Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
File:                     LLjB-eoMe1qANok4hADMb9iwSdI.mft (raw, json)
Hash identifier:          OrFS4T7qOWXybdpp3pR+Wex48kCjFXpWvu/WJf8ndUA=
Subject key identifier:   54:C2:3D:5E:00:AC:49:E7:24:0A:C3:55:E0:67:E5:54:5D:F4:7A:4C
Authority key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2
Certificate issuer:       /CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
Manifest number:          F3
Signing time:             Sat 23 Nov 2024 03:23:32 +0000
Manifest this update:     Sat 23 Nov 2024 03:23:31 +0000
Manifest next update:     Sat 30 Nov 2024 03:23:31 +0000
Files and hashes:         1: LLjB-eoMe1qANok4hADMb9iwSdI.crl (hash: mkp08iaDkzUn8+WIadqRp7CZ//xH3PZZzlK5EIFuvpw=)
                          2: E199AC0C34F211EEB22E7C6FC4F9AE02.roa (hash: gD+ebhjmYYOlYSwLXx9jf438Mm1bZMxXcWfFLXPYnt4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl
                          rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
        Validity
            Not Before: Nov 23 03:23:31 2024 GMT
            Not After : Nov 30 03:23:31 2024 GMT
        Subject: CN=67414ab4-83af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:d9:9f:59:63:5c:36:7d:e5:25:5a:c9:16:
                    de:89:d1:e3:70:44:84:2c:1a:74:4e:e0:8d:35:7c:
                    a3:53:01:d1:9f:ad:59:b8:1c:a8:4a:e9:fd:86:7a:
                    39:13:47:ee:36:57:dc:2f:9f:ed:1a:13:e3:67:14:
                    cc:04:10:2b:34:1d:57:73:52:58:1c:2c:7b:59:43:
                    0f:df:da:56:4b:2a:8c:dd:73:c9:51:e5:df:5f:ca:
                    5d:92:e1:6b:b3:93:a4:bc:13:50:60:45:f3:67:96:
                    97:fb:62:2b:9b:ff:df:16:49:c7:dc:bc:c6:cf:1b:
                    ea:bc:25:34:cd:d9:9c:25:a4:91:83:9d:89:38:99:
                    17:55:37:32:54:bb:c5:55:e3:39:dc:27:96:20:18:
                    6e:7e:93:c7:26:04:ea:1b:b5:6e:e9:7f:67:5f:01:
                    3b:fc:94:75:35:26:b6:f5:22:a7:7d:66:e1:25:3c:
                    95:af:24:59:db:5d:cf:ed:11:13:2e:25:a4:b1:67:
                    2e:5f:9c:a3:37:1a:62:62:77:c2:2d:04:80:64:f1:
                    83:da:cc:76:03:e3:ad:59:5c:91:41:c8:48:50:81:
                    70:5f:76:2e:25:45:c9:72:d0:1f:96:a6:1d:0b:5d:
                    55:f0:1e:3e:de:f5:11:8f:00:f7:17:e4:41:43:77:
                    5b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C2:3D:5E:00:AC:49:E7:24:0A:C3:55:E0:67:E5:54:5D:F4:7A:4C
            X509v3 Authority Key Identifier:
                keyid:2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:83:c1:03:1f:01:7c:02:8d:e9:4b:e1:5b:4b:20:44:46:
         1c:42:93:cc:22:de:64:ee:c8:41:85:e9:d1:7e:7a:69:5b:29:
         e3:82:08:32:4e:f2:c7:5d:ca:44:1d:b2:0d:df:a9:b8:2d:b8:
         cf:20:85:46:32:4e:65:4f:ae:dd:03:2c:a9:76:88:22:40:b8:
         98:59:49:4d:14:7e:6b:75:0c:ae:8b:f0:f2:60:c9:5b:21:59:
         0a:3d:3b:3b:4b:c6:d2:0e:79:d4:28:f0:e7:38:32:1e:50:7d:
         af:b6:17:0d:05:9e:21:2f:46:98:25:d4:c1:71:2b:b2:5d:9b:
         88:7f:bc:6e:67:a2:5b:d6:39:b2:0a:42:5f:d5:ad:64:7b:64:
         a4:23:6e:9b:be:db:dc:43:95:92:fd:96:2d:8f:54:92:f0:6a:
         69:f5:9d:a2:94:55:ad:22:2f:ca:59:45:91:49:73:d8:3b:f6:
         3e:a0:35:16:0d:0e:d3:fd:2d:dc:43:2e:d9:7a:59:e6:be:ae:
         55:6a:76:11:ae:4b:ca:da:6f:d3:9f:fe:2b:be:2f:ec:30:2b:
         a1:c6:33:87:30:69:8b:30:5f:cc:da:62:2a:ac:dc:c6:5a:d2:
         61:f3:77:5d:70:8b:e7:b6:9f:21:ba:f8:53:52:2b:52:bd:95:
         59:81:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:43 2024 by rpki-client on console-fra.rpki-client.org