Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
File:                     q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json)
Hash identifier:          3luaC8JHnKc5nAOS+dmscTK/vL39wRjTrWVTtRgRhZA=
Subject key identifier:   31:EF:C6:22:57:C6:E1:E0:2E:A3:B4:8B:05:AD:A1:07:E3:31:B8:9F
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Certificate issuer:       /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial:       0A54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
Manifest number:          0A47
Signing time:             Fri 22 Nov 2024 19:30:50 +0000
Manifest this update:     Fri 22 Nov 2024 19:30:50 +0000
Manifest next update:     Fri 29 Nov 2024 19:30:50 +0000
Files and hashes:         1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: 6JI92UKslEB5eXX0aNkn4XuaEAghE085zjUWOXt6f7Y=)
                          2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: g4QhwzM7z0ux97yQFPOJpae6bb2epYVb5h5FA+p92Ak=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
                          rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2644 (0xa54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
        Validity
            Not Before: Nov 22 19:30:50 2024 GMT
            Not After : Nov 29 19:30:50 2024 GMT
        Subject: CN=6740dbea-eb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:39:fd:f3:a4:b9:d0:02:f3:ac:2b:ae:d9:da:
                    d2:7c:af:6d:bc:c0:af:0f:5e:42:be:83:76:07:23:
                    8b:7a:d1:bf:98:b6:18:f6:e3:94:47:7c:28:cc:72:
                    58:c8:79:06:28:91:9b:42:4b:58:91:aa:fb:18:d6:
                    ff:12:c2:c2:d6:30:bc:e0:85:47:be:3b:dd:e4:27:
                    ec:ba:56:29:a9:49:df:d2:1c:6a:0f:21:c2:9b:e6:
                    86:97:08:08:2d:92:b5:d8:01:73:8d:a5:af:16:d7:
                    bc:fb:8a:3f:41:92:81:30:35:f8:34:a1:16:95:7e:
                    ca:8c:fa:19:4c:b6:fc:bc:d1:4c:cc:ac:4e:c1:9b:
                    d8:f8:95:f5:d8:1c:98:9c:b8:16:1e:52:26:3c:da:
                    18:56:bc:04:86:dd:04:37:e8:3b:7c:a9:79:e4:10:
                    e5:1f:66:a0:1c:e8:1e:76:5f:d4:2c:7a:08:c0:65:
                    a8:cf:c4:cc:54:61:be:a1:d3:31:cb:b1:b7:45:4a:
                    20:4a:79:f7:10:e0:b8:50:92:91:9e:f9:4e:8a:40:
                    58:17:92:08:c7:a4:79:3b:92:23:39:8f:82:c4:1e:
                    c1:39:93:65:ee:d1:2f:d2:75:1c:37:a2:2e:51:a4:
                    96:2a:c3:23:49:be:53:79:06:c3:ee:55:08:ea:de:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:C6:22:57:C6:E1:E0:2E:A3:B4:8B:05:AD:A1:07:E3:31:B8:9F
            X509v3 Authority Key Identifier:
                keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e3:ed:4b:d9:d4:a5:bf:42:7d:8b:75:27:7d:53:14:3e:55:
         02:3f:5a:8b:0b:5a:e6:f6:51:07:cd:77:93:54:f5:b4:f7:35:
         7e:84:00:ab:6b:c5:5c:7b:28:ad:78:5c:2b:48:ac:79:38:6c:
         0e:05:5f:9b:e2:28:54:25:76:c9:5c:e5:55:20:34:da:e3:32:
         16:b2:be:2f:e6:15:94:62:6c:23:46:1a:a5:33:f3:ad:d0:93:
         44:66:b0:9b:13:4e:2b:b9:b8:d2:3f:14:b6:fb:f2:aa:99:f6:
         2a:9c:72:64:75:41:ed:c6:be:0d:d8:f8:65:da:fc:6b:a9:8b:
         ca:65:f2:68:9f:bd:7b:9f:7c:74:5d:fb:ac:13:1f:69:3e:3d:
         c3:6b:ad:03:f5:01:c6:99:6c:55:61:02:83:c1:45:10:77:6f:
         b9:4d:89:79:cf:c2:6b:de:90:33:ae:bc:fc:3b:59:6c:e3:88:
         4e:4a:f6:05:8a:92:44:d2:78:7c:d0:16:da:a0:73:51:79:33:
         cd:5b:96:2d:da:48:e0:47:28:a8:a3:be:06:95:d8:8d:49:f4:
         0b:ce:b8:8b:3e:4f:71:29:a6:ab:51:ed:7c:29:cd:d7:9d:41:
         be:f6:a3:ae:70:94:64:a4:c0:ee:63:a2:9e:59:e4:60:93:07:
         fb:25:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org