Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
File:                     t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json)
Hash identifier:          r4N5PnQ2x9/2JPkwiwJdax6iu72ETqzjZvcOZbogkns=
Subject key identifier:   EB:BB:3E:9B:60:3A:66:64:E6:64:DB:76:7F:FB:97:70:88:96:C7:B6
Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
Certificate issuer:       /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Certificate serial:       08C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
Manifest number:          08C4
Signing time:             Fri 22 Nov 2024 20:13:02 +0000
Manifest this update:     Fri 22 Nov 2024 20:13:02 +0000
Manifest next update:     Fri 29 Nov 2024 20:13:01 +0000
Files and hashes:         1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: qQy7Q/KxAHx90exx9gADbEuhFCT3f4762ezvs1M8J30=)
                          2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: WPNbmXIljXf5DGJzTyP9mhxu+4YyVGP6cfR3qyAMYCc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
                          rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2249 (0x8c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
        Validity
            Not Before: Nov 22 20:13:02 2024 GMT
            Not After : Nov 29 20:13:01 2024 GMT
        Subject: CN=6740e5ce-a423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:db:b9:b5:bb:c5:f9:c2:be:68:44:f5:5f:0a:
                    7e:15:84:22:58:19:89:df:a8:52:3a:b9:21:d5:c5:
                    f9:29:9d:7d:f0:fc:c4:ad:80:79:0d:ed:c5:fe:b6:
                    23:d6:f9:c8:ea:4c:30:08:9e:7c:3a:c7:0a:ec:f8:
                    93:6d:d6:96:6f:71:e4:57:7e:d6:1c:3e:1d:7b:6e:
                    01:b6:60:b0:10:eb:d1:c6:56:65:44:cc:a0:e5:be:
                    b3:85:b8:14:92:4e:06:22:a4:43:13:d8:67:c7:ee:
                    a3:a6:dc:b7:04:63:3d:ba:66:7a:f6:40:1c:76:3a:
                    b9:17:7d:92:31:b7:f1:d2:39:bf:77:94:d2:5a:23:
                    77:57:0e:7b:c3:2f:7f:16:76:37:4b:69:fd:b2:16:
                    ec:94:cb:0a:cc:f6:cd:63:10:7f:ad:ba:31:a0:44:
                    f7:20:ca:b3:b2:7b:eb:80:5f:bc:80:dc:ee:93:49:
                    e6:92:67:b3:7c:51:a1:e1:2d:5d:04:18:2d:af:b4:
                    6b:09:39:22:39:35:92:a5:1b:89:db:17:c0:03:cc:
                    eb:2d:db:17:d9:15:50:42:bc:92:bc:6c:01:88:85:
                    18:15:74:37:21:7d:05:1f:46:28:e8:54:38:61:58:
                    68:6e:04:60:f6:58:08:fe:84:9f:fd:89:8c:58:71:
                    e6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BB:3E:9B:60:3A:66:64:E6:64:DB:76:7F:FB:97:70:88:96:C7:B6
            X509v3 Authority Key Identifier:
                keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d8:5a:79:92:3d:30:7b:15:e9:12:30:ee:da:b4:a5:fd:4e:
         a4:bf:9d:dc:43:be:6d:db:54:3f:92:b1:a2:72:98:b1:c4:46:
         1f:de:9d:f5:04:1c:0d:2a:94:cf:44:13:ed:12:90:b1:7a:76:
         8d:fa:c6:60:fa:a8:4f:1a:ef:dd:14:63:e8:80:d1:e1:cf:28:
         c9:71:13:84:e8:2e:a4:7c:ef:c7:4b:4f:e8:e2:81:d1:6b:86:
         0e:52:71:4e:35:45:69:09:fe:c6:30:89:66:c2:af:92:f3:ee:
         c9:5e:40:d6:21:27:a5:97:7e:e4:77:00:23:4e:4f:0f:75:f5:
         ac:75:36:25:e4:e6:7a:b8:aa:ba:fa:18:f8:c2:43:30:b2:fc:
         d6:03:8e:62:a4:d4:21:a6:a2:2a:1f:b3:10:be:ae:33:6f:07:
         a9:43:a9:61:fa:b8:ac:34:5b:6a:8d:e7:46:b2:72:2e:a4:5c:
         35:c8:91:54:f9:9b:19:db:85:2b:e0:28:a4:d1:f6:51:55:14:
         00:91:54:a9:4d:33:49:16:9c:08:ec:a5:ca:1d:54:ad:db:91:
         39:e2:c4:f1:85:89:bf:c7:f9:32:09:0b:b1:e0:7f:55:b6:e4:
         51:ab:bf:96:73:3a:f1:5c:1e:be:37:aa:0f:d6:35:b6:48:11:
         78:e3:0b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org