Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
File:                     E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json)
Hash identifier:          2KJnmNRe/6dF2em1W+nrLfRrWBhMpISC7cC0ItzHsIQ=
Subject key identifier:   D3:13:75:E1:75:58:46:70:2F:6C:4A:55:86:57:CD:18:AD:ED:A3:EC
Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
Certificate issuer:       /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Certificate serial:       045E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
Manifest number:          0459
Signing time:             Fri 22 Nov 2024 23:43:50 +0000
Manifest this update:     Fri 22 Nov 2024 23:43:50 +0000
Manifest next update:     Fri 29 Nov 2024 23:43:50 +0000
Files and hashes:         1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: 9C0HcDp/uZI71R27lSLiAWdJGeaFJbUL5PCdeS+VHmE=)
                          2: BC0960102C5A11ECAB4C276BC4F9AE02.roa (hash: DpB3VrHRzT/Tn6zHL/OsD4hRYceSOtqxmkZcheppe/s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
                          rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118 (0x45e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
        Validity
            Not Before: Nov 22 23:43:50 2024 GMT
            Not After : Nov 29 23:43:50 2024 GMT
        Subject: CN=67411736-fa9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:e8:09:9f:0e:50:98:fd:87:39:f8:cc:8b:
                    ea:6d:ad:6f:84:e0:f7:1f:39:38:63:e2:f5:56:9b:
                    6d:e4:e0:21:e2:cf:4b:8b:4a:36:20:9d:36:ae:1c:
                    64:79:94:75:f5:8c:f1:73:c5:46:3b:ea:a1:10:41:
                    35:d9:b4:6c:fa:08:77:bb:29:c3:e9:51:e4:80:e1:
                    8a:1c:b8:e7:97:f9:dc:82:c9:85:0a:b6:14:83:32:
                    cc:d3:72:58:c4:09:70:b4:09:0a:d8:f6:0e:db:d3:
                    62:33:61:58:8c:33:20:ab:f5:45:d6:86:c0:9a:c4:
                    5c:86:a4:e8:2e:c8:4a:d0:5a:90:17:92:ba:81:97:
                    96:22:00:c6:4f:fa:2d:f8:ea:44:45:0b:2b:1f:58:
                    de:4c:9c:49:b2:87:5a:ba:71:cf:13:ab:1a:ad:04:
                    4f:00:08:58:55:e5:45:23:e1:b0:7b:2d:dc:86:50:
                    a8:a6:e4:2b:20:cd:13:f3:7f:cc:ff:16:97:8c:7e:
                    72:e4:e2:4c:eb:e3:ef:82:e2:04:42:14:02:95:ab:
                    11:3f:ad:96:59:49:ed:86:15:bf:ec:dd:6c:ab:b3:
                    4b:99:77:05:77:83:be:63:57:51:01:bd:a9:d9:04:
                    93:3b:24:52:92:53:07:aa:60:72:5e:65:96:97:12:
                    a2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:13:75:E1:75:58:46:70:2F:6C:4A:55:86:57:CD:18:AD:ED:A3:EC
            X509v3 Authority Key Identifier:
                keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ab:a2:1f:e4:ee:36:d8:a4:77:e6:40:73:a1:43:8f:fe:72:
         a9:60:fe:23:24:89:75:63:4d:63:f5:ce:62:f0:08:98:5f:49:
         bf:84:82:c9:79:87:70:a9:af:82:83:16:ed:c2:c6:05:35:fa:
         6c:18:24:73:ff:3f:b4:31:b0:17:91:85:d7:e4:63:b1:07:14:
         43:98:32:91:9c:d5:d3:32:23:7b:14:6b:32:63:85:d8:ec:25:
         3a:54:39:5f:4c:04:b8:fd:1f:e2:e6:67:9f:f6:12:ac:c5:94:
         59:f5:ea:43:f6:cf:25:eb:db:f8:f3:93:9d:51:a8:ea:63:32:
         b9:ae:f0:99:ad:a9:1a:dc:b3:72:3a:9d:86:97:2c:4a:e2:25:
         67:97:5f:64:a1:dd:b1:24:19:94:68:6f:7e:fe:ea:2b:c5:dc:
         e0:d4:0d:43:1c:84:bd:ca:1e:2f:b7:2f:75:8c:bf:e8:6b:69:
         cd:77:d5:4f:35:1a:4b:5e:70:f6:f9:5c:1a:ae:0d:c2:c7:98:
         01:3e:09:a3:2c:43:5d:4e:87:f2:ef:ef:04:ae:f0:3e:4b:2b:
         9b:59:af:5a:a8:f4:72:e1:0e:9e:69:de:13:17:b9:f9:79:52:
         3a:78:dc:87:84:9a:48:5f:47:72:41:4b:7f:d0:9f:05:85:63:
         ff:92:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org