Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
File:                     4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft (raw, json)
Hash identifier:          kiXWtY8+sk5EWzzSyzgz69eh3+Bv1+Xx62hlWv8pJ6Q=
Subject key identifier:   58:96:31:C6:73:6B:55:A1:75:F6:4A:31:EB:54:EA:10:5D:12:D6:18
Authority key identifier: E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84
Certificate issuer:       /CN=A915E005/serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
Certificate serial:       219F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
Manifest number:          2190
Signing time:             Fri 22 Nov 2024 15:53:50 +0000
Manifest this update:     Fri 22 Nov 2024 15:53:50 +0000
Manifest next update:     Fri 29 Nov 2024 15:53:50 +0000
Files and hashes:         1: 4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl (hash: Emn96gf7Z6zcyQuIidvXDJ+FCbbaJa2EZQabNMQnQQg=)
                          2: CD4CD0B654F311E7AC64ED3AC4F9AE02.roa (hash: sxrNxCTJ+45si1boAQwArYewZOdeGJ/p8B0/QcUtSi8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8607 (0x219f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E005/serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
        Validity
            Not Before: Nov 22 15:53:50 2024 GMT
            Not After : Nov 29 15:53:50 2024 GMT
        Subject: CN=6740a90e-ea3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:25:90:cf:f5:24:92:50:e6:95:3d:6a:f7:69:
                    6c:67:3f:32:d6:b3:9a:0d:cb:13:33:cf:e6:9b:18:
                    a0:3f:e9:36:5c:e8:0b:8f:c4:c2:48:01:3d:ae:2c:
                    3a:b4:d3:71:1e:2a:6e:92:34:6d:d9:fc:d0:0b:47:
                    35:0a:3c:ba:ab:e1:03:8a:1f:93:b2:d6:e4:aa:75:
                    00:18:4a:9a:2c:a8:53:23:79:56:5c:a8:ed:af:49:
                    f3:f6:c4:c1:69:9f:e9:ba:00:ab:36:4d:16:ef:19:
                    17:da:e6:81:79:44:02:51:54:98:b6:06:76:88:7b:
                    95:10:47:11:1e:59:fd:ed:1d:6c:d6:9a:61:94:d4:
                    15:08:92:f0:0e:ea:d8:01:5e:57:e1:b0:65:42:02:
                    a3:c3:ad:f7:d2:72:65:19:7e:95:93:2d:e0:01:8f:
                    ab:86:64:84:40:d7:79:72:c1:d5:e7:6f:ed:8a:5f:
                    e8:5d:1d:69:6e:fd:6d:23:1d:f8:eb:f2:c4:a3:68:
                    3c:a7:09:b6:a8:ac:e5:47:15:22:78:13:eb:5d:98:
                    c2:9a:72:91:a7:a2:c5:0a:3b:67:4c:7d:0b:8a:94:
                    ef:f7:27:59:14:d4:cd:d8:67:99:a7:dc:43:30:b9:
                    e8:22:7b:a4:01:ed:7d:ee:a8:1f:66:22:ae:b6:94:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:96:31:C6:73:6B:55:A1:75:F6:4A:31:EB:54:EA:10:5D:12:D6:18
            X509v3 Authority Key Identifier:
                keyid:E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:31:62:f8:28:ea:5e:17:d0:f2:89:29:c7:6f:79:8f:4b:e7:
         0d:0f:2a:3a:0b:37:25:85:c3:23:e2:81:50:ff:db:33:4d:5f:
         35:b5:d7:fd:0c:39:e3:8f:9c:2c:90:32:57:2e:1e:d1:bc:dd:
         49:3f:27:24:e9:2d:77:e5:a6:e7:2f:fc:c8:7b:49:85:2b:71:
         9c:7a:d4:03:9b:49:5d:cd:33:d9:65:fa:6c:61:40:10:14:9e:
         45:4b:80:29:f1:12:ba:19:9b:70:f5:12:fc:9c:77:43:bb:1a:
         15:da:cc:05:23:b2:7d:5f:71:fd:25:ca:33:5e:cc:03:11:18:
         0f:b2:f4:52:b5:94:43:0c:4c:49:88:3f:8e:30:66:51:06:cc:
         eb:96:37:52:36:70:af:00:1a:eb:15:f0:12:ba:3d:28:03:01:
         b3:3d:ff:01:c2:29:7f:f3:de:77:c2:33:a1:b0:2a:15:c5:ee:
         1a:36:d1:8b:b8:66:0c:43:c7:93:dd:09:88:8f:ea:53:89:ad:
         32:70:46:c8:1c:13:bd:f3:3f:0f:c5:72:66:6e:80:5a:98:39:
         b5:c9:d4:c3:f1:ad:19:dd:3d:42:d5:85:c2:dc:cf:1c:6c:c7:
         58:27:01:48:5d:5f:17:da:27:7a:30:bd:a4:7e:cd:06:48:17:
         ed:b3:52:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org