Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
File:                     7vvGU2P1cW1yTBF81UIh5BLZI8w.mft (raw, json)
Hash identifier:          QouFx8Kb+w3ZXVHVUblB0BaVtk6FzJCPajDyJpKd3Qs=
Subject key identifier:   2A:A3:4F:4D:94:37:41:03:46:9E:C2:23:AA:C6:09:3B:36:07:B1:8F
Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
Certificate issuer:       /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Certificate serial:       0280
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
Manifest number:          0274
Signing time:             Sat 23 Nov 2024 01:11:36 +0000
Manifest this update:     Sat 23 Nov 2024 01:11:35 +0000
Manifest next update:     Sat 30 Nov 2024 01:11:35 +0000
Files and hashes:         1: 7vvGU2P1cW1yTBF81UIh5BLZI8w.crl (hash: BPC03wh/4BvLPQwdXaZL5O3VJkXQ1kr1fiC/tBRQNsg=)
                          2: ABF61020E93C11ECA5406975C4F9AE02.roa (hash: pDFhcqRhca1GNa0ZmLkQpgslerwa9C5G+2JfTrt137w=)
                          3: ADBF1F6EE93C11ECA5406975C4F9AE02.roa (hash: qb7qUtAkoHjPv30O4ulR321GUnOwL4yDIMYd10CmtCA=)
                          4: 01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (hash: IdffaUaBoSta1anksGvusIKN2vlycl68X+OeRcTSpcY=)
                          5: AD08F946E93C11ECA5406975C4F9AE02.roa (hash: 8j2o1z/nwnh5lm7+ZdnqPMHGr9wIM/IlvKvCsESoCt8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
                          rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
        Validity
            Not Before: Nov 23 01:11:35 2024 GMT
            Not After : Nov 30 01:11:35 2024 GMT
        Subject: CN=67412bc8-17c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:e4:54:a8:8f:6b:bb:45:23:63:37:2b:3c:
                    d1:01:8d:c8:98:73:54:29:eb:6a:e7:95:a8:bb:23:
                    8d:59:27:86:ef:24:7f:d6:a1:0f:c2:a4:2f:d7:7b:
                    61:b9:26:77:35:8d:90:ed:77:73:0a:08:07:0d:2c:
                    08:a9:ee:cf:a7:c7:8b:aa:de:a7:69:2c:b7:5f:ec:
                    de:12:aa:f1:67:b9:15:bd:63:1a:8f:c6:ee:67:b7:
                    6a:23:79:e4:a0:13:af:f2:35:c2:e8:61:3d:64:41:
                    00:f3:98:fe:a8:1a:16:c1:9f:a2:8d:5c:75:81:cb:
                    41:ca:31:11:12:19:59:f2:7d:f5:7c:be:0b:9a:5c:
                    92:1d:29:34:a7:51:39:59:58:86:03:91:96:d4:5b:
                    45:4e:17:e7:92:51:73:b0:ad:03:7f:0e:87:26:d0:
                    a9:5f:d8:41:cb:a6:d4:06:4c:cf:0e:0e:f3:64:a2:
                    54:9a:e3:d8:2f:90:6e:6f:03:18:8c:ea:c2:ec:73:
                    c8:4a:4b:25:92:b1:33:2b:1d:02:14:5d:d5:44:54:
                    79:eb:49:ce:89:62:e9:df:6d:0d:3f:63:7e:9b:2d:
                    6a:34:6b:31:b4:18:46:6c:23:65:ab:eb:d3:66:62:
                    6a:13:c2:76:ef:6b:65:94:9c:d8:2d:2e:99:78:c3:
                    54:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A3:4F:4D:94:37:41:03:46:9E:C2:23:AA:C6:09:3B:36:07:B1:8F
            X509v3 Authority Key Identifier:
                keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a7:32:29:2a:8f:9b:b6:81:cb:ab:86:c1:6b:47:b2:ff:69:
         32:2c:38:8d:2b:96:d2:84:de:82:e1:7a:84:b6:7c:34:c4:65:
         9e:31:ba:b6:b0:d8:cb:ff:2f:23:3a:e0:9a:e7:89:7d:8b:f6:
         2b:cd:77:81:79:ec:d3:de:3f:48:4a:0f:4a:f3:f4:43:d5:61:
         dc:10:66:4c:db:c8:27:c1:4a:88:66:38:e7:d7:59:c9:5b:34:
         00:9b:4a:a8:bd:cc:4a:15:a4:72:08:f6:25:0c:77:c9:e3:79:
         f9:16:68:3f:30:50:41:38:f2:ff:48:0c:1c:c4:5a:ac:f0:42:
         af:1e:a9:65:5c:dd:eb:11:60:9f:5b:c5:cf:27:31:df:f5:d5:
         df:b8:54:c3:ff:47:79:ad:17:cd:84:d3:a9:c1:ab:dc:8c:22:
         52:75:27:2b:d8:54:df:b1:72:26:ca:2b:4b:3f:9f:4c:dc:5d:
         89:d7:b9:ce:77:fc:5b:e9:8b:e3:f6:f9:d9:8e:f3:a7:d8:7e:
         e1:60:92:7d:e0:e6:0b:cd:66:cb:d7:96:3f:98:5e:0e:79:28:
         0b:0f:c3:e7:c0:1d:88:49:fc:b8:20:9d:c8:19:38:2e:2b:f9:
         b1:bf:f9:52:2f:c1:47:83:b1:5e:38:a3:ff:2f:73:91:e4:96:
         c4:18:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:58 2024 by rpki-client on console-ams.rpki-client.org