Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
File:                     vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json)
Hash identifier:          uSmFJu2o30J4xaROf4De89yg66HZUS1ropomj3v3cJU=
Subject key identifier:   0E:58:73:35:A1:FA:CE:29:5D:7F:5F:3D:8A:45:E4:12:40:EC:3B:C8
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Certificate issuer:       /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial:       04E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
Manifest number:          04DE
Signing time:             Fri 22 Nov 2024 23:18:39 +0000
Manifest this update:     Fri 22 Nov 2024 23:18:38 +0000
Manifest next update:     Fri 29 Nov 2024 23:18:38 +0000
Files and hashes:         1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: PaShBXHWofS/OBDjg9V1WVvNP9Mual62N/cTsLqUFpU=)
                          2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: F1yI/TsRKRhHW6oPEGF67PMGcvjA0TRHWq4d5ykeYdI=)
                          3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: oeOjTuSdHmJNxJZBHkzGR+nKwmbuVyglKsBg5lLfOOw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1256 (0x4e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
        Validity
            Not Before: Nov 22 23:18:38 2024 GMT
            Not After : Nov 29 23:18:38 2024 GMT
        Subject: CN=6741114f-4c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0d:a0:a0:52:7c:a3:fa:e5:f9:04:1d:6b:ee:
                    9c:9d:27:56:75:55:7e:e3:34:c2:a4:4d:f2:0a:ac:
                    ee:fb:af:a1:ce:f4:5f:f1:5c:48:81:32:26:8c:e9:
                    f8:ad:3c:eb:db:19:be:ff:dc:2d:db:12:59:e1:50:
                    74:72:0b:3c:3b:da:89:ea:cd:58:88:57:09:4c:fc:
                    18:b2:d0:35:06:d6:97:c7:26:c1:5e:5f:07:95:e3:
                    33:e4:3d:98:0f:58:f0:7f:c5:52:fa:0b:b7:2f:a0:
                    40:a9:6d:9c:1b:7b:e3:94:7c:d7:99:41:cd:37:f2:
                    b0:a0:35:af:e9:d5:0b:86:df:23:a8:e7:7f:e6:9b:
                    ac:81:e3:a4:36:f5:f3:bb:5f:93:3e:9c:06:62:2f:
                    3d:73:5f:e5:17:38:46:28:62:28:cf:53:41:fb:31:
                    f4:2f:e8:aa:4e:8e:c1:be:8c:3e:e1:4b:e0:87:c6:
                    e8:78:20:b7:73:f5:a0:a6:6f:20:df:67:7f:28:af:
                    0c:4b:3c:b2:de:62:64:12:f4:a7:5f:cd:7b:98:92:
                    4f:5c:e6:00:34:a2:8e:c9:b4:9f:ae:e3:77:7e:f7:
                    12:b6:11:e8:86:67:88:32:4f:f1:d3:0d:6f:ef:9a:
                    3d:47:a9:45:d0:19:08:e5:b1:81:90:24:5f:1b:13:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:58:73:35:A1:FA:CE:29:5D:7F:5F:3D:8A:45:E4:12:40:EC:3B:C8
            X509v3 Authority Key Identifier:
                keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:83:e2:ca:5e:1e:ff:bb:7b:4a:6b:ef:bb:9a:3e:b4:93:97:
         aa:51:2d:d0:b9:4b:24:8a:74:8f:89:e2:5d:3f:02:43:9b:7f:
         e8:08:06:bd:65:6e:f0:d3:18:7e:b1:93:71:7e:cb:8e:c7:b4:
         2a:90:ee:fe:1f:52:71:91:6a:95:37:b4:15:84:77:9b:1a:d8:
         bc:ab:f0:42:2f:2b:ad:f5:59:ef:5b:46:5f:24:5d:31:69:a5:
         b5:74:e7:dd:0d:74:28:09:3d:b2:81:18:92:1a:cf:68:d1:0a:
         1e:4c:a8:50:56:24:a4:3b:26:e9:91:e6:ff:f5:9a:ed:24:29:
         4d:7d:71:cd:0b:88:f9:c5:1a:b0:33:eb:f0:11:1f:8f:cd:e5:
         55:a1:94:12:5e:fb:05:30:7c:26:ef:3b:48:05:58:8e:bf:e8:
         a9:44:56:67:9e:42:03:a6:59:b2:02:99:d3:c8:78:29:73:04:
         75:32:12:d4:34:da:ca:ec:5c:89:62:21:29:64:ca:27:5b:36:
         de:47:93:2c:54:a1:5d:5b:5a:7f:30:6c:0c:df:1e:7b:2f:c1:
         5d:8b:69:1b:63:50:16:a0:48:19:40:7e:c0:f9:d9:f3:85:51:
         24:36:12:f7:d8:ff:69:39:4d:1a:c1:0d:c8:2e:8c:72:4a:75:
         3a:e7:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:30 2024 by rpki-client on console-ams.rpki-client.org