Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
File:                     71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft (raw, json)
Hash identifier:          PpMThd7awzZxNno7mqJC3kSbshhwoXZVgiXZMa8A26o=
Subject key identifier:   5E:3A:65:AD:E2:D4:61:E7:C7:36:6B:C9:7C:E9:97:06:C7:6D:BA:29
Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Certificate issuer:       /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Certificate serial:       0498
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
Manifest number:          0480
Signing time:             Fri 22 Nov 2024 23:40:48 +0000
Manifest this update:     Fri 22 Nov 2024 23:40:47 +0000
Manifest next update:     Fri 29 Nov 2024 23:40:47 +0000
Files and hashes:         1: 71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl (hash: OfuAOgko/0DLFqPWrlABQVaZN6NetuiYOyXNiMHF/EU=)
                          2: 13DBE72EB4A611EE9795B755C4F9AE02.roa (hash: 8VbCibBd3ZbV3h+sdQu0CJodTZCJLrT/3HEGSl1VZso=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl
                          rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
        Validity
            Not Before: Nov 22 23:40:47 2024 GMT
            Not After : Nov 29 23:40:47 2024 GMT
        Subject: CN=6741167f-ee1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:4c:15:f3:40:86:4d:da:77:f0:7f:96:d2:
                    fa:f2:c4:84:17:5d:d6:ff:9e:63:ea:4e:c5:fc:77:
                    7e:8c:df:e7:32:36:a9:09:85:49:83:21:f1:69:7a:
                    24:fa:95:2d:e7:1f:d2:fe:d7:cd:a4:e4:19:86:d5:
                    10:a1:df:9c:3b:33:f9:4f:4d:c3:3d:46:9f:bc:81:
                    7f:27:77:ba:43:85:08:30:f0:20:e3:9d:76:67:73:
                    ea:c3:88:95:d6:51:73:fe:bf:9d:43:81:91:5d:a0:
                    f2:77:d6:44:a6:7e:76:0d:77:69:47:12:e4:14:e3:
                    d4:b1:86:b1:b5:66:d2:2e:e8:74:ab:d3:b9:8e:74:
                    8c:96:4e:bd:31:5e:9e:09:73:ee:55:4b:90:f3:f5:
                    3f:58:21:7d:e6:33:b6:7d:5c:cd:20:84:a0:04:c7:
                    4d:61:46:99:cf:67:c9:46:19:72:e2:b8:5c:06:c8:
                    f4:a0:13:0b:2b:ad:8e:f3:ce:09:cd:91:df:ec:d8:
                    22:4b:1a:ba:99:da:45:93:bc:e9:9d:02:2d:fd:61:
                    f1:76:b5:9a:07:56:19:4c:44:79:27:69:86:3a:99:
                    e6:fd:e3:7a:fa:bd:8f:58:64:42:82:4f:38:b5:ef:
                    af:36:77:98:9f:67:08:46:65:34:66:3c:83:e5:5b:
                    fc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3A:65:AD:E2:D4:61:E7:C7:36:6B:C9:7C:E9:97:06:C7:6D:BA:29
            X509v3 Authority Key Identifier:
                keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d7:b4:37:f5:0c:78:3e:d5:14:5b:28:ca:f4:f5:d9:9d:1e:
         99:98:ed:a1:e7:9a:e6:b1:18:43:b0:6c:53:20:33:37:ba:d3:
         b8:94:1e:30:45:c6:67:7a:c6:50:c7:41:e6:dd:aa:b8:0f:6b:
         84:4c:cc:2a:40:4e:3e:1e:4e:7a:ef:0a:8d:59:70:3e:f2:92:
         37:62:ae:1f:44:e3:32:84:2f:7e:16:28:44:ad:27:81:31:ef:
         30:8d:c7:cd:cf:ea:62:32:b8:6d:6b:54:4c:f5:0c:1d:5d:30:
         e3:86:0f:df:2e:75:76:dd:53:96:69:77:0b:78:75:15:a6:8b:
         04:69:aa:bf:3d:9a:de:b0:14:55:50:bc:54:91:63:5e:9d:67:
         ba:50:94:41:61:98:40:c6:22:43:53:33:99:3c:4b:93:e6:d6:
         9d:0a:7d:25:cc:37:82:df:0c:78:40:da:1e:f0:d6:98:0a:05:
         28:f0:53:12:0c:23:19:96:6b:c1:9b:06:40:09:66:ca:61:5a:
         7d:66:28:a8:01:06:63:0e:9a:ee:2d:f2:b7:07:5f:cd:f6:cd:
         7c:d0:fd:a0:d6:8c:02:9c:25:47:d1:59:ff:46:24:77:fe:0c:
         67:8e:2f:7b:07:02:d7:c3:73:9d:16:ff:0b:3e:0c:90:ba:92:
         25:43:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org