Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft
File:                     GumvOruKc-8m-TT5izpsq5UXrKY.mft (raw, json)
Hash identifier:          EeXzghhooe2PcPK3edfc7YrHUbuZACzzkSB+7zc9ePc=
Subject key identifier:   2C:16:18:79:3F:5E:71:B7:12:6E:4F:C5:33:25:9B:C2:FB:3E:B9:28
Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6
Certificate issuer:       /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft
Manifest number:          0162
Signing time:             Sat 23 Nov 2024 02:19:50 +0000
Manifest this update:     Sat 23 Nov 2024 02:19:50 +0000
Manifest next update:     Sat 30 Nov 2024 02:19:50 +0000
Files and hashes:         1: GumvOruKc-8m-TT5izpsq5UXrKY.crl (hash: gDZJy/ojCr1uAh314TTyKS1JqGSe393aKGtPR1kIvcA=)
                          2: 7370EDA48A8D11ED942E6F74C4F9AE02.roa (hash: 2C7sMzeq2LtkwEJGz1AXTQjxV1r/E9/E1qwgnOjFR/o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl
                          rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6
        Validity
            Not Before: Nov 23 02:19:50 2024 GMT
            Not After : Nov 30 02:19:50 2024 GMT
        Subject: CN=67413bc6-20af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:1d:76:a6:ee:3a:f3:14:19:08:a7:f7:47:
                    ab:6f:5c:c6:38:eb:bd:25:99:43:4e:02:bc:20:0f:
                    d2:d4:5e:0a:6f:be:30:c2:c1:a2:a5:41:47:e0:d7:
                    ff:61:6e:15:33:c5:85:14:27:b0:cc:5f:44:5c:53:
                    9c:15:74:89:85:cf:11:3b:15:42:02:bd:30:d2:e1:
                    3d:09:6d:35:bf:d6:99:8e:1f:a7:67:8b:de:c3:9b:
                    a8:f7:91:70:7b:3b:37:ba:7e:4b:e8:ce:c2:5b:f1:
                    59:36:d1:7c:34:ed:46:22:68:b9:b2:47:ec:ce:a9:
                    ff:fe:de:00:8c:59:1d:1d:ca:8c:ca:53:38:25:82:
                    d4:fb:fd:c0:d9:19:04:5f:c1:5e:c6:99:f9:b1:0d:
                    7f:9a:22:8c:13:b4:ec:82:b5:28:93:8b:f9:3a:88:
                    39:c9:8c:f1:1b:57:af:fc:cb:52:71:22:1a:7c:b3:
                    0c:23:7b:c9:56:a3:41:75:2d:22:d3:0e:fa:92:d2:
                    7d:3e:d5:ad:d6:79:be:03:1b:b1:2b:d8:c0:47:33:
                    61:d7:97:96:3f:71:ef:97:5f:da:16:d0:cd:96:ef:
                    35:cd:f0:4d:2b:79:67:d4:fd:e6:a8:94:b2:a4:bb:
                    57:c2:0d:cc:f8:10:d2:c9:6a:38:67:c4:2e:74:64:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:16:18:79:3F:5E:71:B7:12:6E:4F:C5:33:25:9B:C2:FB:3E:B9:28
            X509v3 Authority Key Identifier:
                keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5d:e5:e5:25:92:a9:0d:1d:91:a7:5e:17:c1:2e:90:76:5a:
         43:9e:6c:1c:79:b4:d0:c7:49:d9:e1:e7:64:71:ea:3f:08:49:
         66:b9:1f:21:ee:99:28:9f:81:6a:93:a4:54:aa:59:67:d9:86:
         b6:a6:55:8d:17:da:99:93:5f:cd:bb:3e:67:1e:16:b0:2c:53:
         5e:29:e2:cc:f4:f5:15:eb:75:6f:19:b4:cb:aa:9c:01:6a:f1:
         35:fc:85:5d:23:eb:71:68:91:33:e2:5f:d8:8e:50:f5:05:04:
         8d:1a:8d:16:08:f8:c1:1d:f8:4f:4e:f2:f0:7e:70:8d:f8:39:
         85:c1:2e:92:d3:71:32:ef:cc:0f:37:ea:d6:83:0a:fb:5c:25:
         4d:45:36:23:83:02:48:58:a1:59:54:bf:49:9c:03:d5:47:a5:
         35:30:e8:c3:5f:4c:9a:02:4c:46:a4:27:63:c7:28:f9:51:2a:
         28:21:96:4a:32:ff:77:e0:8b:17:a8:a6:ee:93:4f:e8:73:bc:
         b3:6b:c3:60:09:a1:ac:43:8e:4b:7d:6e:c7:e0:b6:ea:de:04:
         75:7c:94:cd:01:8f:30:3a:a6:b0:97:d7:df:a0:3a:ac:5e:af:
         ee:fa:e3:02:93:9e:fe:a2:51:b7:4e:d6:d3:f2:91:be:4b:70:
         06:fa:ee:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org