Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
File:                     FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json)
Hash identifier:          rLaB0mwwVrqsCaYkMLXLAQdNKAUl0GI10ZyBaMJPNAA=
Subject key identifier:   A9:DE:8C:97:C6:DA:7E:1B:3C:69:4A:3A:96:22:AF:F3:7C:04:C3:87
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Certificate issuer:       /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial:       12F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
Manifest number:          12CF
Signing time:             Fri 22 Nov 2024 17:04:35 +0000
Manifest this update:     Fri 22 Nov 2024 17:04:35 +0000
Manifest next update:     Fri 29 Nov 2024 17:04:35 +0000
Files and hashes:         1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: huqJMywVbGlZqcSqVdrk3/uG6UUiplTTzJ+pogtIge0=)
                          2: 56094384320611EA84C94231C4F9AE02.roa (hash: kdqCU2HWVWtTjP6H/cGVnbQmwJUXbJofXCjwvVuE4iM=)
                          3: 443241A0321B11EA83044473C4F9AE02.roa (hash: peb0NN3rQarXiwZVSr4hzfm6X65GogoSGj3wgr1dCxc=)
                          4: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: 5dJn6hxxfPSiLw5GQ6SZkYPyS3vVBNlQ6n1n7xqGK10=)
                          5: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: xEJSSODLa2MxHoWVNA4uEk+1w0R7pBSRyEzoy1l8lR0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
                          rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4852 (0x12f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
        Validity
            Not Before: Nov 22 17:04:35 2024 GMT
            Not After : Nov 29 17:04:35 2024 GMT
        Subject: CN=6740b9a3-f3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ed:06:9a:c7:e0:06:63:2b:49:e7:99:51:e6:
                    89:0f:9e:52:2d:a8:27:72:46:1e:15:0b:79:94:16:
                    9b:6f:3d:6c:b7:36:70:8f:15:c0:1d:22:88:30:15:
                    5f:1e:a1:52:c6:c9:1c:4f:15:a4:b4:19:da:94:0c:
                    32:27:0c:d3:5a:f7:24:9a:90:31:b0:ac:5b:61:bf:
                    c0:2c:79:68:3b:06:5b:c1:26:86:29:d3:2d:ec:4c:
                    2c:19:a5:d9:b7:36:77:d8:aa:3b:ed:e4:7f:4e:cd:
                    a6:f9:92:e3:a0:f0:b8:0c:fa:a0:12:0a:e7:51:87:
                    ba:9b:d8:34:5f:f8:21:06:dc:95:72:0a:5a:65:bc:
                    59:5a:73:86:a1:79:1e:ba:13:3c:51:e0:5e:8c:bb:
                    61:15:b5:eb:06:79:ee:c3:a7:b7:de:f2:55:d1:7b:
                    a8:56:07:8b:7b:97:00:2f:ba:7a:13:95:ea:ca:47:
                    df:c7:98:47:b2:d6:13:6b:4d:e3:61:d6:fc:9d:1d:
                    52:ff:ed:87:75:06:ad:c1:3c:bb:8d:0d:80:e4:9c:
                    d6:01:3a:dc:6e:90:ed:5c:ed:48:66:c8:91:43:c5:
                    33:2a:26:78:5e:bf:1f:96:c2:fc:32:83:82:30:b0:
                    ff:94:30:17:d7:f4:50:cf:ad:72:72:06:b8:fe:0d:
                    f4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DE:8C:97:C6:DA:7E:1B:3C:69:4A:3A:96:22:AF:F3:7C:04:C3:87
            X509v3 Authority Key Identifier:
                keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:82:48:14:0c:cf:be:d8:a8:ef:fb:a2:02:20:b8:a2:04:11:
         97:af:30:04:6e:da:48:a5:42:ef:9c:da:ec:44:4b:a3:ac:64:
         ca:76:d3:0b:6b:9c:32:a9:f2:fd:bc:21:f8:15:22:68:e7:52:
         7e:35:e8:a7:7f:cd:63:21:12:a3:43:10:aa:bf:72:d7:a1:f5:
         7d:07:44:20:9d:79:5f:66:0d:c8:77:09:f7:1c:04:64:eb:3a:
         fd:41:0d:f6:34:55:30:99:da:9f:db:62:72:fd:fd:74:b2:2f:
         71:84:57:53:d2:b8:ba:b5:37:7e:34:e3:7c:f2:5a:2b:85:ec:
         04:a4:1b:40:13:5f:64:25:72:57:57:00:d2:e0:0a:80:6e:8b:
         15:4b:a4:4d:53:8d:28:d1:4b:27:34:f1:f2:12:29:c5:c9:d1:
         95:8a:a0:ba:a6:ea:c3:03:70:7b:50:30:fa:94:25:78:00:30:
         50:42:38:86:66:04:45:56:5b:93:e1:c9:86:87:35:a6:2d:02:
         c0:b7:91:47:cf:f4:d2:01:60:cf:09:5c:0c:9d:74:94:15:a1:
         90:95:ab:55:71:4e:f0:3d:8d:e0:60:82:1a:ba:43:d1:60:2c:
         6b:e5:65:5c:be:b8:dc:e7:f5:f5:f0:fb:7a:d7:94:b2:d0:47:
         4d:4a:cb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org