Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
File:                     2CWolzNYl8B-dpODimvyAnZYDwM.mft (raw, json)
Hash identifier:          MSKgc2QOtfbIxq+hk85OK651nOD2J2UyrjiNXGUWmXc=
Subject key identifier:   AB:B9:EB:49:A6:D0:A0:85:3C:95:08:0B:FB:E5:61:02:8E:8D:5E:E0
Authority key identifier: D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03
Certificate issuer:       /CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03
Certificate serial:       05A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
Manifest number:          059B
Signing time:             Fri 22 Nov 2024 22:46:47 +0000
Manifest this update:     Fri 22 Nov 2024 22:46:46 +0000
Manifest next update:     Fri 29 Nov 2024 22:46:46 +0000
Files and hashes:         1: 2CWolzNYl8B-dpODimvyAnZYDwM.crl (hash: KwS9mkzoo1cSyHti0lf57Noy9WMrjrRNiU/0Wd4aM9Q=)
                          2: E6ECE6E6104C11EC9074E586C4F9AE02.roa (hash: gAuID1Fe/PtlP9DGBoTnnUFK6n2WVQEEJLwbWlhbFaE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl
                          rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1445 (0x5a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03
        Validity
            Not Before: Nov 22 22:46:46 2024 GMT
            Not After : Nov 29 22:46:46 2024 GMT
        Subject: CN=674109d7-7038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:bf:3b:20:93:66:a1:9a:1e:60:5e:9e:1b:
                    fe:2b:b4:a1:84:c6:b0:2b:87:52:80:2a:95:29:93:
                    8c:83:dc:16:a0:31:30:5f:2a:75:38:d7:05:02:bd:
                    65:62:64:32:47:3c:f8:48:ce:e6:d7:64:7c:c1:44:
                    20:1f:4b:b7:81:9e:0a:e6:73:8c:a0:a9:b7:43:76:
                    72:98:89:8e:3a:5c:e3:86:e0:47:12:d2:2b:a3:0d:
                    1a:6d:3a:7e:ec:f8:90:05:34:89:c9:39:74:a3:fa:
                    51:fb:39:8f:1a:c1:ed:8a:5b:64:19:7a:c9:87:d8:
                    42:3a:cf:42:38:1f:91:27:fa:c5:5b:3b:c2:92:f7:
                    58:2f:da:f3:f2:b9:44:d2:c0:5b:82:47:17:81:73:
                    ef:cb:b0:bd:1d:79:fb:86:01:3b:36:52:b3:3a:01:
                    7f:17:5c:6b:82:56:06:b6:92:b0:bc:ba:6e:f4:48:
                    e5:1c:35:2e:4e:47:1c:f0:0a:81:99:63:30:f4:79:
                    64:be:b5:d6:81:75:78:46:83:7b:7c:77:79:90:94:
                    a4:8c:2c:84:3a:67:44:b3:df:ff:6c:0f:22:cc:0d:
                    0d:af:ec:79:ff:51:62:74:f1:1b:be:77:6a:5b:da:
                    f0:77:4a:04:ad:8c:59:55:ea:13:21:dc:65:ed:4f:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B9:EB:49:A6:D0:A0:85:3C:95:08:0B:FB:E5:61:02:8E:8D:5E:E0
            X509v3 Authority Key Identifier:
                keyid:D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f9:5f:04:aa:09:ed:21:8a:96:ff:a0:86:1a:e0:51:60:59:
         e7:7d:6d:21:c3:2b:51:b0:a5:1b:f5:4b:fd:3c:e3:45:6e:b0:
         68:be:18:80:63:97:e8:1f:ba:b0:8f:b6:04:8a:aa:2c:8b:54:
         92:97:e2:f5:18:30:af:ae:bd:66:5a:52:8e:2b:c9:11:47:ca:
         2a:85:e8:ee:eb:ea:9e:f1:93:82:37:9b:85:c6:d2:f8:6f:06:
         43:3a:32:e4:53:e2:19:df:79:35:87:37:3c:fb:1e:87:17:7f:
         aa:e1:30:aa:c8:c6:85:8a:d7:04:72:5d:e6:33:bc:cb:04:7e:
         0d:d1:c4:48:55:d0:fb:84:3f:b9:1c:f2:93:77:77:1c:2d:b6:
         1a:52:88:2f:81:f8:8c:61:1e:af:a9:cb:03:5a:22:7a:e3:dc:
         d2:48:2a:65:23:c6:45:a5:22:02:d0:f6:b1:11:fa:03:21:93:
         07:75:85:38:5b:13:13:49:77:d7:76:fc:19:7b:5d:74:b3:7e:
         fa:fc:8f:91:6d:f2:b1:db:d7:1e:43:ba:78:e3:38:c7:28:72:
         44:71:86:9c:79:c5:ef:fe:b8:87:b4:c4:f5:94:e6:f8:8e:ec:
         c3:12:2b:13:8a:d6:88:0c:3a:35:7d:36:cf:97:88:fa:94:f0:
         9d:5d:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:31 2024 by rpki-client on console-fra.rpki-client.org