Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
File:                     GmByWuQEWJbjBAgwAyE-6pUmfs8.mft (raw, json)
Hash identifier:          z4ADQVjwJQ8ciRlLI60lJDCfLKFXwpLPWrqrYV80lho=
Subject key identifier:   A4:60:40:94:65:47:61:E1:C3:11:C1:F9:C4:24:2F:6C:12:AA:D2:15
Authority key identifier: 1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF
Certificate issuer:       /CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
Manifest number:          F3
Signing time:             Sat 23 Nov 2024 03:25:20 +0000
Manifest this update:     Sat 23 Nov 2024 03:25:20 +0000
Manifest next update:     Sat 30 Nov 2024 03:25:20 +0000
Files and hashes:         1: GmByWuQEWJbjBAgwAyE-6pUmfs8.crl (hash: SK6a8ZuD3GYm728ndY6Y/JJ9q0WHDli8y55iMKBopl0=)
                          2: 1779BD7C3B2311EE91010B3EC4F9AE02.roa (hash: ++SEuifHIWAk3FJLbuooJEG4UII9ZGtzJgkMFEUrXTc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl
                          rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF
        Validity
            Not Before: Nov 23 03:25:20 2024 GMT
            Not After : Nov 30 03:25:20 2024 GMT
        Subject: CN=67414b20-c79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:eb:10:c8:29:d6:17:1f:a5:1a:e2:61:c2:
                    26:b0:af:db:21:87:4a:bf:ac:e9:ff:c5:37:6f:f5:
                    e5:b6:68:5e:0c:c3:44:2c:de:18:af:82:c0:86:09:
                    ef:50:69:90:db:76:47:90:18:b6:ea:8d:aa:07:de:
                    c2:99:09:e5:d2:d2:2b:9f:d8:2f:6d:17:b2:8c:d4:
                    6f:01:29:2a:ea:d1:c9:87:28:2f:9a:8d:cb:af:86:
                    ff:b3:d4:62:80:d3:47:45:85:c6:a9:3c:32:8a:8a:
                    95:3c:6f:1e:0b:b6:7e:86:89:bc:7d:3a:9b:69:b0:
                    de:83:5d:a2:8e:82:8c:40:9f:d6:ae:9d:af:fc:d1:
                    95:27:ae:78:d6:f9:dd:aa:36:3f:c6:3e:6f:d6:81:
                    a1:5c:7e:89:d6:63:e9:29:6d:26:e4:0b:21:ea:e0:
                    96:e6:8f:fe:81:2c:fa:89:0d:ac:06:25:c4:47:dd:
                    15:7c:b0:fd:0f:5a:13:9a:08:6d:e9:bb:7c:74:29:
                    33:ff:b2:99:4e:c3:ae:f7:d0:d1:8b:53:4b:b6:65:
                    39:2a:17:b1:47:23:66:1f:de:f2:f3:03:4a:a5:24:
                    0f:77:71:bd:63:24:9f:18:a5:69:5d:b6:8a:37:e5:
                    20:e1:04:56:16:b2:2d:30:9e:72:28:ad:fc:fd:3b:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:60:40:94:65:47:61:E1:C3:11:C1:F9:C4:24:2F:6C:12:AA:D2:15
            X509v3 Authority Key Identifier:
                keyid:1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e2:0f:e0:05:fc:b2:e8:39:95:f4:ba:38:53:89:90:be:80:
         3d:fc:a0:15:f5:87:81:7b:af:59:32:e5:d6:a5:0b:f3:fd:23:
         c1:44:e9:7f:70:c4:ac:89:c4:94:dc:db:04:e7:cb:c6:f0:fd:
         3f:b3:36:55:7f:02:c9:ef:c7:2e:7c:11:37:7f:88:a5:11:9b:
         df:79:1a:71:77:24:2d:3c:9f:20:66:e8:68:81:83:6f:36:08:
         40:1b:68:cd:83:64:dc:2f:30:21:ff:f8:a3:06:04:91:2c:ab:
         de:58:23:b1:fc:d0:08:41:2b:34:ae:11:38:46:eb:1f:9f:87:
         bc:22:09:21:a9:24:a5:bc:fe:73:27:75:59:0a:f4:5e:29:45:
         52:0f:61:e9:69:db:75:85:67:4c:0a:ec:8e:8e:05:c7:78:14:
         12:a2:40:5f:10:b1:f7:3e:ee:cc:55:7c:9e:19:c1:d4:ea:71:
         6b:97:d4:4b:8e:3b:0c:7f:7d:ff:b8:e1:91:f1:12:28:97:e3:
         1e:c0:48:32:39:3b:9a:38:98:91:45:77:72:c7:11:5e:5e:33:
         bf:c0:89:e8:f8:a5:5c:cf:51:c0:6c:68:32:12:57:c3:1c:7e:
         d7:b6:cb:c4:bf:4f:77:0c:b2:ef:bd:e7:dd:b5:87:5d:d0:55:
         65:7e:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org