Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
File:                     _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json)
Hash identifier:          rvTOimjzIZ7lG02VladDAfetPnjofkt1CIPyHZYz0OE=
Subject key identifier:   05:1D:A8:CD:A0:71:F8:B9:6E:6F:B4:9B:18:88:89:E7:21:A7:36:4F
Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
Certificate issuer:       /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
Manifest number:          0137
Signing time:             Sat 23 Nov 2024 02:48:49 +0000
Manifest this update:     Sat 23 Nov 2024 02:48:48 +0000
Manifest next update:     Sat 30 Nov 2024 02:48:48 +0000
Files and hashes:         1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: mcTaCZpHsJKYzIxEFWwmQGRVReQmhEUTGCvTjoUJ27s=)
                          2: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: mj8BZaD2prJGm8LGJCj6rtZxHkzEu6R89n+rZKAZIEg=)
                          3: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: bewV6KFz5UfLmXyQpYAW/eskr2prQjBvAcy6H5aMFUU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
                          rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
        Validity
            Not Before: Nov 23 02:48:48 2024 GMT
            Not After : Nov 30 02:48:48 2024 GMT
        Subject: CN=67414291-1e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:c3:a3:c8:38:df:1d:17:3f:12:a0:60:c9:
                    c3:63:72:d2:ea:18:8a:3a:55:c4:42:07:d1:96:b6:
                    82:56:6e:d4:de:3d:08:eb:ad:6d:fe:51:65:49:ff:
                    48:01:a8:e9:d5:61:34:28:aa:e5:86:52:af:d1:6b:
                    f4:67:f0:80:78:a6:34:01:5b:24:0e:8f:21:e0:d7:
                    34:1b:98:1e:1f:26:cc:e3:80:df:a9:8d:52:42:dd:
                    c1:6a:fd:35:bf:9b:38:9a:44:ad:12:38:12:f9:c1:
                    7c:fe:2b:e5:a9:a5:70:69:9c:e1:3e:55:f8:2c:d8:
                    6d:70:00:73:c7:63:c6:21:d6:ec:f4:ff:45:5f:19:
                    55:83:f3:54:dc:da:1e:da:81:dc:52:ca:86:f6:56:
                    e0:c1:33:a3:eb:4b:e2:91:eb:c3:43:28:a0:b3:f2:
                    b7:04:d0:80:d6:bf:ca:db:02:53:2a:3d:43:8c:1c:
                    8e:ae:29:0d:da:3c:9b:c3:cb:bf:44:29:6b:8a:fd:
                    58:73:1d:5b:98:1d:3f:53:a4:07:05:f3:51:a8:fd:
                    4e:22:a1:2d:2d:d0:2b:0f:5d:d7:53:c9:79:76:d4:
                    4e:86:d8:24:12:8d:eb:77:8b:a4:66:51:fd:83:18:
                    e6:df:3b:4b:35:87:24:f8:7c:51:ab:57:b1:79:b0:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1D:A8:CD:A0:71:F8:B9:6E:6F:B4:9B:18:88:89:E7:21:A7:36:4F
            X509v3 Authority Key Identifier:
                keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:56:bc:8b:68:81:c7:45:3d:5f:8e:da:22:4a:8f:7c:3f:a1:
         d3:1d:5e:13:2e:95:a1:6b:2a:6d:f4:54:e3:6e:5c:30:cb:bb:
         4c:a7:2a:14:19:44:98:72:e7:f4:09:01:60:b2:33:1a:b3:bc:
         61:1e:30:9b:b9:0e:dc:5d:ac:2b:23:e3:6b:69:a4:b1:db:42:
         28:64:e4:bf:f9:2d:a7:3a:07:64:23:2e:4e:fa:b5:61:0c:2d:
         bb:cf:8b:55:de:ff:17:ea:c5:83:c8:fa:2e:2a:b8:fe:01:05:
         56:ff:bf:63:20:c5:d6:e6:37:d4:8a:4c:f9:64:a9:9c:ac:40:
         5e:0e:5e:dd:e1:25:d9:f4:c6:88:27:dd:e5:1a:fd:47:8b:ba:
         18:52:7e:5c:1c:14:13:d4:8e:03:0d:f3:a6:fb:29:ec:20:bd:
         d8:1e:6c:c2:34:07:a9:36:e5:07:b4:70:5d:89:bf:0e:95:4d:
         00:9d:48:3b:a8:cc:58:32:b1:65:25:ca:15:c9:4b:82:4c:2a:
         63:78:bb:68:73:09:b8:63:fa:7b:40:a7:87:ef:29:5c:f5:d0:
         5c:64:ae:e8:7e:d1:27:86:f5:cb:79:4c:6a:f0:c0:ad:2d:24:
         49:22:75:18:a0:91:66:fe:55:31:f1:ed:40:33:b8:2a:73:d5:
         78:8f:1c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org