Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
File:                     F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json)
Hash identifier:          HawulXhrJZWbUdHc74meg1DnteMY0KoxhIsLFCbt9Sc=
Subject key identifier:   26:CA:47:64:C3:27:25:90:EF:D7:14:AF:43:E1:50:97:08:AC:59:DE
Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F
Certificate issuer:       /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
Certificate serial:       0EDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
Manifest number:          0ED5
Signing time:             Fri 22 Nov 2024 17:38:33 +0000
Manifest this update:     Fri 22 Nov 2024 17:38:32 +0000
Manifest next update:     Fri 29 Nov 2024 17:38:32 +0000
Files and hashes:         1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: gY5UCsDVzNvEvTmndwKYIQgy7wN8EsIQ9aUT0QtNIDY=)
                          2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: e6+7qu7EadcH2IZ/urcCvzozlBAhJqsvI1fPogc1Gmg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl
                          rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3805 (0xedd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
        Validity
            Not Before: Nov 22 17:38:32 2024 GMT
            Not After : Nov 29 17:38:32 2024 GMT
        Subject: CN=6740c199-4577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:42:99:51:20:b2:3b:a4:86:65:23:64:96:
                    29:dc:f9:34:ff:f7:74:92:dd:1d:0c:80:ba:c1:75:
                    21:e8:12:f3:87:22:12:bb:8d:ba:27:fb:93:ad:3f:
                    0d:c6:69:dc:68:68:0d:bb:2a:59:95:41:d9:82:21:
                    cd:89:a7:7b:af:c2:27:ee:2e:bb:23:f0:57:74:23:
                    cd:44:25:2b:55:39:70:49:07:f9:66:f4:ec:df:95:
                    32:70:87:76:44:34:98:96:22:9d:23:cc:f8:37:9c:
                    82:fb:a7:47:77:24:9a:e2:1a:b5:b3:0d:7f:35:94:
                    69:92:5a:da:e9:24:ac:84:8d:5d:09:c8:14:70:4a:
                    b6:b3:65:f2:ee:b4:48:7b:a3:19:17:9c:ba:b9:a7:
                    13:47:ff:83:d4:3e:10:f7:f6:51:2d:33:0a:da:83:
                    ba:e5:fd:95:05:9a:4e:35:b5:0d:fa:43:fa:83:ca:
                    5e:05:d4:d2:8c:22:f2:0e:04:cd:84:bf:5f:7e:73:
                    f7:26:4f:a0:13:72:0d:e8:0e:63:be:bb:61:7c:0b:
                    0b:22:4a:89:31:c4:bc:3d:d5:35:c5:bc:b4:09:2b:
                    1b:03:ad:43:e4:80:c1:1a:80:db:dc:d7:80:4b:b2:
                    5f:f5:3a:20:34:b9:79:67:3b:ab:53:40:ab:ed:2e:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CA:47:64:C3:27:25:90:EF:D7:14:AF:43:E1:50:97:08:AC:59:DE
            X509v3 Authority Key Identifier:
                keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:eb:3d:54:2d:68:83:d1:06:cb:3c:6e:40:53:f3:e4:c0:62:
         69:ea:68:40:84:9e:f2:a8:8d:bf:48:54:94:3c:16:69:2b:ea:
         4c:99:c6:b3:e7:08:d2:19:e7:82:62:78:61:b0:a7:e4:96:69:
         b3:9e:28:1c:f3:72:13:9d:6f:ed:a5:34:95:90:b1:78:09:ff:
         c2:4b:81:31:5e:c2:75:e0:55:01:0b:84:7b:1e:20:a3:2a:42:
         cb:a1:ec:c6:bb:d4:cc:52:35:80:d9:07:df:03:f3:92:25:d7:
         ee:07:d8:43:2e:00:9b:ca:47:05:a1:c5:d2:6a:82:79:bd:d8:
         c7:e6:93:1e:74:f1:08:fc:bd:85:f8:2b:ff:c4:c8:cf:ab:52:
         8a:55:4d:78:8d:1c:78:8d:0c:3c:02:94:c7:31:38:d1:64:95:
         77:9c:4b:0a:f6:30:66:fb:6a:d3:11:18:72:de:e6:77:6f:ef:
         07:34:3e:de:da:0f:5c:70:97:cb:20:72:54:73:8f:1e:d0:ed:
         8f:47:fb:47:a0:36:b9:8e:fa:a1:b5:f8:64:9c:42:f4:75:07:
         75:61:77:a6:ae:0c:44:76:88:1b:bc:05:ff:8a:06:2b:e8:82:
         09:ff:27:9f:8f:7c:0c:8b:58:16:85:0a:bf:a8:dc:19:4f:26:
         2d:6a:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org