Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File:                     Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier:          GmEA+aFsZek0XylvRh7ZFLhNSP/rCGBGxjNg27dnayI=
Subject key identifier:   A4:24:78:05:96:3D:CE:E6:ED:FD:17:25:9F:01:26:93:2A:A0:98:2E
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1B93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number:          1B75
Signing time:             Fri 22 Nov 2024 16:16:38 +0000
Manifest this update:     Fri 22 Nov 2024 16:16:38 +0000
Manifest next update:     Fri 29 Nov 2024 16:16:38 +0000
Files and hashes:         1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: FTZWLHJJdsQoMZuPbtz1EJT3WI4ZwXzJi8s8ybvgBWE=)
                          2: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: jYWA9vZBVLNTWKsb/4RkVGFc8be6iId97wIVAZN/PKs=)
                          3: A3B7573EF01A11EE935E4329C4F9AE02.roa (hash: WA5ikv41pY4Bzl1xNf46w/nTz1YDB+6f/VZ1EYjQOB8=)
                          4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: S8vJZLV3hFYN28UQC6htxXLXCqBEue/8E9M498OKSjo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
                          rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7059 (0x1b93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: Nov 22 16:16:38 2024 GMT
            Not After : Nov 29 16:16:38 2024 GMT
        Subject: CN=6740ae66-b19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:cb:17:ea:12:be:28:ff:df:4c:03:4c:f1:
                    cc:88:03:f1:a7:75:4e:88:5c:5f:e3:67:d4:e6:8b:
                    ef:86:e6:4c:32:1a:c4:08:35:5d:90:16:56:c0:ff:
                    56:c8:1a:31:ee:29:4f:13:5b:1f:70:d7:3d:44:80:
                    76:bd:6c:c8:88:2c:10:af:ca:3e:3f:31:58:27:3e:
                    5a:2e:c0:e1:3e:c9:be:27:1c:6f:68:f0:f7:b5:74:
                    da:27:f0:b4:1b:d8:34:5a:75:4d:9f:02:5d:91:a8:
                    3d:02:00:0b:61:f4:91:56:88:21:ef:82:18:be:ac:
                    0d:af:ea:cd:c1:6a:8f:53:b3:eb:e1:be:50:da:73:
                    d7:23:7c:5c:ed:48:57:cd:9d:e9:8c:6c:bb:ab:19:
                    a2:3d:9e:1f:0d:12:9b:f2:6f:92:65:c0:e5:15:92:
                    5c:6f:77:64:58:49:e4:9c:13:73:26:40:55:e1:03:
                    d1:50:b1:ef:b5:82:e0:3e:91:c8:f7:e7:47:96:2d:
                    90:c8:52:da:83:9d:2f:2e:94:b5:02:a8:d7:06:39:
                    ad:97:5b:63:f7:e8:e4:c1:e6:af:be:01:f1:c7:76:
                    82:be:35:56:6f:d3:c3:a0:04:1f:c0:42:5e:9a:9e:
                    c3:d9:a8:23:d5:19:32:38:16:57:6f:a8:c0:3c:33:
                    8b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:24:78:05:96:3D:CE:E6:ED:FD:17:25:9F:01:26:93:2A:A0:98:2E
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:46:b0:c0:26:e6:8f:7f:e4:ab:91:35:be:a2:d4:b8:12:50:
         99:6b:63:a4:a0:6f:e7:da:6a:fb:16:9b:c0:3d:06:b6:b4:50:
         e9:05:8d:5f:41:ee:ea:34:90:3c:ee:4f:d8:30:f0:3c:7a:40:
         a6:35:3e:52:5c:36:32:9c:d5:5b:7d:3e:e7:0b:42:f0:64:79:
         64:3a:56:10:22:27:a0:95:9a:55:d8:3c:1f:78:80:22:bf:b5:
         60:0a:9e:47:f2:c4:7a:6a:be:ef:b6:4f:ce:1a:c7:82:92:41:
         25:e3:8a:bd:4b:8e:32:58:6e:d4:7d:91:52:b0:12:e4:5a:69:
         d7:c9:8a:64:f4:2a:93:68:c4:98:1b:d4:28:c2:7f:16:64:13:
         60:f9:db:e1:f4:6e:a6:35:c7:7c:3a:4c:20:74:1f:78:3c:dd:
         7f:66:b0:52:e3:1f:7d:bc:3b:4d:28:a4:f2:da:09:24:a3:c2:
         3c:1c:d6:a9:f2:00:8f:91:b3:e9:be:e5:49:ba:2e:89:da:4f:
         d7:83:9e:85:44:30:96:45:1c:ea:7c:4e:0a:9a:97:02:3a:29:
         9b:40:b9:62:fc:b4:a2:a6:c6:89:98:53:42:1e:c1:04:0b:94:
         b8:4d:79:ae:88:71:af:fd:85:41:d0:2c:e6:6d:92:51:9a:e9:
         1d:2b:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:50 2024 by rpki-client on console-fra.rpki-client.org