Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
File:                     Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json)
Hash identifier:          7otsJzGs3Vnt4c2htjlzDxnjgY87fYq0JADDp9wMrQs=
Subject key identifier:   55:EB:D1:D9:BD:0F:A1:E0:41:07:52:9E:F3:1E:7A:24:AD:45:1C:4F
Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
Certificate issuer:       /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
Certificate serial:       10B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
Manifest number:          10B0
Signing time:             Fri 22 Nov 2024 17:19:39 +0000
Manifest this update:     Fri 22 Nov 2024 17:19:39 +0000
Manifest next update:     Fri 29 Nov 2024 17:19:39 +0000
Files and hashes:         1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: QrIKTs0rgHztCJ1Aej6hxhajqlmw9w13+r9ddgeLMq0=)
                          2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: zV6REZhrlHRK9WwneyCjOZlr9H4FQ1buelUqX0wvym8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl
                          rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4280 (0x10b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
        Validity
            Not Before: Nov 22 17:19:39 2024 GMT
            Not After : Nov 29 17:19:39 2024 GMT
        Subject: CN=6740bd2b-cfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:af:21:38:88:bd:4f:be:b1:13:25:53:1d:fc:
                    db:44:64:84:f7:e4:9a:85:ed:cb:77:b8:f0:ac:e0:
                    10:1e:91:49:cd:bc:52:55:49:91:c4:50:ba:8d:fd:
                    7d:45:71:80:98:1f:90:b6:cd:98:8e:70:95:d3:e6:
                    ba:29:c9:1d:18:a4:57:28:2b:6e:ec:82:f8:ea:27:
                    ae:eb:6d:96:c1:54:76:f9:77:79:93:35:2f:b6:b2:
                    85:b1:bc:bc:ed:fc:6d:74:09:1f:18:08:76:d9:44:
                    35:4f:02:d4:84:0a:29:1f:a5:3d:43:8e:03:25:b7:
                    0f:2c:b2:d4:7b:d1:ee:27:fa:f6:8c:b0:6c:18:7f:
                    13:01:a7:1b:70:fd:c0:d1:4e:98:b0:52:4f:8f:1a:
                    71:2f:5e:bd:cf:81:d6:60:78:74:e6:be:96:73:09:
                    11:4e:1a:f0:4c:92:09:9d:cd:f6:f8:59:f4:d4:67:
                    16:98:49:7b:9d:d7:8f:31:94:01:6b:d3:0b:be:c3:
                    fb:00:a9:9a:b9:b2:61:84:7f:a2:79:d4:20:11:81:
                    e7:41:65:63:ca:e2:ea:fc:08:d0:59:34:64:91:09:
                    26:c3:83:42:28:2c:e7:af:8f:fc:de:bb:cd:44:b3:
                    72:16:79:88:98:51:5a:e8:c7:4d:a7:86:2e:f1:6a:
                    82:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EB:D1:D9:BD:0F:A1:E0:41:07:52:9E:F3:1E:7A:24:AD:45:1C:4F
            X509v3 Authority Key Identifier:
                keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:7f:ee:8c:c8:f3:ab:7a:2c:69:39:c1:31:d6:0d:32:8a:ed:
         5b:09:03:a4:2d:12:e1:9d:53:03:b5:ed:ae:6a:e1:c2:ea:97:
         21:ff:57:a6:e3:a5:02:5f:2f:98:85:66:c3:bb:85:db:eb:ce:
         36:4d:41:7b:68:7d:42:41:77:96:8d:6c:cc:08:e6:83:60:93:
         3f:3a:2a:17:04:6c:fb:53:f0:9f:d6:a9:ba:12:ef:c8:b4:ed:
         6e:ba:f2:7a:a3:93:92:0e:46:ea:c1:e4:20:66:1e:4c:af:70:
         0c:34:27:10:9b:3f:9d:bb:51:15:5a:4d:69:e3:5c:69:ab:e2:
         47:d8:8c:b1:a8:ee:d7:39:d3:d8:b0:8d:9f:11:d1:b9:1b:b3:
         65:50:1d:03:44:37:c5:4a:ac:84:cf:5b:13:26:fc:d0:08:21:
         00:cd:17:75:6a:cd:5f:7a:5d:9f:8e:52:3f:a0:94:86:f1:1c:
         fd:e8:39:a9:cc:4c:77:3a:ad:d7:73:e8:ae:f1:8e:ca:7f:7b:
         18:7f:5f:e9:20:ab:60:e9:32:51:ce:d7:fa:9f:f7:1c:a7:b8:
         d8:3d:dc:08:c4:a6:55:e1:f3:4b:27:85:ab:b9:97:4a:f9:d3:
         ab:c5:67:83:3d:4f:b6:0e:4e:54:70:70:0c:d4:93:bd:f4:32:
         a3:ce:e9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org