Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
File:                     GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json)
Hash identifier:          62d3hmJXs91LQLFd5TibfScDnB2TdkLFek0vN0QC5O4=
Subject key identifier:   33:4F:88:01:7E:69:19:37:A3:82:C2:A9:FC:EB:10:53:C3:76:E6:E6
Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
Certificate issuer:       /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
Manifest number:          0175
Signing time:             Sat 23 Nov 2024 02:09:40 +0000
Manifest this update:     Sat 23 Nov 2024 02:09:39 +0000
Manifest next update:     Sat 30 Nov 2024 02:09:39 +0000
Files and hashes:         1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: dRj/7g/Qnx6l0uS2fwO45hVUwcbgHvXdcpEQw8RKcIg=)
                          2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: VfnSyxBIbBT07iKfw+b+BeFv7FAgwNfbIt+sEwvLAj4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
                          rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
        Validity
            Not Before: Nov 23 02:09:39 2024 GMT
            Not After : Nov 30 02:09:39 2024 GMT
        Subject: CN=67413964-530e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:e6:d3:0d:12:f9:fb:bf:af:fe:d6:02:6d:
                    99:d0:25:ce:fc:d9:42:b1:2e:6f:1f:6e:82:d5:31:
                    8b:34:dc:22:6e:53:5a:6b:da:3c:81:5c:e4:f5:19:
                    38:f2:90:11:4b:e5:06:5d:2c:a7:da:ee:24:99:35:
                    2f:93:0b:6a:c1:13:60:7a:96:a2:fb:31:5a:08:f2:
                    7e:f3:e5:86:b3:78:77:3c:05:a3:f9:f0:77:31:da:
                    94:43:72:62:d0:58:88:d8:2a:09:2f:f7:e0:8c:df:
                    b6:05:5d:a8:4d:0e:6f:ed:15:82:66:ff:28:53:2f:
                    93:33:9c:35:91:92:12:f5:5a:52:2e:fb:77:dc:8a:
                    52:8e:b4:52:b0:e2:e9:31:36:f3:a8:4d:ee:21:67:
                    e5:f6:04:e9:7e:24:b6:3c:7c:14:04:ad:45:8d:a6:
                    18:ec:e2:58:08:7d:a4:97:20:7a:23:ad:87:40:22:
                    f4:1c:2c:b3:41:dc:52:67:56:33:de:21:6c:d6:30:
                    cd:c7:c4:e5:b6:55:14:93:44:71:9a:7f:73:06:fa:
                    d1:54:fa:38:01:30:59:7c:df:b4:ca:97:a5:51:28:
                    5e:c5:07:32:e7:9e:c2:8e:ef:15:c4:48:47:38:89:
                    cf:8b:8d:bc:fe:cd:ad:52:58:a8:14:1f:7e:93:ed:
                    e7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4F:88:01:7E:69:19:37:A3:82:C2:A9:FC:EB:10:53:C3:76:E6:E6
            X509v3 Authority Key Identifier:
                keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:85:02:50:95:5c:8c:5d:c0:8a:1c:e4:21:de:5c:f9:ca:fc:
         53:5b:73:2a:f9:0b:76:85:ee:7d:b0:36:ea:c8:08:5b:d8:65:
         a9:27:0a:b0:6d:9f:e1:4a:55:46:d9:3d:35:69:42:24:7b:47:
         79:b7:b0:4c:3f:b8:9e:aa:a5:f8:e1:80:ac:06:90:cc:00:3e:
         08:ff:6d:3e:aa:9f:f0:eb:af:7f:35:9e:0c:96:d9:fc:a7:f3:
         fa:92:95:28:d6:f1:29:32:4a:ac:60:34:43:68:12:01:7f:c6:
         47:f9:81:c0:40:8e:9c:e6:bd:ae:31:ed:e8:16:8c:c5:e9:9c:
         38:7f:5f:11:1a:6c:cf:4a:cf:a8:47:4a:a8:6c:01:95:56:a6:
         88:38:18:52:36:8f:e4:57:df:a7:16:dd:ec:57:0f:9b:75:08:
         9e:77:c7:8e:21:8c:fb:ee:9c:e7:dc:74:38:73:06:22:b1:74:
         e1:7e:bc:b3:e6:6f:61:42:b0:e5:61:34:f7:c2:9a:6c:ba:70:
         fa:ab:4c:be:81:52:ab:6a:a6:25:55:9d:1b:8b:f3:a0:3e:52:
         3e:a4:5b:a9:ed:36:47:80:55:82:ac:e3:8b:94:c6:29:0d:a9:
         91:a4:ce:39:8a:7e:e8:a9:ca:a2:09:d0:7d:70:f4:ee:fa:e4:
         e8:20:e3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org