Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
File:                     phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft (raw, json)
Hash identifier:          BBHJNFtBf6XXhR7XRPHi2KSOfvJPhDqblwc+C5amdUA=
Subject key identifier:   FD:84:15:74:24:27:C3:3E:57:50:59:08:2B:DF:BA:81:6E:A0:FE:07
Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
Certificate issuer:       /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
Manifest number:          010F
Signing time:             Sat 23 Nov 2024 03:09:54 +0000
Manifest this update:     Sat 23 Nov 2024 03:09:54 +0000
Manifest next update:     Sat 30 Nov 2024 03:09:54 +0000
Files and hashes:         1: phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl (hash: EN3sGsf6C91cRKE2gk+0n65wE3uDaVB48i1sDe7+cOs=)
                          2: 7C9E449814B311EEB9CD302AC4F9AE02.roa (hash: JgXDvvb08AKpWtQFVgWoJSRrsvnpi7N5Npk5xtbR4bs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
                          rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
        Validity
            Not Before: Nov 23 03:09:54 2024 GMT
            Not After : Nov 30 03:09:54 2024 GMT
        Subject: CN=67414782-c53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:d0:5f:35:15:68:c4:1f:dc:2b:66:80:35:
                    09:4d:06:ff:91:20:23:9f:6a:58:c7:72:f6:3f:f7:
                    9a:6e:d2:3f:e7:f7:7a:fb:43:58:70:e9:e3:eb:da:
                    23:11:ec:47:c3:0e:a7:e0:29:ca:8b:b4:47:c0:9f:
                    a6:dd:f7:f4:70:b7:0e:d8:63:ea:8b:c2:b1:39:dd:
                    be:b8:2f:18:76:6c:1a:59:a9:20:07:f5:e0:24:cd:
                    8d:83:be:f7:8e:47:5f:e7:8f:53:cb:89:8a:27:d5:
                    fc:37:77:c5:84:d5:4b:08:5f:85:1c:eb:e6:96:3d:
                    fe:11:c6:81:b1:6f:70:83:0b:60:71:d9:67:79:9a:
                    c9:3a:ba:14:fc:fa:72:7a:1e:79:ef:ed:71:5f:48:
                    bf:3c:7e:45:ae:1d:a2:8c:e3:9c:14:1f:af:e7:d5:
                    85:47:9c:fd:dc:47:fe:00:09:48:d9:3d:6b:53:11:
                    d4:28:e7:bd:cf:99:c2:1d:dc:e5:f3:0f:7a:3e:6c:
                    d0:2a:02:14:5a:7c:60:3a:0e:76:90:9d:e6:52:90:
                    e6:a7:08:e4:1e:49:36:30:cf:4e:c6:15:0a:05:9c:
                    86:47:11:79:c3:29:cc:d7:ed:76:c1:2e:44:fb:59:
                    21:8c:5d:ed:1c:96:28:8d:a2:01:51:46:0b:e5:9d:
                    92:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:84:15:74:24:27:C3:3E:57:50:59:08:2B:DF:BA:81:6E:A0:FE:07
            X509v3 Authority Key Identifier:
                keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ea:e0:88:79:4a:c2:4b:82:e3:e0:cc:ef:74:3d:bb:d0:6e:
         12:55:62:69:82:2e:bb:24:2c:36:06:d9:c8:6d:d7:c9:45:31:
         3a:c0:70:56:9a:73:1d:e1:d3:1f:05:d5:0a:4d:3d:d1:f4:ad:
         d2:be:ca:a0:67:31:45:8d:81:1b:af:c6:98:4e:91:1b:62:95:
         46:e8:09:1a:1f:d1:7d:12:24:b8:d3:09:c6:68:1c:e3:0b:fa:
         b9:8b:6c:c0:10:f4:e5:22:6a:41:78:66:7b:28:bb:f5:b6:34:
         1a:73:15:0b:37:23:b6:62:03:b4:11:93:d9:ab:24:f3:4f:1a:
         4e:4f:38:6f:95:72:33:22:c9:88:fd:f6:7b:f9:b8:b0:ba:c3:
         0f:fe:31:dd:9c:8b:09:08:d5:f0:d4:fa:bd:12:0c:5c:f3:f7:
         c4:3f:6e:e5:2d:94:9e:68:03:fd:0b:11:9a:47:66:87:e9:17:
         70:c1:76:51:a2:38:ce:ee:2e:f0:1f:61:6b:db:26:6b:86:b9:
         d9:fa:3c:35:67:0d:f2:07:39:ea:a9:83:2a:5a:c1:9b:b6:0f:
         9c:c3:97:36:21:11:f0:f3:2d:65:95:0b:7d:fe:da:9a:db:12:
         36:fe:b1:88:a0:e6:c9:fe:62:54:6d:69:af:fa:52:c7:de:f6:
         18:5f:9b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:24 2024 by rpki-client on console-ams.rpki-client.org