Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft
File:                     MJ8WI5oTsNAQQo21URRuUu63C7c.mft (raw, json)
Hash identifier:          tisXKdcATm7GGx8cU18T2jJSGm5COvKE7G5r2ByNra0=
Subject key identifier:   E5:47:AC:83:4E:F4:40:F3:6E:DD:01:98:3F:6F:29:EA:D1:9E:62:BD
Authority key identifier: 30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7
Certificate issuer:       /CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7
Certificate serial:       0403
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft
Manifest number:          03FA
Signing time:             Sat 23 Nov 2024 00:02:18 +0000
Manifest this update:     Sat 23 Nov 2024 00:02:17 +0000
Manifest next update:     Sat 30 Nov 2024 00:02:17 +0000
Files and hashes:         1: MJ8WI5oTsNAQQo21URRuUu63C7c.crl (hash: +Po6Ecq9X4OwG/87xJkGdNeIxOO/3iwYixC3lVg6kpc=)
                          2: 118BA98C51CA11EC9067E22CC4F9AE02.roa (hash: 1XjeHDQ66gK9l4CFDY2wsyvhO3mqIEjFkltw+gwNQXM=)
                          3: 12A7C1D451CA11EC9067E22CC4F9AE02.roa (hash: dSUbP0To+9LJFWpBicB2PCzASwn6qpJhInRJqpT56ow=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl
                          rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7
        Validity
            Not Before: Nov 23 00:02:17 2024 GMT
            Not After : Nov 30 00:02:17 2024 GMT
        Subject: CN=67411b89-6de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:d9:f4:10:07:80:9b:dd:ba:ec:a3:bc:84:
                    7f:b1:a6:f9:bb:66:ca:21:ae:e9:56:59:9b:83:b7:
                    df:b0:0e:76:ee:d3:d4:dd:15:50:fb:a7:00:39:38:
                    64:14:62:dc:7b:51:30:07:61:8d:18:e7:4e:81:47:
                    47:b7:2c:92:2c:b8:f6:26:64:0e:ba:2a:61:e6:9b:
                    92:fd:e8:ba:b3:51:a7:8e:52:34:a0:62:94:b6:51:
                    5e:e8:60:36:05:5a:22:d6:f3:e8:a6:6d:36:10:0a:
                    ad:32:79:ee:fa:62:70:41:60:d9:3f:2f:cf:ca:bf:
                    ba:a3:5e:a0:a6:57:51:a6:83:66:b5:29:50:96:8b:
                    28:95:24:9a:ad:db:1f:05:3e:a4:ad:fc:25:5d:ce:
                    ec:7f:de:7a:f5:32:dc:20:f3:c4:3b:23:d4:a1:f6:
                    41:76:ea:3a:28:cb:c1:85:b9:69:cb:48:aa:f7:4b:
                    3d:70:17:52:bb:e9:4c:da:63:f6:5f:8b:6b:8f:f8:
                    19:15:fb:ab:ae:37:4b:7b:e4:66:f0:e2:bc:da:9d:
                    db:35:6d:7e:33:dc:ee:7c:aa:b2:6a:13:f0:e5:67:
                    ff:3c:aa:24:e7:6f:07:7d:a0:df:87:19:96:d8:af:
                    70:60:8f:db:04:69:c4:de:b1:43:c8:80:06:d8:89:
                    6c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:47:AC:83:4E:F4:40:F3:6E:DD:01:98:3F:6F:29:EA:D1:9E:62:BD
            X509v3 Authority Key Identifier:
                keyid:30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:01:42:f2:7a:62:5c:48:50:6f:3f:f8:e8:fd:51:68:4e:7c:
         50:1d:70:86:f2:d0:84:c3:3e:3d:62:4b:43:3c:fb:2d:8d:73:
         aa:c4:ea:41:4c:64:95:e8:c4:20:1a:ec:cc:20:a1:80:21:b9:
         8f:76:c2:54:6b:c5:5b:ac:c6:8e:ba:02:fd:59:78:6a:82:ea:
         21:f1:cf:43:dd:eb:78:68:20:30:a5:be:e9:cf:cd:35:ac:51:
         3d:e1:24:ec:da:3c:88:8d:c0:84:b1:94:ad:8f:d4:92:a6:9f:
         34:90:59:b5:c8:d5:4d:ae:fb:04:3f:45:11:fa:ce:a8:d7:d6:
         72:50:7c:d0:4b:ad:35:1b:0f:ad:31:8c:04:46:c4:c4:5a:9c:
         dc:07:a8:a1:75:6f:36:1d:6f:7c:7b:db:df:f3:fc:f7:0a:87:
         1c:56:e1:38:4e:60:a8:c3:10:6e:68:2c:af:3c:da:91:39:2f:
         47:79:38:54:1e:17:f6:a6:7b:8b:24:6e:3c:15:02:75:c3:af:
         23:ad:47:c3:a8:9c:43:ba:8f:22:31:e1:70:f0:b8:13:ee:af:
         8b:37:8d:17:06:12:86:9d:fc:4d:2c:fa:c8:a7:15:18:6e:a0:
         05:9b:05:4b:95:9b:79:d9:05:07:01:03:44:85:cc:29:c0:68:
         87:dc:4a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org