Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File:                     OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier:          O49PIIq9lBYIpjCkeS4e1R/k4yrYvvymrjXs2PJ79RU=
Subject key identifier:   38:EB:DC:5B:FC:94:14:4C:D8:DF:FE:88:82:37:E5:CD:83:D2:3E:00
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer:       /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial:       075D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number:          0745
Signing time:             Wed 20 Nov 2024 21:10:29 +0000
Manifest this update:     Wed 20 Nov 2024 21:10:29 +0000
Manifest next update:     Wed 27 Nov 2024 21:10:29 +0000
Files and hashes:         1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: BzpB5kyZ2pd2Q9BBAvCeMTpvKNuZ6Y7CW30ovbF3Bkk=)
                          2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: VacwFfXxfWfasplgXF9A1AX11wCHDuK5XANfDyd18Pc=)
                          3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: nh4OlofqMh099kYvPNfjQ05/jiIH5vP8fVdEV6he48g=)
                          4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: KuZID6pq906VPDfvmGsN77h7hBvEwQX/7r+oBn+hpC0=)
                          5: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: MChKj8CysBVpKBL1Yc5KnUgJyLD5UeDlW+DQqjWmTk8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
                          rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1885 (0x75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
        Validity
            Not Before: Nov 20 21:10:29 2024 GMT
            Not After : Nov 27 21:10:29 2024 GMT
        Subject: CN=673e5045-2c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:73:1c:23:c7:0b:31:6a:4d:e4:3a:15:7b:
                    6a:f7:db:25:39:86:84:46:28:6b:9b:51:ff:6c:42:
                    b8:59:a1:e3:b1:7f:cc:00:2d:9d:9e:b3:3c:ce:2b:
                    ea:1d:79:fc:a9:4c:23:7a:8d:1a:b4:52:01:67:e8:
                    17:58:61:e2:97:88:2b:07:24:91:02:99:1a:72:cf:
                    fa:bc:02:ff:7c:72:0e:84:51:65:0a:fa:01:1b:6b:
                    65:5d:90:1d:44:b4:0b:e9:3a:f8:34:6b:e8:19:20:
                    09:52:29:3e:fc:78:bd:93:72:f2:7c:19:48:50:42:
                    08:ba:c6:83:75:63:ee:ea:f6:c9:e3:ba:00:4b:07:
                    1c:74:dc:9e:0f:f5:3c:b7:a0:63:4a:64:78:9b:2d:
                    bc:e9:05:e0:1b:fe:53:11:cc:d7:6b:2b:5b:9b:ca:
                    44:00:66:4d:9d:49:cd:48:d8:b7:15:0d:40:d2:8b:
                    8d:4a:37:ce:50:eb:9a:aa:db:8e:15:8d:05:2d:1e:
                    08:1d:0c:21:20:cc:bb:06:c9:e8:65:82:c3:b1:f1:
                    1e:10:d7:6e:0e:39:90:e2:83:ab:83:60:2a:e9:c8:
                    d4:fd:69:8c:47:dd:a5:6b:93:38:37:51:d8:e3:08:
                    ff:7c:94:e0:42:c3:1c:dd:7f:a6:98:e3:c2:f7:f9:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EB:DC:5B:FC:94:14:4C:D8:DF:FE:88:82:37:E5:CD:83:D2:3E:00
            X509v3 Authority Key Identifier:
                keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:34:a1:de:28:6e:cd:9f:81:af:55:f8:1c:e6:0b:e1:4e:ce:
         c0:c1:21:b1:6a:da:6c:1f:16:8f:b1:18:37:40:ac:18:0a:9a:
         91:e2:63:78:75:06:f7:63:f7:8c:35:ed:54:fb:b9:17:11:d7:
         1a:9d:ea:79:50:c8:cc:28:8e:32:c2:b5:35:31:7f:3c:fb:6d:
         01:51:ff:b8:6e:8b:07:df:57:70:73:4b:fa:f3:bc:b6:06:e8:
         63:36:86:44:0c:f3:84:f2:92:8d:12:bf:ad:cf:85:37:69:39:
         ae:62:7c:00:9d:35:20:2d:bd:20:13:64:64:9c:1a:d6:f7:97:
         ef:6e:a9:c6:e0:ab:a2:e2:17:b5:59:69:5d:41:14:57:c3:84:
         f3:2c:b2:a5:f5:46:5c:17:ce:44:a3:dd:18:d9:93:4f:70:37:
         e7:15:52:48:a1:11:a8:36:54:1a:79:d2:8c:7e:73:f4:ca:05:
         17:44:28:0b:e2:d5:91:30:68:08:b9:15:ed:44:4b:37:c2:ae:
         0e:8a:38:00:9c:84:f7:dc:0d:cf:4c:90:02:e5:b1:52:47:6e:
         82:97:07:e0:e4:21:08:51:88:be:e0:9b:42:42:a0:58:91:e3:
         ba:f7:5b:28:fb:27:bf:3c:16:88:29:98:00:6d:e3:40:8c:39:
         e6:49:df:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:56:02 2024 by rpki-client on console-ams.rpki-client.org