Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft
File:                     76axB-8ZSk3WeyjVVYARdcz3FEU.mft (raw, json)
Hash identifier:          K45jRGblkQy6swxaoSCCLYOTCNipQRyH8EYXKjtBKWA=
Subject key identifier:   ED:58:05:D4:00:5B:F3:3B:68:FE:0A:62:BB:7D:24:91:B3:F6:23:31
Authority key identifier: EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45
Certificate issuer:       /CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445
Certificate serial:       06E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft
Manifest number:          06D8
Signing time:             Fri 22 Nov 2024 21:37:47 +0000
Manifest this update:     Fri 22 Nov 2024 21:37:47 +0000
Manifest next update:     Fri 29 Nov 2024 21:37:47 +0000
Files and hashes:         1: 76axB-8ZSk3WeyjVVYARdcz3FEU.crl (hash: j2I/FmRAGLvofI2FKn3lC5LmhLkdeOkze3JcrmExbQ4=)
                          2: 666595E890A911EDA8F5FF52C4F9AE02.roa (hash: 0hhYQv1Dx0IGJd7nJvn9S2TIbOnrfwA1D6BasQDOlWU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445
        Validity
            Not Before: Nov 22 21:37:47 2024 GMT
            Not After : Nov 29 21:37:47 2024 GMT
        Subject: CN=6740f9ab-f3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:95:15:8b:58:4e:53:3d:44:86:c3:e0:b7:
                    b0:29:4c:07:9c:aa:a7:49:3e:08:4e:0c:c1:6d:6a:
                    7a:f7:8d:20:81:99:14:93:0a:d4:e9:21:d9:d5:9b:
                    14:a0:ff:11:c2:da:df:fd:90:00:97:40:cc:d0:68:
                    85:52:29:a3:47:bf:46:8e:92:20:bf:ec:f2:f2:f0:
                    62:c8:68:7a:4c:93:70:33:fe:6c:a0:76:28:28:1d:
                    40:75:91:da:9f:2d:de:e6:62:86:02:d3:60:18:cc:
                    ff:f7:cf:11:ee:bf:f5:4e:b1:6e:40:09:fd:9f:70:
                    1c:b3:b6:21:3b:86:c3:06:5d:6e:ed:fd:40:2f:74:
                    c6:40:d7:66:d5:f7:6b:21:30:e2:03:c1:cf:bc:85:
                    e4:f3:f2:86:f8:c6:42:21:49:4c:c8:24:ce:8b:72:
                    22:10:eb:c6:f2:99:e7:07:1e:9e:55:ff:d1:51:50:
                    04:db:c8:b9:a2:4a:a8:84:4b:44:75:6d:c8:87:15:
                    79:83:b9:b3:b2:c9:5b:98:cc:e1:30:4a:0b:39:38:
                    bb:11:63:c4:c3:14:a7:5d:e0:79:2d:5c:3a:da:52:
                    5d:18:40:86:29:9b:81:79:49:f2:35:7c:83:e8:3b:
                    fa:4a:2b:cb:47:e0:b6:1c:6a:0a:ce:e6:ff:d9:e0:
                    94:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:58:05:D4:00:5B:F3:3B:68:FE:0A:62:BB:7D:24:91:B3:F6:23:31
            X509v3 Authority Key Identifier:
                keyid:EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:26:9e:34:48:fb:dd:48:28:5d:45:40:0d:ca:33:85:a8:9b:
         1b:1b:12:a2:7c:c9:e4:e1:9a:37:43:fc:94:87:9d:25:9d:bc:
         9c:b3:11:68:07:78:58:bb:e7:3d:72:97:a6:83:bc:41:0d:55:
         7d:38:7a:6c:c9:df:a4:c2:c5:0f:a1:57:f5:ce:6b:fd:37:c5:
         fe:9b:f7:ca:07:a1:09:98:b1:a9:6a:54:04:71:0c:ef:ef:e0:
         b8:a4:bb:81:05:0c:ea:b3:11:ee:dd:6e:46:a7:d8:37:70:08:
         34:fd:fe:9a:83:08:7a:50:1c:44:37:22:7d:62:22:69:fe:69:
         0c:12:2f:d2:f6:45:9b:66:bd:fe:ae:d5:a6:f8:f4:b3:23:e4:
         4d:2c:99:18:ad:f2:4c:ed:ba:2e:33:80:57:84:15:e3:df:3f:
         d9:c7:06:21:ac:e3:9a:18:ce:6e:4b:0a:53:3a:4a:ce:73:74:
         e4:e5:5f:18:d8:dc:7b:49:ba:73:c2:53:91:42:3f:b3:4b:08:
         98:0f:15:ac:b9:4c:89:66:2d:07:88:f9:59:c7:e8:68:de:bf:
         76:dd:e4:86:0d:30:9c:e8:5a:20:47:5f:cf:dc:80:2f:8d:8b:
         26:02:a6:fa:22:60:aa:cf:a1:ef:8e:22:ba:6c:7a:70:93:13:
         f6:5f:97:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org