Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
File:                     M1EvnGdsMJ4181WPA7muZBm_dBU.mft (raw, json)
Hash identifier:          Z3+TCTxHplXi65sE482Mez0v5dWX8XK7llgZsU5Rgq4=
Subject key identifier:   7D:99:1C:E6:DF:23:7A:6B:DC:B6:D8:A2:2A:84:01:A4:C4:DA:49:0A
Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Certificate issuer:       /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
Manifest number:          0128
Signing time:             Wed 27 Nov 2024 02:57:21 +0000
Manifest this update:     Wed 27 Nov 2024 02:57:21 +0000
Manifest next update:     Wed 04 Dec 2024 02:57:21 +0000
Files and hashes:         1: M1EvnGdsMJ4181WPA7muZBm_dBU.crl (hash: LTeOUS/7HtxaHaSWfJjm6brVNi1DkS0mDaLAQ66IWp4=)
                          2: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (hash: kgAbrMxDjdyKqEEvFfGcY8h/Xgxe3iJZ0yN268wXz80=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl
                          rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
        Validity
            Not Before: Nov 27 02:57:21 2024 GMT
            Not After : Dec  4 02:57:21 2024 GMT
        Subject: CN=67468a91-12ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:da:b8:29:7b:9e:ae:2f:85:22:63:5f:4d:
                    cf:1f:74:d6:0a:7b:f6:e6:07:60:9f:69:4e:44:1e:
                    a1:25:e8:34:66:dc:a6:10:bb:45:29:07:20:72:2b:
                    74:b5:10:27:eb:e3:d6:a9:a9:f7:c0:1d:2b:e1:32:
                    d2:25:63:f1:4f:79:8f:0c:35:aa:ee:b4:5e:7e:48:
                    06:f1:16:0c:80:f6:a2:46:e1:45:06:7d:5d:c8:eb:
                    b3:48:17:b5:68:0a:b9:01:d4:22:8a:12:56:5a:c4:
                    14:00:d1:f5:31:71:6a:09:2a:33:79:d6:dd:d6:bb:
                    ec:96:c4:1b:9c:b5:48:41:7e:5c:6a:71:9e:fd:e0:
                    ca:53:e1:73:71:fa:c5:67:e5:ba:6f:fc:ad:26:48:
                    2d:16:c7:d8:ec:86:53:b5:0a:24:91:11:be:5e:c0:
                    82:37:c5:33:dc:fe:4a:ca:af:df:20:0f:d4:f2:31:
                    14:94:49:27:79:d5:3f:61:87:19:06:94:56:4d:bb:
                    d4:29:f2:e4:01:30:0a:4e:13:a2:90:2b:77:62:4b:
                    08:db:a4:90:97:51:e5:fd:13:c8:ff:65:73:f9:49:
                    a1:8b:ad:bb:8a:12:89:84:bb:76:65:67:2d:e8:72:
                    e2:55:32:ef:b8:30:71:4c:70:85:fe:a6:60:84:8e:
                    98:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:99:1C:E6:DF:23:7A:6B:DC:B6:D8:A2:2A:84:01:A4:C4:DA:49:0A
            X509v3 Authority Key Identifier:
                keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:dc:e3:8d:ea:0f:c6:43:6f:fa:ca:ae:9d:c1:45:d3:73:ef:
         12:cc:10:89:24:98:07:43:1a:52:d4:a2:0c:cb:cf:21:e1:ad:
         64:a5:bc:50:42:b7:44:66:5c:df:e6:48:b5:f8:bf:d3:63:80:
         08:b1:22:de:24:1a:2a:cd:5d:f8:6e:ec:4f:a2:7d:7f:8b:19:
         94:a5:f6:14:5e:d1:ea:f4:49:b9:02:27:fe:36:1e:56:b2:e7:
         c5:06:57:54:64:c5:29:45:e1:25:c0:c5:3c:0e:9b:14:f8:71:
         cd:56:a7:a9:51:59:b5:51:9f:4d:50:f7:6b:47:1c:a1:f5:b9:
         09:ef:41:04:68:75:ff:9b:8d:7b:d8:40:e9:8e:04:cd:9a:f9:
         3f:00:26:9b:33:42:e8:cf:98:20:79:f2:cc:e7:13:b1:03:3e:
         26:9c:a1:93:ca:a0:59:a4:ca:70:a8:ee:46:23:fa:80:bc:19:
         b2:f5:d1:ae:34:11:4b:f1:94:1d:bf:fa:6c:5b:6c:bb:13:93:
         50:d2:0d:ff:13:7d:c8:c4:ee:67:9e:c5:bd:6c:7e:e3:10:43:
         9c:12:ec:e6:7c:49:d7:05:01:7a:9a:f2:89:17:5b:80:9e:63:
         02:0e:57:83:ed:14:c5:ab:41:6f:d0:88:ae:7e:60:dc:d7:53:
         04:61:2d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:07:10 2024 by rpki-client on console-ams.rpki-client.org