Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
File:                     Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json)
Hash identifier:          oabSj3X0QgrCZij9OJ/JGmVx8eyFOVYI0RtBp24tOwc=
Subject key identifier:   FE:70:7A:50:C8:1A:D2:0A:51:7D:6B:B4:16:14:4B:35:83:81:1E:9B
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Certificate issuer:       /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial:       34AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
Manifest number:          3478
Signing time:             Fri 22 Nov 2024 14:55:15 +0000
Manifest this update:     Fri 22 Nov 2024 14:55:15 +0000
Manifest next update:     Fri 29 Nov 2024 14:55:15 +0000
Files and hashes:         1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: 06nvAUqWa4cKDk7JegGolCRIiYSmRGt0BxMeEGA4XZs=)
                          2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: Xb2hPwWdc7QTcQDz+qvvab15wycaCcgbmopek0oJdTs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
                          rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13486 (0x34ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
        Validity
            Not Before: Nov 22 14:55:15 2024 GMT
            Not After : Nov 29 14:55:15 2024 GMT
        Subject: CN=67409b53-1170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:45:df:44:aa:40:47:cc:e5:d3:67:3c:49:
                    20:d3:d9:3d:a5:e4:50:46:96:44:61:1a:a6:6a:40:
                    1f:1c:ed:81:e3:7f:10:d5:35:9a:d7:0f:8e:2f:0d:
                    65:f3:91:5d:66:33:74:90:69:65:09:cf:dd:41:9f:
                    db:02:12:4f:fd:84:85:1f:31:14:69:b8:ce:b3:59:
                    04:f8:bf:4a:8d:55:43:88:43:49:7c:b9:18:0c:40:
                    64:b8:66:37:05:15:76:fb:91:39:17:45:bc:00:9a:
                    f7:5f:00:f0:cd:4e:00:af:62:e3:a2:7c:17:0b:24:
                    15:9f:f3:71:81:fc:fb:8c:72:e5:fe:30:12:a6:9b:
                    80:38:a6:e6:b0:a2:a6:71:2c:fd:79:ab:90:85:0c:
                    f5:68:f8:d7:21:dd:c3:38:68:fb:53:79:a6:89:da:
                    49:ae:a8:4e:44:10:94:ad:01:6a:c7:bd:f7:f4:67:
                    51:7a:ca:55:a3:65:e9:87:50:16:8b:e9:b6:a6:e1:
                    09:72:c7:15:cf:1e:54:5f:33:31:1e:65:62:41:fa:
                    e3:47:40:e8:b2:c5:dd:fe:2c:fc:cd:8c:e6:79:52:
                    77:12:db:85:87:d4:5b:f6:34:86:90:af:35:5a:cd:
                    a5:2c:56:66:d8:fe:61:cd:bf:18:1e:da:f8:a6:15:
                    c1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:70:7A:50:C8:1A:D2:0A:51:7D:6B:B4:16:14:4B:35:83:81:1E:9B
            X509v3 Authority Key Identifier:
                keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:85:f8:a2:db:e3:df:fc:cc:12:54:33:8d:6a:1b:01:1e:02:
         3d:f2:e2:fa:3d:70:c4:6a:12:bf:fa:f7:49:3d:7f:a3:36:f8:
         50:99:6f:2c:1b:d9:97:62:06:51:59:0b:3b:0c:9c:86:0e:e0:
         ad:36:c8:9d:e3:84:1e:5b:88:29:c3:33:75:35:ff:fd:49:58:
         1e:c4:8e:80:59:7f:c0:9f:32:c7:b2:fe:f0:df:df:4e:3c:d3:
         b3:74:16:b3:90:08:97:2f:ed:c9:d4:ec:09:18:d3:9a:78:45:
         e3:5b:4c:ef:31:88:46:41:b6:89:fb:33:63:94:41:1c:fd:c8:
         96:ed:21:06:cd:6c:29:28:83:a5:de:e7:03:5b:78:c1:49:30:
         17:ff:3b:e6:70:7a:52:5b:4e:5f:dc:69:21:bb:ff:91:36:b9:
         24:4c:27:d2:0d:f5:d9:e6:68:32:58:85:28:49:c4:42:0a:f5:
         b5:60:31:89:98:5e:f7:41:a9:14:c3:40:6a:b2:a5:d7:93:fb:
         90:aa:17:0f:fc:56:32:9f:33:a8:e1:04:e5:b3:87:a6:b3:c0:
         8c:88:45:37:cd:16:4b:0c:02:94:7c:70:6f:ad:f8:c6:6e:69:
         de:de:dc:ad:d9:9c:18:ab:ba:4d:80:12:8d:8f:01:02:b3:a9:
         92:81:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:20 2024 by rpki-client on console-ams.rpki-client.org