Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
File:                     BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft (raw, json)
Hash identifier:          ovePPGN9WeX3uoBV5qrxdrf93WQFyo29PU67rLOTrG0=
Subject key identifier:   3D:71:52:C5:7E:31:DF:84:6B:16:81:6B:A4:37:94:A8:4D:BF:D7:7B
Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Certificate issuer:       /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Certificate serial:       43BD62107FD35C74D488A574BF35470DB2FAF8D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
Manifest number:          040F
Signing time:             Sun 24 Nov 2024 08:53:13 +0000
Manifest this update:     Sun 24 Nov 2024 08:48:13 +0000
Manifest next update:     Mon 25 Nov 2024 11:38:13 +0000
Files and hashes:         1: BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl (hash: RQEJSZelaB6mMwXvPW5PFM5IOhGrG16Fjd1v6xUrauw=)
                          2: 3130332e3137352e32372e302f32342d3234203d3e20383334.roa (hash: WCJlZvhAgQe2Qe28+bHkNDmIkAmhFntm+GFi+JKHYI8=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl
                          rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bd:62:10:7f:d3:5c:74:d4:88:a5:74:bf:35:47:0d:b2:fa:f8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
        Validity
            Not Before: Nov 24 08:48:13 2024 GMT
            Not After : Nov 25 11:38:13 2024 GMT
        Subject: CN=3D7152C57E31DF846B16816BA43794A84DBFD77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:40:65:6a:eb:c1:56:05:e2:65:e7:56:44:
                    ae:10:0b:4e:1d:99:20:d5:5d:01:61:c6:2d:25:71:
                    7a:59:41:08:58:4d:25:68:6f:95:dc:04:2e:ab:f3:
                    5b:ee:3c:8d:fa:a6:9f:ca:4f:ab:7a:92:c8:2a:df:
                    61:b9:68:8b:74:e0:9b:10:33:e4:19:6b:a8:85:03:
                    90:e4:59:f6:5d:eb:4a:81:f4:57:6f:fa:31:a2:3a:
                    b2:1f:20:fd:7c:3c:a0:1f:87:f9:de:e5:62:e2:87:
                    5a:a8:0c:fc:31:75:94:b2:2b:70:7f:df:c7:37:0f:
                    3a:71:74:7b:da:0f:e9:95:6d:5f:c0:74:ba:15:7e:
                    9d:b2:32:32:77:77:b2:9c:d6:82:5d:8c:88:a4:c3:
                    c1:b1:74:d9:e5:8c:31:38:42:d3:20:b1:49:95:13:
                    3c:d0:c9:ce:3d:c9:3d:7a:cd:4e:e6:49:40:e8:2e:
                    cd:3a:3a:32:3a:af:ae:0e:1a:0e:af:2c:f4:1a:80:
                    5d:1c:1c:57:f8:31:f7:ea:5c:89:f2:f2:2d:3e:84:
                    bf:9b:d2:54:08:bd:6b:0e:ae:ec:97:38:18:44:38:
                    3f:26:d5:0b:a6:0c:e2:b4:cf:e0:95:47:00:c6:2f:
                    be:fc:d5:9d:37:2d:55:62:7b:2e:09:fe:af:91:06:
                    cf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:71:52:C5:7E:31:DF:84:6B:16:81:6B:A4:37:94:A8:4D:BF:D7:7B
            X509v3 Authority Key Identifier:
                keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:50:46:33:c9:09:a0:37:d8:f4:6a:0d:97:34:90:76:25:e6:
         a2:09:42:f2:dc:1b:16:ab:12:2c:c1:91:00:b5:b6:60:45:58:
         a6:08:00:94:fe:c4:f1:b8:55:4f:bd:d4:a2:68:12:e9:44:2f:
         74:c3:f8:93:a3:65:50:43:e7:54:ef:ea:b9:53:6d:8d:0f:c5:
         32:7c:ba:42:b2:da:2b:51:8d:d4:49:ae:d3:db:66:99:b6:e3:
         9e:39:f4:2e:1c:e1:2b:bf:f3:e7:e3:5f:e3:2e:f9:25:d7:27:
         11:4a:bf:1c:8b:18:4a:99:0d:3a:67:03:ff:d1:36:9a:69:6a:
         9d:43:0f:66:4e:80:0f:41:7c:dd:a3:77:41:60:ae:63:c3:bd:
         9d:be:59:81:38:28:5c:83:9a:28:98:f8:c2:d0:48:d2:ec:02:
         52:7a:bb:bf:be:f4:be:3d:3c:ca:81:69:6d:74:21:3f:26:29:
         de:1c:cf:d2:5b:49:5c:d9:94:6a:1b:31:8f:ae:d7:38:47:58:
         d5:bb:6f:3c:b3:d5:98:54:44:3c:ac:3f:c5:27:cd:bc:d4:24:
         ee:6f:15:5a:bb:67:b6:b4:b4:f2:f3:7a:df:89:4c:71:af:46:
         73:0c:92:ad:87:a6:1b:8b:98:d8:ac:b8:56:29:ea:8b:ea:d8:
         6c:5d:b0:66
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQ71iEH/TXHTUiKV0vzVHDbL6+NMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkU2RDcwMDAwMTEwLwYDVQQFEyhCRURFREQwQUJD
MUFGMjkzN0VEMzFEMzYwMzNCN0NBQjA0OEI4OUJCMB4XDTI0MTEyNDA4NDgxM1oX
DTI0MTEyNTExMzgxM1owMzExMC8GA1UEAxMoM0Q3MTUyQzU3RTMxREY4NDZCMTY4
MTZCQTQzNzk0QTg0REJGRDc3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK9ZQGVq68FWBeJl51ZErhALTh2ZINVdAWHGLSVxellBCFhNJWhvldwELqvz
W+48jfqmn8pPq3qSyCrfYbloi3TgmxAz5BlrqIUDkORZ9l3rSoH0V2/6MaI6sh8g
/Xw8oB+H+d7lYuKHWqgM/DF1lLIrcH/fxzcPOnF0e9oP6ZVtX8B0uhV+nbIyMnd3
spzWgl2MiKTDwbF02eWMMThC0yCxSZUTPNDJzj3JPXrNTuZJQOguzTo6Mjqvrg4a
Dq8s9BqAXRwcV/gx9+pcifLyLT6Ev5vSVAi9aw6u7Jc4GEQ4PybVC6YM4rTP4JVH
AMYvvvzVnTctVWJ7Lgn+r5EGz90CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQ9cVLF
fjHfhGsWgWukN5SoTb/XezAfBgNVHSMEGDAWgBS+3t0KvBryk37THTYDO3yrBIuJ
uzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFCRTZENzAwMDAvMC9CRURFREQw
QUJDMUFGMjkzN0VEMzFEMzYwMzNCN0NBQjA0OEI4OUJCLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92dDdkQ3J3YThw
Ti0weDAyQXp0OHF3U0xpYnMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFCRTZE
NzAwMDAvMC9CRURFREQwQUJDMUFGMjkzN0VEMzFEMzYwMzNCN0NBQjA0OEI4OUJC
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAVFBGM8kJoDfY9GoNlzSQdiXmoglC8twbFqsSLMGRALW2YEVY
pggAlP7E8bhVT73UomgS6UQvdMP4k6NlUEPnVO/quVNtjQ/FMny6QrLaK1GN1Emu
09tmmbbjnjn0LhzhK7/z5+Nf4y75JdcnEUq/HIsYSpkNOmcD/9E2mmlqnUMPZk6A
D0F83aN3QWCuY8O9nb5ZgTgoXIOaKJj4wtBI0uwCUnq7v770vj08yoFpbXQhPyYp
3hzP0ltJXNmUahsxj67XOEdY1btvPLPVmFREPKw/xSfNvNQk7m8VWrtntrS08vN6
34lMca9GcwySrYemG4uY2Ky4Vinqi+rYbF2wZg==
-----END CERTIFICATE-----
Generated at Sun Nov 24 10:22:12 2024 by rpki-client on console-fra.rpki-client.org