Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
File:                     V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft (raw, json)
Hash identifier:          CV5a56naixSTBKIvSOvexxbmmPdUCZiTDEtyfFuvZ+I=
Subject key identifier:   DA:F9:E7:A2:21:9D:51:90:29:01:6E:02:90:D2:6C:2F:5A:70:0C:19
Authority key identifier: 57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F
Certificate issuer:       /CN=A919536D/serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
Certificate serial:       13FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
Manifest number:          13F7
Signing time:             Fri 22 Nov 2024 16:57:04 +0000
Manifest this update:     Fri 22 Nov 2024 16:57:03 +0000
Manifest next update:     Fri 29 Nov 2024 16:57:03 +0000
Files and hashes:         1: V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl (hash: AWxjJhi1YiCbXFLgXuDoG330v80FFDRu+avr/uHh4+g=)
                          2: 36295E5A6E2611E8A01E307EC4F9AE02.roa (hash: LMl3pmdQ0erztJB/e2Vdkx7AhrXjoDAPVdtW6u4E224=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl
                          rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5118 (0x13fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536D/serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
        Validity
            Not Before: Nov 22 16:57:03 2024 GMT
            Not After : Nov 29 16:57:03 2024 GMT
        Subject: CN=6740b7df-fda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b2:f4:f5:db:c5:0f:02:71:36:fb:00:44:3b:
                    0d:e1:d9:b8:63:df:2c:8c:cf:5b:a3:d0:25:a4:18:
                    cf:14:19:79:68:fb:cd:74:07:1a:8b:68:b9:06:94:
                    f9:d0:3f:11:8a:e7:b0:85:8c:d0:7f:84:c6:df:a3:
                    ae:8f:cf:4f:55:54:67:5d:ed:fd:99:45:92:0a:c3:
                    a2:47:a2:66:78:5a:43:6e:b1:a7:2f:fb:f6:84:25:
                    37:16:fe:88:21:92:5b:65:2f:03:87:b9:d8:91:b5:
                    5c:e0:f8:22:cc:35:50:56:05:22:df:f7:b0:e2:c4:
                    28:23:06:7c:60:43:72:cb:ca:0a:21:7e:34:cc:2c:
                    c8:38:b4:09:99:c5:78:b1:c1:be:ee:86:7c:73:da:
                    ae:2c:c4:eb:b4:7c:34:67:f0:fb:75:01:38:9c:c0:
                    89:5f:e0:85:0b:93:02:5e:b2:80:25:38:a5:da:ab:
                    4d:6d:43:13:5c:65:71:c5:61:fa:ce:ad:c7:39:45:
                    c6:42:a2:c4:09:0c:7d:b3:73:0b:9d:a6:e6:57:c0:
                    30:20:bd:d2:41:28:be:7d:14:1e:e8:1d:78:99:ca:
                    6e:63:43:2a:46:01:34:cd:3d:05:3a:d1:f9:59:e3:
                    59:b1:c0:f9:41:eb:dd:84:19:4c:03:06:7b:2a:10:
                    9b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F9:E7:A2:21:9D:51:90:29:01:6E:02:90:D2:6C:2F:5A:70:0C:19
            X509v3 Authority Key Identifier:
                keyid:57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:da:fb:37:35:51:2f:cf:b5:ea:53:aa:8a:7c:53:ed:98:77:
         73:04:4e:f4:52:7a:7a:49:c2:8d:fc:a9:b8:09:0b:a2:f2:e3:
         d4:fb:05:d7:77:0e:74:f9:ae:c5:0f:fe:6c:bc:32:fc:37:6c:
         30:6b:b7:d3:07:2c:55:86:f0:f1:1d:18:61:b3:56:d9:8c:df:
         f3:e4:ee:ff:bb:03:03:6a:77:f0:87:7b:db:8c:07:c9:53:c6:
         de:a5:61:b3:3b:28:da:78:f4:00:73:cb:30:dd:04:09:64:f3:
         74:bf:d0:04:00:1f:47:1d:fe:b2:be:ff:34:53:62:97:d9:2d:
         27:b8:e5:40:36:db:33:90:8e:f5:82:dc:75:c7:32:c2:02:52:
         1f:28:d9:9a:2b:8d:28:4c:d4:b7:f4:2f:28:b6:e3:fc:aa:70:
         80:af:d1:70:b3:20:95:11:57:39:c2:3b:64:fd:81:9b:4f:1d:
         d4:38:5d:b7:b8:21:e2:6a:54:74:0a:d6:04:51:03:7a:84:71:
         7e:e4:83:90:45:e3:fc:10:12:2a:b7:5f:31:af:28:f2:a7:31:
         75:89:15:8f:31:3f:a4:19:57:18:e8:95:f9:80:f3:f0:70:88:
         9b:9d:69:f9:8a:fa:bd:4c:8c:22:da:9e:9a:cf:6f:38:94:3f:
         21:04:08:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:18 2024 by rpki-client on console-fra.rpki-client.org