Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
File:                     7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json)
Hash identifier:          oCYgbjd1GtXuI7ap67NhxqzV2sZVqZtUZzPqyFK7UNs=
Subject key identifier:   C5:3C:F5:49:25:AF:F6:01:D3:6C:60:4F:E1:FC:8D:46:A4:12:82:89
Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
Certificate issuer:       /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Certificate serial:       0A28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
Manifest number:          0A23
Signing time:             Fri 22 Nov 2024 19:33:21 +0000
Manifest this update:     Fri 22 Nov 2024 19:33:20 +0000
Manifest next update:     Fri 29 Nov 2024 19:33:20 +0000
Files and hashes:         1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: r/HBJp7m/oKnGfaAjFh787hLewkpjtfWPwV8gUJ6hA4=)
                          2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: 1yNV4IlFTDqCdXIN8GAYKZjI05HGr3RV6cvcTz8go7U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2600 (0xa28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
        Validity
            Not Before: Nov 22 19:33:20 2024 GMT
            Not After : Nov 29 19:33:20 2024 GMT
        Subject: CN=6740dc81-6589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:aa:bd:51:ba:20:4b:ec:c8:7d:48:c5:01:
                    a3:9c:a7:f1:90:a2:1a:ec:6e:0e:63:e9:04:6e:ae:
                    1e:c7:1a:18:95:d0:f3:e2:81:79:eb:1d:f6:4b:f9:
                    ff:8c:58:29:57:58:d2:8d:c7:24:6d:35:96:c5:64:
                    4f:a4:eb:a2:f6:6f:81:00:56:10:c5:6c:89:da:09:
                    b6:28:d3:cb:c4:17:5e:c5:d6:f8:cb:3c:14:87:b0:
                    18:59:b1:e5:09:c0:fb:4a:66:5d:0b:8c:56:94:7a:
                    0e:09:5b:71:2b:a2:5f:a7:e8:3a:c5:cf:15:a3:e5:
                    c9:29:36:78:dd:4b:06:de:9a:4e:36:b5:c7:b7:49:
                    37:d6:df:e4:a8:fd:d1:b8:e2:cb:6d:e6:a0:a9:e6:
                    43:df:f1:82:93:fe:cb:e2:d7:7d:54:ab:07:a8:1d:
                    91:fa:07:bd:ad:e7:7b:df:5e:99:8d:e8:e7:25:87:
                    27:ff:b4:bf:78:28:37:94:f8:8a:0f:57:68:48:03:
                    b3:ea:d5:89:61:cc:10:f5:e1:f4:f7:3c:d5:47:7a:
                    37:53:c1:fc:fe:b5:eb:48:a0:d2:43:5d:28:87:09:
                    f0:cf:ed:07:6f:08:66:d3:b3:87:94:72:5e:65:f2:
                    ff:ff:de:79:48:9a:de:cb:7c:69:7d:16:93:c4:89:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3C:F5:49:25:AF:F6:01:D3:6C:60:4F:E1:FC:8D:46:A4:12:82:89
            X509v3 Authority Key Identifier:
                keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:53:64:42:e4:ca:7a:76:f7:e6:0d:c7:63:b0:c1:8d:0c:07:
         56:f2:40:f7:67:ff:94:81:7d:12:3b:d9:fa:ef:ea:24:8c:8e:
         42:b9:84:d5:cb:83:a9:b5:c9:93:f2:e6:d2:bf:d2:27:ac:c9:
         6b:c6:eb:86:dd:d5:c5:1e:bb:fd:2e:2d:a2:78:24:f1:9c:17:
         fa:f8:e1:57:5a:7a:15:29:12:b9:6e:07:e7:99:f7:a9:b1:68:
         f2:fa:2b:ad:49:77:72:4b:31:21:00:96:95:7a:af:2a:89:3d:
         f4:ae:bb:75:85:ce:5f:57:74:b7:94:9e:bf:e0:39:05:1c:84:
         d1:80:61:6a:c4:40:6c:a8:50:c2:90:2d:d4:2f:a3:b2:64:46:
         b0:ee:3e:1f:96:e8:09:66:71:7d:a0:85:ec:09:42:9a:85:12:
         e0:1b:4b:c2:c0:b6:00:4d:39:f7:47:2d:2c:fc:e4:72:65:89:
         bd:3f:e5:a1:dc:26:ff:6c:9b:2c:91:85:ba:b6:89:b1:2d:44:
         bc:ca:a0:89:dc:f1:22:0a:d2:ad:bb:50:31:82:06:34:f8:1c:
         0e:67:d1:aa:a5:ec:5f:05:ea:51:37:a8:1d:b8:e3:4a:66:09:
         6b:27:ad:58:19:59:b3:24:c2:02:c1:98:46:25:7b:ca:ef:29:
         1c:9f:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org