Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
File:                     4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft (raw, json)
Hash identifier:          +GhKwpCI5kSpUpltgoIc6uvaQPIzik+yzYU6L6mQkrE=
Subject key identifier:   E6:E5:20:C7:CA:08:B6:E2:B8:72:CC:B1:F7:09:73:7F:98:E7:0C:5D
Authority key identifier: E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17
Certificate issuer:       /CN=A915C948/serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
Manifest number:          E1
Signing time:             Sat 23 Nov 2024 03:36:56 +0000
Manifest this update:     Sat 23 Nov 2024 03:36:56 +0000
Manifest next update:     Sat 30 Nov 2024 03:36:56 +0000
Files and hashes:         1: 4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl (hash: 39TN+4AiXibwlF/mz/t2HMNiW9PMeEC0woKD/yzxw4w=)
                          2: BED765785B0411EE94E4143EC4F9AE02.roa (hash: nzuv2qiqFy7RBa+xOMRhwb33N3s9hvdrnFdUnSAlhPw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl
                          rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C948/serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17
        Validity
            Not Before: Nov 23 03:36:56 2024 GMT
            Not After : Nov 30 03:36:56 2024 GMT
        Subject: CN=67414dd8-fea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0b:a7:e4:51:e8:ed:f7:0e:fa:02:15:bf:d3:
                    e0:b8:63:86:4d:b4:f3:d9:2c:89:0b:57:b2:13:d8:
                    d8:42:92:c7:77:2b:9a:06:df:72:fc:dc:91:32:0e:
                    82:af:8a:55:74:f6:b6:b4:9b:0b:7b:ab:aa:d1:48:
                    6e:e8:3c:0e:e5:f3:c9:c1:04:ad:44:89:2e:93:77:
                    30:d6:c6:75:11:6a:39:b8:ac:e1:6b:d9:9c:60:ab:
                    2d:82:fc:7d:7a:39:65:31:0e:8a:1a:11:c2:ac:50:
                    a7:17:b0:54:7e:d9:14:0d:1d:b5:e0:f8:bd:c4:9c:
                    51:10:cd:a7:a0:02:fc:9f:6d:c2:af:4d:4c:bd:83:
                    14:ed:d4:71:10:84:64:5a:86:c9:52:43:b5:f9:82:
                    bf:e9:fa:04:f1:63:55:c9:29:fc:03:a0:5a:e0:dd:
                    ae:11:e9:ea:3a:73:d1:4f:ba:0b:11:b8:2a:1f:95:
                    f3:e0:cd:ee:cd:f7:d3:52:3c:68:5a:fc:70:2e:67:
                    2b:57:31:0e:64:f8:31:97:ba:82:aa:33:de:2a:de:
                    27:ab:c3:e1:03:70:9f:f3:bb:09:90:df:86:d4:5f:
                    7e:41:c7:44:95:b6:bb:7b:da:f6:2c:08:d0:d7:21:
                    86:35:09:9c:76:e5:b5:40:34:d7:04:cf:37:48:18:
                    e7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E5:20:C7:CA:08:B6:E2:B8:72:CC:B1:F7:09:73:7F:98:E7:0C:5D
            X509v3 Authority Key Identifier:
                keyid:E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:bf:04:fc:86:2f:76:20:ef:2c:7d:ff:2b:e2:bd:ae:27:8c:
         da:ad:c9:17:3e:a9:15:5e:53:3c:3f:dc:d6:ca:2d:72:1c:94:
         18:ec:0b:d7:08:09:25:df:dc:20:25:62:87:77:92:c9:f9:65:
         16:c1:a4:5a:cb:23:cf:55:37:a9:d3:ed:d8:22:a8:93:fb:a1:
         28:e9:56:96:cb:d9:7b:8a:fd:29:7c:8d:c7:ec:4c:22:8f:63:
         3f:81:c4:ae:2a:52:b7:20:1d:5c:f4:bd:e2:06:1e:b1:85:2d:
         98:e1:4f:0b:4c:09:52:eb:f4:fb:ab:53:41:5d:2d:d6:6c:b0:
         f8:58:39:54:da:98:65:1b:24:3d:ae:66:15:2e:d3:e7:d9:5f:
         d8:91:ba:97:3e:30:2b:2e:df:1d:93:57:94:71:af:3a:1f:e5:
         0b:51:c6:f2:0d:fe:ae:b0:f1:c4:60:8e:38:01:5e:af:93:3d:
         b4:00:94:57:7f:9b:9c:c9:76:19:48:ff:f9:f9:46:5e:76:7c:
         bc:d9:8b:c8:ea:88:ab:4b:09:c1:f6:57:96:bb:a3:bb:08:c3:
         35:95:e2:5d:a1:bb:83:03:30:a7:1d:0e:bd:02:d3:b6:ae:d1:
         b6:c1:b5:38:66:b7:c3:c4:8d:a7:a4:b0:a8:6b:68:2c:91:b0:
         5c:31:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org