Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
File:                     ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json)
Hash identifier:          C9LbtCuyiKXVlCml9B2GBSAobUDPe1elWvZ4aljCzMw=
Subject key identifier:   3D:AB:C6:60:2F:1D:63:35:18:9E:6B:23:FB:6D:6D:90:BC:AE:1F:2E
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Certificate issuer:       /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial:       0399
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
Manifest number:          038D
Signing time:             Sat 23 Nov 2024 00:24:28 +0000
Manifest this update:     Sat 23 Nov 2024 00:24:28 +0000
Manifest next update:     Sat 30 Nov 2024 00:24:28 +0000
Files and hashes:         1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: 0xJl/jnCErfkO84ISJWheKF7v7AJkgPJSk4ecJFmo1g=)
                          2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: TeNDnRuuYAnbCLS3WXII+1iDKTVyNVShsBnh2Tnr5KY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
                          rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
        Validity
            Not Before: Nov 23 00:24:28 2024 GMT
            Not After : Nov 30 00:24:28 2024 GMT
        Subject: CN=674120bc-f09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5b:ac:02:ac:1c:02:e9:39:f6:0c:2f:c5:23:
                    59:d9:09:cd:07:fd:4d:37:f6:aa:03:a8:43:48:8f:
                    30:d7:61:25:91:62:9f:fc:3d:98:af:52:26:63:f6:
                    fa:57:2b:6e:5e:ad:da:a3:c6:b7:8a:84:f8:2a:28:
                    df:53:eb:07:23:bc:a5:68:3e:cc:8b:9c:66:66:34:
                    75:2b:14:b5:db:5a:4d:6b:94:51:82:2c:e3:cf:cf:
                    25:5a:75:62:7d:c7:8d:c2:b7:82:90:51:7b:ed:4e:
                    45:87:78:b5:68:07:a1:a8:3a:5f:61:04:67:85:8b:
                    66:4e:28:58:c0:c5:cd:4c:47:57:a2:c1:75:39:c7:
                    5f:a1:10:c6:9d:31:3c:74:93:50:c7:9b:88:68:f2:
                    32:55:ce:9d:8c:84:10:f1:ff:fb:2d:72:23:85:e4:
                    33:b8:3d:c2:71:d7:30:7b:1c:1f:06:07:2f:5c:52:
                    1e:1e:20:e3:22:9f:fb:32:f6:c4:72:f0:86:ca:94:
                    31:4f:e6:1d:93:28:60:ca:65:12:fa:d4:7c:9b:b8:
                    67:9f:fa:e1:d6:2a:5b:ac:a2:c5:fe:bc:b2:36:65:
                    22:da:7f:e9:53:0c:8c:da:5c:8d:3c:8b:ee:4a:c9:
                    82:f9:23:9a:4d:c6:79:10:ba:5c:da:90:a7:ed:da:
                    8c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AB:C6:60:2F:1D:63:35:18:9E:6B:23:FB:6D:6D:90:BC:AE:1F:2E
            X509v3 Authority Key Identifier:
                keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:dd:75:41:0b:34:0f:b3:c3:3f:0d:b6:c7:7e:41:1b:8e:5b:
         03:0d:32:81:84:80:50:9f:41:b4:b6:83:48:f9:aa:63:2b:3d:
         3e:fc:5e:7c:61:18:f0:2c:fd:9b:8e:ba:62:32:16:d6:ec:4a:
         9b:11:c6:75:c6:f8:cf:82:1c:41:e5:d2:26:e3:e6:f1:35:ac:
         eb:92:40:66:d5:e8:6d:f2:84:13:b0:9f:9c:5b:51:09:a7:c3:
         e4:48:4f:41:11:31:45:38:ed:94:95:79:ed:0e:4c:c7:64:2f:
         43:c5:96:69:87:79:46:fd:80:a8:d5:37:3d:76:76:62:35:c8:
         16:c7:70:ad:ca:5a:a4:ff:c0:8b:66:31:f2:31:cb:04:bb:29:
         38:62:af:7c:81:60:28:5f:e6:cf:b9:ea:67:30:b0:12:0b:de:
         50:0c:b3:86:e8:a1:d3:0c:1e:ce:63:8d:e0:3f:80:9e:2c:25:
         82:d7:6e:51:bd:25:c9:e4:ed:1a:48:c0:b0:ec:5c:3c:09:15:
         79:de:0b:21:fc:89:ac:3b:4e:bd:06:a0:a5:c2:ad:17:90:b7:
         06:b4:d7:1a:94:4f:af:7e:c3:5f:60:c5:1b:18:56:79:d5:9e:
         9f:f5:57:64:a1:62:cf:61:c4:9f:41:66:ca:ef:18:b6:61:7d:
         41:6a:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:31 2024 by rpki-client on console-fra.rpki-client.org