Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
File:                     bUGUPlFfU_mSYZyH8COTgRJT3mc.mft (raw, json)
Hash identifier:          Y28nTz+wbEkbgXU6L8psBISPy49AEF6oV9zs+YNPAwU=
Subject key identifier:   1A:1C:31:93:6D:FE:9A:25:DE:AE:5F:4F:E9:46:0D:99:38:B1:17:C0
Authority key identifier: 6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67
Certificate issuer:       /CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
Manifest number:          B1
Signing time:             Sat 23 Nov 2024 04:11:42 +0000
Manifest this update:     Sat 23 Nov 2024 04:11:42 +0000
Manifest next update:     Sat 30 Nov 2024 04:11:42 +0000
Files and hashes:         1: bUGUPlFfU_mSYZyH8COTgRJT3mc.crl (hash: LGFRLte8BKkCa3ZwtdA6RMcArwi6SiWzjgZZgUoAEFs=)
                          2: 038457CEA3A011EEBE44947FC4F9AE02.roa (hash: B9Xl9dtPFHYUwGW/dxTfTQt13WyJ8k5DvaDQyy1SV7E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl
                          rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67
        Validity
            Not Before: Nov 23 04:11:42 2024 GMT
            Not After : Nov 30 04:11:42 2024 GMT
        Subject: CN=674155fe-1152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:df:31:1b:2c:1e:c9:7a:6c:f3:80:85:2b:e5:
                    e9:e3:e2:93:0f:e8:28:d2:9d:49:2f:af:30:00:e6:
                    63:16:35:4a:e0:56:2f:90:fd:1f:fc:97:a7:39:78:
                    ef:68:2d:1b:26:bc:d6:3d:41:b1:6b:77:c2:cc:6c:
                    82:bc:f2:d6:b2:d9:e2:ec:45:40:39:c7:5c:52:eb:
                    c5:74:3d:c0:74:02:f7:c6:09:52:e2:7c:00:61:0d:
                    d9:01:95:14:89:30:41:d1:2c:88:25:23:bc:76:6c:
                    82:40:3a:d4:8c:14:f7:33:ac:f3:d5:ac:33:70:e4:
                    6e:67:df:f2:27:af:f2:1b:c5:be:bb:41:f2:03:38:
                    1a:4e:9e:f9:dd:54:0d:19:b9:fc:50:45:e8:d1:cd:
                    f5:54:9b:37:75:79:de:85:79:2d:46:5c:6a:fa:30:
                    5a:3e:77:fd:77:f1:64:eb:e9:55:18:8b:cb:fb:86:
                    60:2d:82:48:b3:b5:a4:19:b9:18:cc:27:9d:cf:0b:
                    78:df:10:64:44:05:30:7a:6b:b5:fd:70:9d:05:29:
                    31:0d:a6:4c:f5:d5:f9:f0:ec:14:ab:aa:3e:13:c9:
                    b3:e5:78:4e:e2:1a:bd:65:ae:02:f6:6d:c2:ba:af:
                    5e:20:08:3f:c2:39:dc:c6:0e:84:bf:ed:22:e8:64:
                    72:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1C:31:93:6D:FE:9A:25:DE:AE:5F:4F:E9:46:0D:99:38:B1:17:C0
            X509v3 Authority Key Identifier:
                keyid:6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e9:b3:03:89:fc:a0:24:c2:fa:51:7a:00:ca:ea:ca:ad:06:
         7d:ec:ff:f3:7f:f9:ef:81:e4:20:96:85:4d:b9:d6:bd:4e:a4:
         9d:3d:77:28:30:0f:6c:35:87:ac:31:72:2b:00:bd:1e:93:bb:
         d6:be:90:f4:ea:e0:97:ce:85:51:aa:63:f9:24:40:ec:84:8a:
         30:3c:0b:c2:d5:ea:22:bc:87:97:7d:6c:96:ef:fa:5a:24:0b:
         14:a5:da:ec:0d:6c:fa:1a:dc:89:9f:ad:86:4f:f6:17:fc:1b:
         61:11:38:a6:94:8a:4c:a1:c0:9e:73:71:a1:da:30:ef:eb:05:
         d1:ac:b2:0f:0c:96:9c:cd:89:fe:d7:32:09:4b:ed:8d:bc:44:
         79:2d:76:42:a4:7b:4f:32:c8:c3:d6:5e:02:ad:25:e6:cd:91:
         63:0b:31:9e:f4:23:46:41:f3:5e:61:d7:89:2b:28:4e:cf:2f:
         cd:bb:fc:a0:9c:6e:67:44:97:8e:d8:55:41:53:ae:57:58:26:
         f8:2f:a3:e5:70:dd:12:fc:f6:3c:a4:c0:00:fa:15:b5:1d:6b:
         9b:37:4b:3e:61:b1:e9:28:3e:e7:95:41:62:d5:73:88:f1:c8:
         70:a6:57:39:8e:47:32:ec:9f:56:d2:ec:33:67:4f:b2:3e:8a:
         45:6d:23:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org