Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
File:                     bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json)
Hash identifier:          dvQ61mJSSbXvEr15tQ5YY4Z15iyZymOugeJq+dPdNow=
Subject key identifier:   DD:21:C2:69:4A:FD:2A:FE:E4:E1:F6:B7:4C:2D:F9:96:FC:C6:4A:65
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Certificate issuer:       /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial:       02E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
Manifest number:          02C0
Signing time:             Thu 21 Nov 2024 01:07:10 +0000
Manifest this update:     Thu 21 Nov 2024 01:07:09 +0000
Manifest next update:     Thu 28 Nov 2024 01:07:09 +0000
Files and hashes:         1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: 7AxBBaZ+pCMzOv8LB5V/uskXKwkvMucVg0Zd8BisbYk=)
                          2: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: qiPRAo39Nv8HoFoTbRrwivY4p7lSrXMxurkPZTZZGmo=)
                          3: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: +6Qn9fMMN2JTLH3JCNnMkYnKTJVe5wXPrggbGe55SKw=)
                          4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: tdNvvtBtSkEXNP3bq9ounB53zb+u6cTArykXyU3hS/M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
                          rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745 (0x2e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
        Validity
            Not Before: Nov 21 01:07:09 2024 GMT
            Not After : Nov 28 01:07:09 2024 GMT
        Subject: CN=673e87be-d1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:70:4c:43:bb:88:37:38:26:0c:2b:0f:14:
                    b9:ac:f2:53:47:29:e2:c0:10:32:58:f7:54:7e:60:
                    d0:f2:7d:87:1b:3f:4a:fa:67:54:0c:1d:89:3a:70:
                    3e:30:98:83:58:fc:58:1a:1a:15:17:b5:58:d4:47:
                    ed:88:04:a1:19:a1:74:44:f6:ba:5c:18:23:df:87:
                    52:09:f7:61:8b:e4:51:cf:c1:bb:6b:8d:d4:72:48:
                    4b:41:dc:78:cf:a5:44:32:7b:29:48:a4:ce:ad:d5:
                    64:99:fc:39:75:38:57:cc:af:9e:7a:2f:6c:15:69:
                    72:9f:ab:f1:62:37:77:85:ab:dc:01:8a:d8:23:e6:
                    67:bf:12:61:6a:81:23:8a:69:25:43:21:e3:5e:e7:
                    a3:97:c4:0a:b7:78:01:50:37:c7:e5:53:30:23:51:
                    09:60:d7:6b:86:39:b4:04:04:6b:e4:f5:f9:98:65:
                    8f:2c:30:28:0f:75:2f:ba:cc:4d:80:26:aa:df:a7:
                    59:0f:52:c1:3b:46:31:fd:74:70:70:e4:1b:9a:41:
                    e7:9c:b4:96:c4:9d:86:62:b5:68:f8:85:5a:11:56:
                    46:24:a1:e2:46:af:62:56:27:96:8c:0e:9c:8c:03:
                    a9:2a:27:4d:55:95:01:47:82:a1:36:9c:56:f5:50:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:21:C2:69:4A:FD:2A:FE:E4:E1:F6:B7:4C:2D:F9:96:FC:C6:4A:65
            X509v3 Authority Key Identifier:
                keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f2:63:f7:d7:fe:06:ae:fd:84:24:9f:70:00:b1:e7:4d:88:
         a0:b6:93:58:6b:98:13:2f:fd:41:e4:b9:d3:2f:d5:4e:b3:20:
         7c:b9:65:86:5f:3d:f5:73:52:21:4e:97:a3:77:ac:fa:ed:51:
         6b:cb:f6:73:25:51:f8:f1:3f:47:7f:c7:90:88:9d:b8:6d:a4:
         d2:cd:8b:bd:59:1f:c8:09:ad:2a:1e:13:22:7d:ee:c7:bc:7b:
         ae:6d:ff:b7:43:b1:81:57:c2:fe:bf:a6:e7:67:66:d0:5f:c2:
         69:ed:cd:dc:04:fc:58:ae:fe:7f:3f:2d:53:f5:75:e6:40:5c:
         a7:71:24:08:1b:5b:28:c3:71:e9:8e:73:b9:53:74:38:06:a6:
         ae:e6:f5:40:03:85:58:cd:29:2b:84:9b:c0:bc:06:ab:cc:3b:
         83:ff:b2:e4:9e:8a:1b:83:de:18:d6:36:ce:68:88:9f:b1:d9:
         ea:29:05:cf:69:93:ac:95:e0:f1:fe:b9:b3:39:51:f9:55:cd:
         c9:f7:dc:7d:87:c9:7e:9b:15:89:cd:83:e4:c9:ba:bd:76:75:
         d5:99:3e:09:de:a6:a0:b2:b2:6b:aa:d0:2d:05:3a:a5:f9:2a:
         aa:79:36:15:08:69:87:0c:c8:c0:9f:70:e0:90:92:78:6d:d2:
         ea:6f:9f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:53 2024 by rpki-client on console-ams.rpki-client.org