Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
File:                     K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json)
Hash identifier:          vtH/QYGu3DXcPqI8u94iBePFEhQ0xWi67Nt1pYKqz9s=
Subject key identifier:   58:7B:5C:6D:11:FA:A4:96:B2:E8:B6:69:0F:00:B6:6D:FD:34:98:21
Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6
Certificate issuer:       /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
Certificate serial:       343C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
Manifest number:          3432
Signing time:             Fri 22 Nov 2024 14:58:26 +0000
Manifest this update:     Fri 22 Nov 2024 14:58:25 +0000
Manifest next update:     Fri 29 Nov 2024 14:58:25 +0000
Files and hashes:         1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: x7Ua9JCYsYUYWAGdJD1UsPAH2ZCMMO3Fx/2OP7eUEuU=)
                          2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: zJHVvC3pRK1yUOEuPWeLlF93Wf3H36BKsW2Vj7FyRUs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl
                          rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13372 (0x343c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
        Validity
            Not Before: Nov 22 14:58:25 2024 GMT
            Not After : Nov 29 14:58:25 2024 GMT
        Subject: CN=67409c11-a102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:a7:b5:31:1f:8e:93:d7:a0:b0:49:eb:d0:
                    bd:57:3d:bd:91:4e:65:40:14:de:fc:46:ba:f5:51:
                    1e:1b:56:b4:b5:cc:c6:87:ce:6c:3c:4b:07:8c:ba:
                    5c:2b:2d:f7:9f:08:c2:fd:50:0c:89:b1:9d:70:b9:
                    93:4c:89:20:36:cb:0e:29:69:c9:cc:67:1d:03:60:
                    fe:5a:5b:82:56:90:ff:2d:78:22:1c:c5:4e:1b:62:
                    21:4d:c9:00:52:a0:b8:7d:9a:76:91:ed:85:eb:c7:
                    14:4a:53:3a:f5:db:45:13:c1:e6:fe:92:19:a7:5c:
                    80:67:4c:38:1e:e8:51:78:ec:20:de:9e:0e:ba:5a:
                    2d:5a:a5:af:9d:79:3a:d8:88:02:c0:73:c9:39:49:
                    1a:26:b1:9f:03:d2:4a:c6:f2:ad:55:45:35:db:f0:
                    7f:79:75:98:4a:fb:c1:f4:ce:f2:01:a2:b6:c1:c4:
                    45:bd:be:9c:fb:83:dd:12:8e:1b:ed:0c:e9:13:3c:
                    df:92:a0:87:4c:90:85:f2:6f:84:5d:60:30:0c:f9:
                    99:bf:47:43:cd:e2:22:67:40:1a:ca:3f:6c:b5:09:
                    58:38:80:a0:ca:24:18:4b:51:da:02:e9:96:5c:08:
                    ed:75:64:3d:6f:3f:a7:d5:d8:d5:56:84:2f:56:28:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7B:5C:6D:11:FA:A4:96:B2:E8:B6:69:0F:00:B6:6D:FD:34:98:21
            X509v3 Authority Key Identifier:
                keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:0b:0a:17:78:68:d7:aa:5d:c1:dd:ed:ca:f9:08:7f:e9:
         be:c7:83:e5:26:99:50:b4:4a:0b:ba:94:93:ea:33:e9:57:7c:
         fd:69:94:21:ef:ac:3b:48:af:1e:5e:02:a2:88:7f:1d:62:6f:
         5a:97:c2:13:f8:86:1b:64:25:7c:7c:9a:d5:8a:a8:6f:33:61:
         6e:43:4c:5a:af:5c:e4:51:36:e3:91:05:ed:47:3f:22:25:6c:
         81:6c:a3:33:6f:77:03:3a:48:7d:c9:32:ae:07:5d:3f:c0:8c:
         8e:78:27:15:16:9c:8f:f9:aa:bc:d1:6d:e9:65:f2:57:5b:0d:
         d4:7c:6c:40:e6:5e:29:ba:b0:e1:f7:7d:91:25:39:78:14:ef:
         77:d1:10:f1:14:a0:89:f8:b7:99:1c:a4:1f:86:d0:a3:63:0a:
         b7:50:35:12:85:98:5a:aa:d9:cd:bf:4e:7a:65:ca:d2:91:13:
         3d:62:68:1c:89:46:b8:5b:5a:82:f8:8a:df:d0:ee:87:d2:64:
         0e:fa:8a:27:72:84:8e:71:dc:da:6c:b9:c5:0f:87:f9:03:e0:
         09:3c:af:3b:a2:2e:66:fd:fd:8b:48:2c:83:ec:4f:bd:1c:39:
         13:01:01:48:d4:68:ee:90:2a:d8:3d:64:0f:b8:a9:27:ff:d7:
         92:6e:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org