Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
File:                     Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json)
Hash identifier:          VApCOYElJJFnOsvwsjNgz4b4fxmibMW0lzSf7sBjDHY=
Subject key identifier:   69:16:8D:F1:F6:79:44:A1:A8:9F:FA:06:C7:B1:5B:E9:CB:EF:3F:D2
Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7
Certificate issuer:       /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
Certificate serial:       079E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
Manifest number:          0799
Signing time:             Fri 22 Nov 2024 20:48:55 +0000
Manifest this update:     Fri 22 Nov 2024 20:48:55 +0000
Manifest next update:     Fri 29 Nov 2024 20:48:55 +0000
Files and hashes:         1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: 43QTKlmweSY8CdbRaIPayDARhRJlOzyT8aOyS1rJ5CA=)
                          2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: 0zq4g5RJk0E/VoR4Pr+LW71Q1CJOf0yYtzjcsTKINfo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl
                          rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1950 (0x79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7
        Validity
            Not Before: Nov 22 20:48:55 2024 GMT
            Not After : Nov 29 20:48:55 2024 GMT
        Subject: CN=6740ee37-4760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:f4:ef:5c:97:d5:2d:0b:22:53:59:1a:66:
                    5e:be:7e:a5:be:23:8a:5a:74:03:ce:44:ef:3d:ec:
                    e0:03:02:ca:d6:6d:82:df:c0:fc:ab:45:35:9f:3a:
                    85:1f:d3:ed:92:e4:fc:45:aa:e3:0f:11:db:1a:68:
                    4f:0b:59:cf:63:b7:c7:e0:46:54:ef:7b:cc:72:79:
                    06:87:60:2a:3f:33:19:13:b3:a1:7a:05:3f:3d:e6:
                    d1:eb:04:01:35:c1:f2:4d:49:08:d9:c3:77:a4:4b:
                    ca:70:7d:ae:80:7e:99:66:3a:d6:03:81:b7:a6:57:
                    1e:47:ac:b8:2e:a4:9a:d0:4d:e3:53:f2:c2:09:80:
                    55:34:05:00:37:c5:dd:5a:ea:a8:dd:b7:ac:53:18:
                    2d:a4:7d:30:10:3c:4a:5d:17:42:a9:0a:69:33:51:
                    af:a3:3e:80:65:b1:17:98:cd:96:02:fe:8e:86:b7:
                    3e:8d:f5:fd:d6:a6:af:38:c2:d2:eb:7d:dd:4f:a1:
                    c8:f5:58:76:8f:8f:94:c0:6b:4c:a9:db:63:07:10:
                    07:f3:19:90:95:b9:83:b7:40:6b:f6:d3:8e:97:68:
                    1a:9e:97:ba:7a:c8:7b:de:97:1f:55:de:7c:6a:24:
                    24:70:7f:3c:16:22:4b:47:1e:2f:bf:fb:e8:f7:b4:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:16:8D:F1:F6:79:44:A1:A8:9F:FA:06:C7:B1:5B:E9:CB:EF:3F:D2
            X509v3 Authority Key Identifier:
                keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ab:44:3e:c2:df:f5:44:30:3e:00:ed:e0:e2:d4:27:ae:34:
         ab:95:03:1b:2e:26:9f:ab:2e:48:1c:c8:9c:64:31:09:77:26:
         1e:35:30:c4:ce:e0:97:2f:ed:da:b7:6a:2d:7c:13:d5:93:ec:
         8e:be:6b:77:31:23:4c:0e:2e:57:2e:6c:a0:d8:99:e3:36:a8:
         df:4a:80:1c:a0:71:84:3d:61:93:22:ad:0f:9f:d8:76:85:63:
         e8:5e:83:cd:62:51:0b:80:d7:f8:8b:34:48:ae:2f:50:43:3f:
         f1:b2:73:d4:86:94:a2:95:38:aa:ab:bb:00:8c:4b:dd:62:95:
         fc:e9:2e:53:ab:78:50:2e:23:9f:30:4a:b7:38:1b:a4:ff:13:
         f8:48:8a:08:01:70:18:9e:99:de:74:f0:6a:99:49:8e:bc:d2:
         c5:6b:83:16:65:50:53:d5:8a:3f:d6:3b:73:83:63:7f:4f:75:
         c0:0a:c5:62:9e:d9:65:98:a5:04:3a:17:fe:5a:7e:5b:44:5e:
         dd:6e:32:ed:9e:f7:e9:3e:cf:28:e3:3a:cb:5e:17:ee:6f:2e:
         ee:5c:69:7e:24:10:41:49:a5:0b:c0:82:12:26:68:c6:6b:15:
         56:03:f7:b6:e1:4e:08:8b:99:04:fb:88:c8:02:f3:fc:18:0b:
         95:44:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org