Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
File:                     4PPPvfp9B0J0-nSdQCnO41iPd8M.mft (raw, json)
Hash identifier:          waOiV3JC5cXXOcgr5ARVsiKckSfE0FLasxj8UbJCnPc=
Subject key identifier:   6E:22:45:57:FF:A4:17:A2:A9:19:2C:34:89:2E:7B:A9:4E:93:BD:D4
Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3
Certificate issuer:       /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
Certificate serial:       074F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
Manifest number:          0746
Signing time:             Wed 20 Nov 2024 21:08:20 +0000
Manifest this update:     Wed 20 Nov 2024 21:08:19 +0000
Manifest next update:     Wed 27 Nov 2024 21:08:19 +0000
Files and hashes:         1: 4PPPvfp9B0J0-nSdQCnO41iPd8M.crl (hash: ynuc03KOK7lpg9KzaeHYY7y3ko5wqSfQx054nkh+N54=)
                          2: 3DAD522E1D7611EB8673F476C4F9AE02.roa (hash: e5b3DDJ+5AdBpB+VVjYybf9HAu4lpvnirB8lehNH2gE=)
                          3: 01F74A7EBFAC11EE89B0182DC4F9AE02.roa (hash: v+Wfr9mdwprqPsB/fgoxNe7MPi3W3bX6rDgX0OFI/s8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl
                          rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
        Validity
            Not Before: Nov 20 21:08:19 2024 GMT
            Not After : Nov 27 21:08:19 2024 GMT
        Subject: CN=673e4fc4-34e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1b:d9:55:45:0b:c6:28:16:46:d4:71:01:59:
                    06:d3:f0:fe:cc:ce:c3:50:82:58:eb:4b:8a:b5:ab:
                    7f:4e:c9:0e:0a:51:e5:76:78:85:0f:34:62:89:fb:
                    f4:76:82:63:a0:66:67:06:32:5e:b5:3a:71:04:e7:
                    cb:08:77:f8:8c:8e:a4:c7:6c:60:61:c9:bd:be:a8:
                    69:1d:4b:7a:bb:45:28:2c:88:b2:c5:09:9f:aa:ae:
                    c2:ed:57:e9:9c:66:e7:32:49:d0:40:f6:7a:61:a9:
                    91:0c:0e:4e:c3:74:61:5f:5c:47:b0:d9:14:57:2a:
                    1e:e9:f6:b0:90:d0:a6:a2:b6:c6:bf:db:ea:39:89:
                    ed:05:64:64:bd:61:53:71:df:fd:46:22:4f:23:61:
                    41:c1:98:e2:32:7e:3b:fb:ce:df:e7:ff:8e:c6:32:
                    7a:90:82:9b:82:0d:75:cf:44:8c:70:66:24:84:e9:
                    f2:e2:45:a7:55:1d:fa:8a:ae:98:a3:93:1c:5b:36:
                    d4:c9:73:19:87:fb:8b:8b:8b:7e:49:68:9e:fd:ea:
                    e5:b7:55:4c:25:69:49:a7:85:77:8e:fa:19:20:e7:
                    27:4f:6a:d7:9c:9b:22:27:7a:e8:e5:08:14:e4:75:
                    57:7a:f6:d7:b5:b9:8a:5e:fb:d3:71:94:d8:17:fa:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:22:45:57:FF:A4:17:A2:A9:19:2C:34:89:2E:7B:A9:4E:93:BD:D4
            X509v3 Authority Key Identifier:
                keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:65:97:ae:d8:8b:2c:7c:7b:d2:80:10:ce:6c:b1:1a:7d:0b:
         81:d4:0b:8b:c9:d0:1f:c5:77:db:e3:ad:50:80:ab:23:58:bf:
         04:11:ff:77:d7:9e:42:98:c8:7a:c2:84:b8:f6:11:fe:d6:01:
         61:75:42:08:ec:7a:52:3a:da:df:15:ea:e0:7c:80:97:b1:4d:
         3e:a4:6a:0a:55:b6:cd:b7:82:72:80:67:66:09:33:b4:fb:5a:
         98:38:bd:07:b7:05:1f:3a:99:41:3c:ed:0d:e4:18:30:16:1b:
         fd:20:aa:dc:c8:20:22:5d:22:1c:e9:26:12:f7:55:63:49:ef:
         82:9e:de:2f:22:5f:e1:a6:61:05:aa:0b:95:14:72:4b:25:e4:
         b0:1d:f8:a6:28:dd:f3:a4:68:47:3c:ad:0b:b3:6c:62:fa:35:
         c0:bf:24:68:a0:e9:d6:dc:5b:45:89:e6:63:d3:1d:ee:bf:20:
         a4:f8:8a:7c:29:28:c9:17:d0:2e:cb:30:d8:97:05:2b:6b:6d:
         2d:4c:e7:d8:62:bd:51:70:c1:c8:c3:5d:1f:a8:1a:de:b8:3a:
         cf:80:12:b4:3e:19:c3:33:e2:b3:04:60:b9:df:55:2b:f2:0f:
         e3:8a:da:a8:60:b0:23:6b:06:22:88:02:f8:c2:13:24:21:d1:
         71:66:ee:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:46 2024 by rpki-client on console-fra.rpki-client.org