Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
File:                     gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json)
Hash identifier:          kOjB4cRHDgCXnhEzGymhJjxSZpL1CRQE0SQi2aVJhOg=
Subject key identifier:   79:48:01:CC:4D:08:76:06:AC:2E:B3:37:6A:F6:9B:06:DE:9F:97:1E
Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
Certificate issuer:       /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
Manifest number:          C5
Signing time:             Sat 23 Nov 2024 03:53:05 +0000
Manifest this update:     Sat 23 Nov 2024 03:53:05 +0000
Manifest next update:     Sat 30 Nov 2024 03:53:05 +0000
Files and hashes:         1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: UfoQzJ5lMB7C4wckoLMSYdw+HsTcXzIPp8+kqHq5Xd4=)
                          2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: OAmPRTah7XdC92cyaOL1VT2tDGpsaJQwQAJo+nqjJlo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
                          rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE
        Validity
            Not Before: Nov 23 03:53:05 2024 GMT
            Not After : Nov 30 03:53:05 2024 GMT
        Subject: CN=674151a1-c453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:69:4d:77:a5:77:da:b8:83:c3:d1:65:65:
                    0a:68:fe:cf:40:03:0a:f6:75:f2:77:7e:38:7e:0e:
                    34:58:a8:4c:0b:ad:22:13:aa:0c:37:16:29:fa:0c:
                    d2:ca:17:45:e2:70:0c:bb:80:cf:55:4d:65:f6:42:
                    0c:10:87:cb:32:89:19:f3:f0:d5:10:b0:4f:f2:6a:
                    de:fa:38:55:ac:06:fc:17:35:78:fa:54:f2:47:77:
                    98:a6:79:ac:b9:78:25:ad:6f:7a:4a:68:0b:a5:b1:
                    88:d1:8d:4f:af:7a:25:ae:8b:29:7a:63:34:7c:8e:
                    76:8d:91:09:c1:09:50:e7:ed:b6:cf:35:78:2e:3e:
                    9b:f8:5f:8b:2b:c3:4f:ac:ec:23:c8:7f:37:10:15:
                    ad:28:c4:02:3b:aa:7a:4e:13:25:c9:60:a4:7a:c2:
                    c6:a8:7f:a8:5a:7a:18:f8:8c:e6:13:14:42:80:76:
                    6b:22:bd:5a:5e:08:bc:e4:ff:f1:d1:40:32:04:6a:
                    c5:b8:78:25:e3:9e:80:6e:cc:3f:82:c5:62:31:8b:
                    77:46:cb:66:5e:63:b8:b2:41:75:1d:55:7c:9b:6a:
                    c9:78:16:3c:0a:a0:2a:b2:f9:db:0b:1f:ea:ea:3f:
                    f0:c1:03:cd:fe:b7:55:3f:e6:e3:a7:06:ff:4b:f9:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:48:01:CC:4D:08:76:06:AC:2E:B3:37:6A:F6:9B:06:DE:9F:97:1E
            X509v3 Authority Key Identifier:
                keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:20:7d:13:82:f3:28:fe:28:e6:df:5f:de:86:a5:3a:03:96:
         a7:f3:5e:c4:d5:42:0e:5a:49:91:c3:02:d9:25:c0:8d:89:5a:
         74:4e:e3:66:2a:f7:41:5c:39:83:ff:14:0b:b7:f5:e3:9a:ca:
         35:85:73:82:96:f7:a5:f9:32:6a:06:37:ca:53:6b:55:9e:03:
         1c:26:5a:a0:8c:93:86:37:b0:81:62:36:1e:cf:5d:79:78:a4:
         84:36:42:5b:d1:32:32:50:79:c3:9f:cb:95:33:71:69:13:d3:
         8a:8a:e4:01:cf:af:69:db:7e:43:fc:32:d7:22:a3:9a:96:0f:
         ef:8a:6e:89:12:ef:7d:e3:78:30:63:83:c9:4e:e7:77:24:c8:
         0b:9a:8d:d0:41:b2:95:ec:f2:85:43:31:de:ac:d8:a0:2a:37:
         5d:be:b7:02:37:a8:71:49:dc:06:ba:0d:b7:f7:a2:ca:46:20:
         8d:55:e6:0c:4a:cb:66:cd:3f:8f:62:c8:ac:f2:25:f1:4b:eb:
         f3:e0:3a:d4:14:0b:3d:d2:a4:ab:1a:2f:78:fd:ba:b4:ca:67:
         ab:ce:01:ce:fd:df:d9:e0:43:ae:97:7e:ec:c8:bb:30:cb:10:
         b9:3f:2a:94:79:66:05:b8:a1:d8:33:6f:4f:18:64:e7:29:ab:
         85:02:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:17 2024 by rpki-client on console-ams.rpki-client.org