Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
File:                     gL6TDjBkmxKs7o3EC1dat93mSUU.mft (raw, json)
Hash identifier:          Ic7U+YYHUsovhZqmg/CxRvzdHWBK9gnyPDSv6amBX9o=
Subject key identifier:   65:4B:ED:86:B8:57:B2:C8:5D:A6:47:9F:C6:F1:65:3C:CB:DD:45:64
Authority key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
Certificate issuer:       /CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
Manifest number:          DD
Signing time:             Sat 23 Nov 2024 03:43:59 +0000
Manifest this update:     Sat 23 Nov 2024 03:43:58 +0000
Manifest next update:     Sat 30 Nov 2024 03:43:58 +0000
Files and hashes:         1: gL6TDjBkmxKs7o3EC1dat93mSUU.crl (hash: eYyfD+Vl6LAGJO38djDelKZHyAggkelYt77djDngraA=)
                          2: F43FF9A8AA7511EE9BF3CC35C4F9AE02.roa (hash: WKYiP49W1hPEBg5xPJNDaypzL2WmJIjN8JIxlvH+Nc8=)
                          3: F0FB94ACA95611EEA6E7DB7AC4F9AE02.roa (hash: zhhux1n5VimQG2Opw0t79vR4Z74YBehcUmhiid+R0gw=)
                          4: 17A27C7E116211EF8FC7E061C4F9AE02.roa (hash: OfXLw74eEnD+wALnxMrVwPI67xdf6M5/aHwWE7Uyjy8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
        Validity
            Not Before: Nov 23 03:43:58 2024 GMT
            Not After : Nov 30 03:43:58 2024 GMT
        Subject: CN=67414f7f-4429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ec:f8:81:05:4e:2c:8e:f3:ce:56:59:1c:56:
                    9c:db:8b:8e:e4:f6:78:70:21:a4:aa:ac:f2:4c:d6:
                    af:0f:ef:50:53:cd:f4:91:3d:c0:ea:fc:4b:06:7e:
                    8b:e0:b0:01:10:5a:aa:4e:01:5f:57:2e:26:06:64:
                    77:3d:6a:e3:17:1a:4a:f6:9d:4b:7c:67:99:41:8d:
                    47:79:6f:f6:62:75:d5:8f:57:9d:c5:8e:46:e7:27:
                    c3:bd:67:c8:cf:5d:6f:52:c1:02:9d:d7:ca:de:b0:
                    90:0c:78:4e:5d:d1:65:9c:38:18:8d:dd:bd:7a:85:
                    45:39:d2:b9:c5:94:4e:95:35:ba:b5:9f:b7:fc:e9:
                    38:c2:0d:d0:eb:20:06:1b:90:c4:d7:f2:8e:e0:e1:
                    b7:33:ce:c1:79:8b:30:53:e9:af:25:66:3f:67:70:
                    da:a0:7b:90:c8:5e:08:57:4e:bb:5f:9c:56:26:86:
                    6f:87:48:9a:1a:f1:57:2b:d4:bd:f7:69:ec:6a:83:
                    e0:ba:8b:86:10:4a:b4:93:1a:80:11:ac:5d:35:2e:
                    c2:e4:23:23:ce:57:89:5c:19:d6:a5:85:3c:24:aa:
                    fd:0b:2b:06:64:85:c2:a5:77:00:3f:be:f7:5a:4a:
                    b6:e8:59:3c:83:bc:31:5d:cc:39:8d:bd:21:5c:5f:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4B:ED:86:B8:57:B2:C8:5D:A6:47:9F:C6:F1:65:3C:CB:DD:45:64
            X509v3 Authority Key Identifier:
                keyid:80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f0:34:8a:cf:75:69:6b:a3:47:a4:99:bd:76:3e:90:15:e5:
         30:17:f8:28:52:18:df:0e:96:39:1e:86:8e:16:db:f9:ab:b0:
         9d:45:ed:c4:2b:9d:65:e8:08:ab:9d:fd:ba:bf:f2:2c:18:9a:
         bf:41:61:c2:fd:57:0b:58:56:ee:a9:a5:ce:3c:fa:0a:a0:8e:
         77:b6:18:4f:14:46:69:a1:b6:66:37:80:26:c1:67:16:37:7e:
         3c:6c:6a:11:ff:79:87:65:04:3f:ee:ac:aa:27:b2:e3:01:5b:
         0c:58:d9:c6:7b:21:35:a1:98:26:b7:75:a7:37:70:fa:5c:b3:
         2f:74:f4:f7:50:ad:8d:dc:ba:61:1f:66:50:b2:c0:2d:9e:d8:
         dd:63:c3:2f:3a:92:21:d7:56:ea:6e:e7:74:a8:2f:1a:e9:ae:
         17:7b:41:81:d4:20:75:ae:fc:15:96:fb:a7:ee:24:f4:82:53:
         97:07:e6:f6:20:51:96:f5:56:05:b3:aa:51:36:f9:16:a1:8f:
         0b:42:bc:8f:e2:06:44:72:83:a7:2c:47:85:6e:0b:bc:41:8b:
         e2:77:f2:8b:03:16:cd:5e:7a:6e:68:33:c8:bd:c8:da:26:1c:
         2d:e8:31:1e:fe:c5:94:78:de:ce:44:63:af:69:f9:ab:25:8d:
         15:ea:dd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org