Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
File:                     PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json)
Hash identifier:          wNJMmGCgFKaciWl8Ei0d3/DtMnJ2DAPqK1HDUlhOUOg=
Subject key identifier:   F0:3F:03:10:50:35:4B:27:72:F2:19:3F:C3:A1:30:A4:54:91:84:5F
Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
Certificate issuer:       /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
Manifest number:          DD
Signing time:             Sat 23 Nov 2024 04:03:08 +0000
Manifest this update:     Sat 23 Nov 2024 04:03:07 +0000
Manifest next update:     Sat 30 Nov 2024 04:03:07 +0000
Files and hashes:         1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: kePjf+IO5XPJ5+IMR5dCefau7VMol+/6O8AcikoOEYg=)
                          2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: c4G3pamZR8xK6osKE1GuzAGlLjX3Lc/w5+sMa059xYc=)
                          3: 3F32B394825511EF9EAD7768C4F9AE02.roa (hash: QvdRINKOYSlpEVfGT2bl6rscnNKBhyf/TTvbyDd2nQU=)
                          4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: r/dMMrrKfi7HksKacltJHyMKyJEPPTZYtDJB071cZ6I=)
                          5: 23D4183024D711EF932FC941C4F9AE02.roa (hash: TJnHmGcnnW0D/SYMC1vV5YI0Sni1ztQUWnBZGYy15YU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
                          rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
        Validity
            Not Before: Nov 23 04:03:07 2024 GMT
            Not After : Nov 30 04:03:07 2024 GMT
        Subject: CN=674153fc-0736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:58:0a:05:26:82:85:da:94:07:b7:10:e6:
                    f5:58:04:52:5a:6f:eb:81:52:6f:ec:9b:b2:24:d7:
                    93:26:d6:7b:d0:2f:54:9a:da:5c:ff:b7:a5:b5:64:
                    c3:6d:5d:9f:d2:cb:c3:e3:80:cb:8f:3e:3f:18:82:
                    af:ed:1a:1a:67:ba:ae:d5:42:a4:98:05:d0:da:77:
                    a3:56:1b:79:f6:c5:5b:8c:00:7a:c4:a1:27:a1:fb:
                    fd:ff:94:b5:ef:4a:40:ed:03:04:fa:e8:b0:e4:0d:
                    e4:5c:8a:95:83:b9:69:d3:c6:90:39:fd:1d:39:83:
                    f3:29:4a:2b:7a:43:ef:8b:95:2d:88:32:e5:98:6b:
                    ad:90:c5:df:5c:5a:24:e0:bf:bc:e3:9b:9f:44:5d:
                    7a:a9:42:6b:0c:50:08:24:cf:14:69:d6:96:b3:a2:
                    55:92:5f:36:33:b4:c7:69:03:5a:d0:7b:d2:5b:69:
                    6d:97:73:4b:6c:ee:b2:8a:2d:dd:f6:a7:fc:c3:dc:
                    62:82:28:d9:b9:ae:5c:27:7a:ae:ea:26:51:bf:41:
                    d1:a6:ca:7e:ec:8f:ed:95:1c:b9:65:48:13:d1:17:
                    23:18:14:55:ab:38:02:a9:9e:29:2f:79:b2:7e:4b:
                    16:45:62:5a:a7:a7:fc:1e:2b:bf:1c:b7:29:32:f2:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3F:03:10:50:35:4B:27:72:F2:19:3F:C3:A1:30:A4:54:91:84:5F
            X509v3 Authority Key Identifier:
                keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:16:ce:08:9e:e1:27:86:23:cb:c1:88:6f:8e:2c:e7:1e:02:
         73:a0:fd:97:2b:47:5c:71:90:ad:2e:37:54:29:63:42:40:53:
         db:af:07:1e:db:93:e5:c1:24:88:6f:1b:47:ab:31:75:e1:55:
         9f:92:52:57:05:e1:c3:16:34:c2:b3:99:76:3d:b5:5b:cd:d6:
         ed:d5:60:51:46:11:31:4e:85:89:73:bb:a1:1a:48:15:91:07:
         2c:90:eb:0c:ed:8a:a7:d0:d8:03:0d:50:32:7b:bd:3a:c5:ca:
         1d:ce:95:95:b5:67:3b:c6:92:8c:cf:24:d0:a6:5c:a2:e6:64:
         ad:4a:4a:76:4f:5e:8b:84:6d:5e:cb:52:39:cc:09:31:db:a5:
         b7:b5:9f:89:76:eb:39:4c:6e:c4:5b:c5:18:3b:84:b2:2b:0d:
         49:6e:72:d8:42:43:78:8f:de:4e:f7:45:e5:ae:00:f8:67:8f:
         4f:ba:79:33:5d:4d:dc:0b:0e:f4:72:6a:8f:8e:5e:9a:86:65:
         59:61:dc:0a:a5:b2:89:dc:98:e9:4a:8a:65:2f:5f:13:a7:b2:
         13:cf:d2:cc:a3:0d:c1:16:74:ae:ed:42:c3:be:60:80:15:51:
         17:20:67:fe:a7:45:55:91:03:3f:8a:3e:b6:a2:f1:78:44:89:
         c3:63:75:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org