Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
File:                     4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft (raw, json)
Hash identifier:          riA2y0R+v2DOaWo30XxHKqjc2VHKmZFdvTO27BPRBDI=
Subject key identifier:   EA:8A:2E:F3:38:31:14:7C:6F:0D:35:F4:67:A4:69:BC:76:CC:B8:7A
Authority key identifier: E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
Certificate issuer:       /CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Certificate serial:       0217
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
Manifest number:          0211
Signing time:             Sat 23 Nov 2024 01:33:06 +0000
Manifest this update:     Sat 23 Nov 2024 01:33:05 +0000
Manifest next update:     Sat 30 Nov 2024 01:33:05 +0000
Files and hashes:         1: 4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl (hash: rZpN1+VWeIxW5SmMNoninTpwNQdEbfE1G7fVFCX4PJw=)
                          2: 2541D62A7F9811ED93508538C4F9AE02.roa (hash: FUd/qskXH7I3VsZeo9p50JOxxkxMPP4+8p2jo1T6M4o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl
                          rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
        Validity
            Not Before: Nov 23 01:33:05 2024 GMT
            Not After : Nov 30 01:33:05 2024 GMT
        Subject: CN=674130d2-4745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:f2:a9:95:34:a2:05:eb:a3:81:6d:a1:50:
                    dd:63:dc:a1:e9:ca:ac:d4:6a:c4:c1:00:b4:50:a2:
                    8a:60:d1:e7:0a:4c:52:71:28:86:f0:3b:80:8a:36:
                    94:0a:13:9b:50:2c:b5:95:ad:dc:58:3b:07:46:7b:
                    05:ab:37:90:2f:61:40:7a:15:24:54:9d:0d:34:3e:
                    04:e5:b9:93:a6:53:d3:e3:9d:bb:14:aa:6d:d7:73:
                    ff:8d:ae:7a:a7:81:08:8c:f2:b7:b6:63:34:a0:cd:
                    d2:c3:97:86:93:c7:98:71:4a:34:3c:a5:20:61:d3:
                    90:0a:82:c9:f3:10:53:66:56:86:d8:d7:fa:49:31:
                    19:31:c3:ca:cc:60:5c:3e:36:5d:2b:08:9f:e9:fe:
                    2d:e7:1a:fc:d0:13:53:f6:40:bd:ff:88:66:b6:b0:
                    35:e1:6e:2c:22:c2:1e:a8:ac:48:8e:14:43:99:e0:
                    39:75:fd:46:9c:f7:94:e0:f9:28:3b:5d:40:00:ce:
                    43:9d:76:f3:92:d0:93:28:f9:f5:8a:c7:32:b7:4c:
                    66:5b:d5:53:76:f0:9c:c6:e0:7b:33:f7:75:d1:1b:
                    de:2d:4d:e0:cc:0d:4f:af:b5:17:7c:34:85:0f:ef:
                    66:cc:c2:17:9c:bd:36:c3:d9:02:73:d2:dc:f6:41:
                    c5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8A:2E:F3:38:31:14:7C:6F:0D:35:F4:67:A4:69:BC:76:CC:B8:7A
            X509v3 Authority Key Identifier:
                keyid:E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:10:56:b2:43:fa:9f:c3:46:25:d8:8a:16:aa:2f:85:0c:cd:
         9a:09:10:00:6f:02:56:80:56:a1:9f:9b:b6:dc:5c:27:cc:83:
         91:3e:62:cb:72:d9:f2:3e:4e:e6:8f:55:20:01:75:0d:cc:9f:
         85:94:0f:ee:50:d8:e0:7e:6f:fb:ae:74:20:f7:e3:6f:f4:b0:
         e7:1e:92:76:46:e9:60:8a:50:f6:19:56:37:78:71:e6:01:85:
         94:e0:c5:10:15:f3:b5:ed:5f:a2:51:e7:4c:89:06:6b:dc:27:
         a9:e9:d0:73:a4:1f:a2:7f:41:f5:2a:e9:0b:3e:b2:4c:99:fb:
         74:44:ee:f1:12:70:d2:01:24:90:0c:42:e8:1e:4e:80:44:91:
         25:3f:d0:36:10:ea:ac:dc:c8:70:93:8c:ca:0a:68:b2:a4:96:
         27:e7:63:a5:29:b3:ff:d0:46:18:a7:cc:3c:ed:d8:9e:55:8e:
         bb:1c:5e:d2:11:97:9a:dd:29:e1:d2:09:6c:ff:de:85:30:ee:
         37:26:05:44:51:19:56:7b:1c:21:72:33:d2:cf:c2:9c:c8:cd:
         a2:e7:b8:e2:fd:ed:d9:91:68:5f:89:f4:5d:cc:fc:d0:a4:73:
         74:43:2d:a7:84:e7:d8:7b:9d:d5:d4:84:1a:82:88:ce:81:1d:
         3f:f9:45:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org