Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
File:                     0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json)
Hash identifier:          T6SJHGKOcrt6tEuTKpbVtz0Jx6LX0rdMaL0CLB7ZTvY=
Subject key identifier:   0B:9F:C6:48:A5:47:19:F8:C8:CF:0D:39:7E:20:BF:1E:10:0D:5F:30
Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6
Certificate issuer:       /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6
Certificate serial:       17AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
Manifest number:          179C
Signing time:             Fri 22 Nov 2024 16:35:17 +0000
Manifest this update:     Fri 22 Nov 2024 16:35:17 +0000
Manifest next update:     Fri 29 Nov 2024 16:35:17 +0000
Files and hashes:         1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: 4b22eR1kD6lOqGiNpjwCO9myV7tkGUNRhCi68/mORn8=)
                          2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: k9iCQXzhjwfzVaU7vow/nBOXFL+lk5IPY/l7RxNnfPA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6060 (0x17ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6
        Validity
            Not Before: Nov 22 16:35:17 2024 GMT
            Not After : Nov 29 16:35:17 2024 GMT
        Subject: CN=6740b2c5-3bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0e:91:c7:63:ac:53:8c:89:54:37:d9:06:e9:
                    58:48:de:99:a6:99:0a:db:81:0d:c7:0d:be:88:07:
                    ea:68:6b:f6:35:2d:4f:2b:1f:22:03:c4:47:9f:1e:
                    6f:8a:52:80:43:f3:7d:86:21:d5:16:75:27:b8:4c:
                    2b:ce:dd:a1:ed:d4:f4:27:b7:e9:51:63:d3:43:13:
                    5f:8a:a9:9e:fe:27:76:ce:56:63:fa:5b:2b:2c:c7:
                    19:62:d0:42:c3:b2:68:0a:2d:e1:f7:96:c8:d9:6f:
                    f1:b5:d0:cd:1a:06:75:bd:bd:e2:27:d4:df:23:53:
                    e1:d3:8d:39:24:bc:b3:11:24:bf:7b:df:bf:ee:77:
                    0a:f5:e5:99:aa:6e:ae:fd:d1:ed:ee:e1:43:7c:e4:
                    6e:59:36:a7:da:db:f8:68:05:cd:87:dc:eb:ab:bf:
                    64:ae:3f:32:7e:ae:24:34:1c:f2:3f:fa:cb:51:b6:
                    14:55:89:bc:f9:31:70:3f:14:99:1b:11:90:28:38:
                    52:79:ef:fc:15:3f:7b:9b:19:02:ac:26:1f:c8:d5:
                    6d:ef:f1:0c:de:be:06:34:c6:1c:98:08:be:54:f7:
                    94:0f:5b:9c:67:fc:72:94:2e:19:b2:1f:36:b9:a1:
                    09:c5:33:fa:fb:93:26:05:ac:69:7b:2d:bd:28:e1:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9F:C6:48:A5:47:19:F8:C8:CF:0D:39:7E:20:BF:1E:10:0D:5F:30
            X509v3 Authority Key Identifier:
                keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:51:3b:f0:44:75:25:09:51:54:8c:da:87:e4:e9:8b:cd:1c:
         d3:81:d9:d2:a5:5d:64:11:7f:13:69:5b:5b:57:c9:7e:2b:89:
         a6:2c:d7:98:12:64:0e:6f:4d:1e:8f:24:35:ba:c4:c2:e4:44:
         5e:e2:a1:8c:d7:36:0d:3f:29:fb:a2:79:ac:91:e8:5a:13:36:
         14:7b:13:57:77:e3:36:2e:d2:5a:ba:2e:a2:33:ab:16:04:fe:
         4b:15:5a:00:02:6d:54:92:ed:9a:67:2c:4e:20:72:37:81:03:
         c3:74:99:bc:08:f0:7d:82:79:a0:7a:2b:ff:71:0f:04:df:b8:
         ee:f2:e7:92:9a:bc:f7:e5:7d:6b:dd:82:88:7d:27:d6:73:81:
         b2:68:57:20:fc:55:16:41:a9:5e:0a:8d:f4:0b:f5:f6:57:77:
         c1:2b:2e:26:e8:a1:1c:91:d7:3b:af:2d:eb:2e:4f:08:f2:cc:
         0c:32:b8:45:0a:52:c1:b3:d2:1f:fd:e4:a1:d6:9e:a5:78:c4:
         b9:3d:30:83:32:8c:35:f8:3c:78:8f:00:dc:33:67:fc:b1:c0:
         5f:2b:6b:7e:71:1b:dc:32:c2:9e:49:77:6b:c3:66:4b:b0:7f:
         23:8f:d0:7c:7c:9d:a6:00:f4:45:a0:ac:50:8a:7f:67:77:66:
         10:f0:ab:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:49 2024 by rpki-client on console-fra.rpki-client.org