Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
File:                     t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json)
Hash identifier:          PdTSciEvSeBPyMH0QKAOEbHWaRvyRr1dDwVZVkxKvF8=
Subject key identifier:   39:33:C4:A7:F9:75:01:2E:0A:BA:49:1A:1D:1C:6E:C8:65:FA:69:7A
Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E
Certificate issuer:       /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E
Certificate serial:       07D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
Manifest number:          07C3
Signing time:             Fri 22 Nov 2024 20:43:41 +0000
Manifest this update:     Fri 22 Nov 2024 20:43:40 +0000
Manifest next update:     Fri 29 Nov 2024 20:43:40 +0000
Files and hashes:         1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: f4bjZIR5XZflif+Q/U/EYcNTXYvMZiNDr4IubLeVLbA=)
                          2: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: pyE1yk75hZHnyTIGM5Wvuc1wIGq6cD55fIaC+TnGwmo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl
                          rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E
        Validity
            Not Before: Nov 22 20:43:40 2024 GMT
            Not After : Nov 29 20:43:40 2024 GMT
        Subject: CN=6740ecfd-f98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:09:fd:19:61:72:19:b0:2b:ba:32:6f:93:0a:
                    23:36:cb:0e:f6:97:7e:4b:f7:c7:3f:12:51:8d:46:
                    c2:64:63:ec:af:a7:1d:98:61:48:58:bd:57:6c:22:
                    d7:e2:11:7c:3b:b9:56:b4:db:d1:a9:38:cf:4a:dd:
                    eb:5b:e7:f5:6b:d5:75:9a:dc:d6:ad:2e:5e:60:36:
                    45:70:b6:a4:08:61:07:ea:d6:0d:8e:13:50:8e:c6:
                    a1:f9:19:5f:9e:1a:29:b1:3f:54:62:b5:ea:3c:c6:
                    0b:0c:2c:23:82:75:7e:be:03:c6:7b:91:60:05:94:
                    ae:57:11:93:a3:af:63:23:b4:68:3b:4c:bb:dd:e0:
                    5d:5b:9a:ed:e7:06:77:15:46:c9:d7:4a:99:be:35:
                    29:ad:fe:e0:c8:5b:f7:57:5d:73:c1:f4:93:7b:8b:
                    32:f1:5d:f9:45:24:47:82:7d:5f:5f:93:4d:a3:fe:
                    7d:f6:33:53:11:cf:85:9b:ad:d6:63:bc:51:3e:cb:
                    92:2a:25:96:40:49:5e:e3:33:c5:b4:d2:ad:85:3e:
                    d6:6e:8c:d6:88:d2:49:ec:82:7f:75:31:53:d8:bc:
                    6e:94:03:8c:6b:38:d2:b4:6a:42:73:98:31:5a:8b:
                    6f:9e:d1:29:c5:3f:eb:2c:85:b3:de:05:87:73:b3:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:33:C4:A7:F9:75:01:2E:0A:BA:49:1A:1D:1C:6E:C8:65:FA:69:7A
            X509v3 Authority Key Identifier:
                keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:18:bb:1f:05:87:8a:85:30:57:1e:e8:79:e7:ed:b9:c6:60:
         ef:cd:91:10:3a:ca:e1:77:74:e5:8b:57:73:52:c3:9f:e2:dd:
         c5:15:0e:fc:c7:e6:ed:96:7f:82:fb:7e:8d:9e:89:d8:1f:91:
         7c:1e:96:1f:0a:39:41:a8:9b:cd:12:3b:7c:03:83:41:06:0c:
         5c:2f:44:49:a0:0a:92:44:c7:97:04:79:b8:6d:71:75:45:46:
         73:d3:6b:55:be:1e:70:f8:fd:c2:56:6b:7c:8d:7e:c7:bb:da:
         e6:e6:92:26:fc:7f:d6:7b:dd:c3:9a:11:2c:3d:68:80:f1:00:
         6a:85:9d:09:33:b5:b1:64:bd:47:c8:de:2c:b4:c4:6b:c1:4c:
         7e:d3:0d:5e:42:50:5c:8a:c8:41:21:b4:2f:ac:ad:b9:ca:7d:
         57:77:b4:a0:6f:09:45:9f:bf:ee:cc:73:16:23:1b:b3:8a:a7:
         57:fb:81:62:7d:4e:38:e7:3d:86:41:06:e5:27:0f:50:6f:24:
         ba:23:e7:a1:0c:69:49:ba:1c:04:0f:1f:2b:cd:be:b0:ea:28:
         1c:d6:62:68:9f:7a:f1:b3:0d:b1:c2:e5:e0:86:f5:b3:73:04:
         3f:0a:e5:e7:22:a6:0c:7f:a6:14:88:5a:a7:ac:9e:c4:11:fc:
         41:17:60:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:32 2024 by rpki-client on console-ams.rpki-client.org