3:31:3a:95:bc:5e:bf:12:12:8d:76:f6:d0:bb:98:
                    b8:60:a8:97:43:dc:bc:35:50:54:0b:4d:bb:9f:6c:
                    d0:f3:d6:08:c5:da:df:45:1b:69:87:88:0f:50:09:
                    ac:3d:ad:ab:b2:e2:a2:07:97:9e:14:c7:a0:f7:bc:
                    d4:67:04:81:c6:ec:dd:9c:ae:ea:69:cc:38:66:2e:
                    85:48:35:2c:91:6c:eb:62:34:10:a8:8f:86:f3:e6:
                    37:92:5f:58:75:e9:b7:3e:49:4c:e1:0d:40:d5:05:
                    32:df:61:1e:56:29:9b:6c:df:65:f1:35:a7:68:45:
                    c8:e1:b9:b2:80:df:7d:67:4c:95:f7:95:2f:a0:dd:
                    b5:7b:6d:5d:93:e0:72:3b:81:05:73:b7:01:1b:59:
                    9d:ec:84:37:64:52:7a:c1:9c:60:b0:4a:f5:42:41:
                    51:73:b0:00:38:39:c6:75:4c:03:8b:d2:28:6f:e7:
                    44:f7:55:6b:0e:20:ad:34:ad:da:75:0b:20:b8:6e:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E3:71:92:2C:B5:2A:BD:29:03:BC:E8:CE:BD:6D:71:FB:77:B2:87
            X509v3 Authority Key Identifier:
                keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:57:7e:e7:b2:71:7a:80:c0:e6:6b:30:a4:fa:57:56:d3:5d:
         8d:c4:84:de:26:21:9f:5a:02:34:5a:95:93:9c:3f:a5:f7:d2:
         20:bf:0b:73:2d:8b:cc:90:b9:c2:e4:d5:1c:ea:b2:2f:de:77:
         6a:6f:86:f6:4f:3d:f5:33:75:f5:9a:7b:4b:1a:16:a4:01:f5:
         d7:7b:2a:28:00:33:f8:67:f0:d1:3a:e6:ed:38:b4:0a:5a:98:
         e3:f5:a8:9c:e3:33:6f:70:83:fd:20:95:fa:98:75:8b:a8:c7:
         e8:84:f8:9a:17:e1:cf:73:0d:d7:2d:e3:ce:2e:6d:8e:cf:ea:
         37:fc:91:0e:2d:c8:bf:3f:1b:c6:9b:cc:15:92:44:48:8b:aa:
         38:06:36:c5:fc:3c:24:d2:0d:51:a1:c9:58:de:5b:16:35:be:
         35:79:7b:05:50:eb:87:ba:9a:b1:22:24:5f:40:c0:1c:63:06:
         7b:ee:90:ca:ec:cb:56:f9:94:5c:ae:6d:eb:c2:32:32:69:97:
         ca:2c:ae:ee:86:a3:0d:33:ff:b6:0b:d4:e0:04:26:04:35:4e:
         97:22:66:7b:11:a7:0d:f0:40:92:b4:ee:72:bc:92:c8:cd:f3:
         92:93:7f:6b:fc:d5:e9:a9:e1:60:0c:ee:c2:85:f6:39:15:19:
         27:1d:28:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:57 2024 by rpki-client on console-fra.rpki-client.org