Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft
File:                     xhlIJCxagX94h_N49IM8VrevtXw.mft (raw, json)
Hash identifier:          F0t2X6YUqRwCkFoZOwe6Aro7d9EKWtSWrBPQcrZFfRU=
Subject key identifier:   6C:EB:53:9C:3B:18:82:B8:A4:9E:55:EC:F9:A3:AF:3E:DF:7B:C6:DC
Authority key identifier: C6:19:48:24:2C:5A:81:7F:78:87:F3:78:F4:83:3C:56:B7:AF:B5:7C
Certificate issuer:       /CN=A919C0C5/serialNumber=C61948242C5A817F7887F378F4833C56B7AFB57C
Certificate serial:       0678
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhlIJCxagX94h_N49IM8VrevtXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft
Manifest number:          0670
Signing time:             Wed 20 Nov 2024 21:52:39 +0000
Manifest this update:     Wed 20 Nov 2024 21:52:38 +0000
Manifest next update:     Wed 27 Nov 2024 21:52:38 +0000
Files and hashes:         1: xhlIJCxagX94h_N49IM8VrevtXw.crl (hash: RslWnH1320lRMN3/fkwMdnmUOWp5bHH5v9P0KxydYSI=)
                          2: 014E44B0553D11EBBF79C170C4F9AE02.roa (hash: BFP9Tj4zNmRAa3cLxHVOfZTSNmrLw/rym63IdR2AULE=)
                          3: 00B844B0553D11EBBF79C170C4F9AE02.roa (hash: 1baRnXTmkUhCfQDEbcLW2ezWijXSsxfYPnOfDxomYPI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.crl
                          rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhlIJCxagX94h_N49IM8VrevtXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C0C5/serialNumber=C61948242C5A817F7887F378F4833C56B7AFB57C
        Validity
            Not Before: Nov 20 21:52:38 2024 GMT
            Not After : Nov 27 21:52:38 2024 GMT
        Subject: CN=673e5a26-7cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:66:55:03:06:37:21:74:a5:23:6b:9b:47:60:
                    31:1e:3a:dd:78:c0:c1:fa:42:6c:2c:cc:ed:2e:8b:
                    9b:ac:85:f5:0d:b9:1e:83:9c:57:7e:b5:b7:7b:21:
                    e8:60:f6:99:72:67:23:ec:d9:c5:53:62:54:e1:94:
                    3d:12:d6:e4:fc:9f:fd:cd:ab:00:ec:57:de:62:64:
                    8d:bc:53:b9:d1:a2:43:f1:8f:83:98:2f:74:ff:29:
                    ab:e4:2a:33:fa:a9:06:23:24:74:42:69:a3:97:9a:
                    2c:dc:0e:d5:38:e9:69:1b:ed:fa:e4:40:41:d8:7b:
                    ec:bd:00:dd:f1:eb:25:85:73:75:14:42:b0:cd:24:
                    c6:b6:20:05:03:3c:a7:93:a1:ad:8e:90:47:03:41:
                    f1:18:1f:3f:b7:6e:1a:95:7c:f8:b6:45:f2:a0:e0:
                    1f:1d:05:26:fe:fc:8c:7c:c7:2d:a6:b5:7c:60:c1:
                    3c:38:60:63:f9:b1:c4:76:4d:56:d7:4e:15:47:0c:
                    a6:87:7c:8d:e4:6f:90:ab:8a:f3:3b:8d:63:2b:5b:
                    33:d4:f7:a6:96:45:9b:a8:76:a4:81:9b:fe:a3:3d:
                    d6:1f:ca:7b:a4:93:dd:0d:02:13:a7:30:85:32:ec:
                    80:b7:c2:c3:22:eb:b7:63:29:2f:3f:22:a0:bb:a1:
                    e5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EB:53:9C:3B:18:82:B8:A4:9E:55:EC:F9:A3:AF:3E:DF:7B:C6:DC
            X509v3 Authority Key Identifier:
                keyid:C6:19:48:24:2C:5A:81:7F:78:87:F3:78:F4:83:3C:56:B7:AF:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhlIJCxagX94h_N49IM8VrevtXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:72:93:8f:66:01:86:36:4e:1f:d0:c9:6c:9f:c5:d6:14:10:
         fc:41:02:02:ed:fa:fb:36:cb:83:21:de:59:70:b8:36:c4:07:
         3a:58:4c:5f:7f:9a:3f:e5:39:0d:ab:ed:17:71:e8:94:ef:95:
         c4:66:23:5f:0f:7a:84:59:fb:e9:05:93:06:4d:74:ab:15:b5:
         78:25:9d:ad:5d:00:12:2a:09:6e:e7:39:f1:ef:c2:77:d8:92:
         5a:cf:77:cd:7d:21:c5:d2:1a:15:8f:73:12:8b:62:c3:37:32:
         ed:26:0d:45:ed:b1:70:fb:81:04:0d:53:f7:13:2f:d7:f7:fd:
         a1:e9:de:57:d9:c9:94:a9:3d:11:83:ab:1e:62:e1:c3:14:1f:
         4a:b4:24:2a:58:6f:65:e8:8e:71:5f:a9:eb:c3:d2:ce:d6:ba:
         94:72:80:cd:c5:03:a9:49:21:b0:21:c7:d5:97:b8:5f:3f:d5:
         a1:94:10:76:3b:3d:41:ce:14:21:d1:89:92:6b:87:65:98:e8:
         c6:51:0e:16:26:21:6a:9b:dd:e7:8e:32:d3:55:72:49:2e:ee:
         20:f9:16:61:aa:9e:cc:5e:53:8f:4f:14:0d:af:d2:e1:8f:86:
         4c:22:f6:15:ee:f7:bb:a5:7a:5a:68:d9:c5:95:72:50:b9:f1:
         ee:67:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:48 2024 by rpki-client on console-ams.rpki-client.org