Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
File:                     -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json)
Hash identifier:          WT7GOrOQgfoJsvf0XatHPs2KbGp2kR76aqcy3Ms9pRI=
Subject key identifier:   1A:59:7B:1F:D6:FE:DA:0C:61:F9:20:F9:F9:0D:C6:4C:23:B9:53:35
Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
Certificate issuer:       /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
Manifest number:          0179
Signing time:             Sat 23 Nov 2024 02:06:06 +0000
Manifest this update:     Sat 23 Nov 2024 02:06:06 +0000
Manifest next update:     Sat 30 Nov 2024 02:06:06 +0000
Files and hashes:         1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: g+mA5wDTMuRnwg9R5aThPmDXz5BCgttARHYkf/L+MGo=)
                          2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: mfCo7xBHkX9UIyrOsrP0XEhPqQke0cTzgybKkz4msYM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
                          rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
        Validity
            Not Before: Nov 23 02:06:06 2024 GMT
            Not After : Nov 30 02:06:06 2024 GMT
        Subject: CN=6741388e-31ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:74:b9:1b:2d:da:b0:f0:ca:8c:35:61:0d:
                    0f:de:e9:4c:df:1c:21:b7:9b:ce:c6:6e:49:55:13:
                    a8:0a:63:ae:48:76:f8:26:53:a6:3c:54:eb:b8:74:
                    2c:96:24:21:b8:aa:e7:78:2f:af:16:cd:62:74:8f:
                    8f:f1:b4:f7:b2:eb:f4:97:da:65:7a:ae:68:6b:a1:
                    4b:cf:bc:70:60:29:0d:22:01:16:ab:fa:b6:1e:73:
                    7f:34:17:70:55:01:74:0d:e5:b7:fb:24:2a:6f:ce:
                    cc:db:36:88:6f:dd:89:bb:de:50:fc:7a:f5:91:02:
                    06:82:28:7f:58:41:3f:57:a9:48:e1:c0:ea:e3:ae:
                    a0:83:2b:a5:53:c7:e5:b3:7a:09:90:b6:e8:cc:a8:
                    2f:50:6e:92:4d:a3:49:b6:df:6c:7c:c6:88:0c:b1:
                    e0:f6:d8:39:4b:c9:0c:f1:16:a0:67:20:34:67:70:
                    e8:fc:4c:f8:25:25:0b:19:e9:43:2c:b5:ef:0b:65:
                    53:2e:05:71:5a:53:1a:49:55:d3:ef:26:ee:c6:5d:
                    f1:47:1e:55:b6:7d:e6:38:a9:cb:6e:ac:54:71:4d:
                    2b:a1:ae:ce:03:bb:61:4d:9f:fc:40:f7:9b:dc:3d:
                    41:de:f6:ef:70:f3:ed:17:2b:d1:4c:8c:b1:75:55:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:59:7B:1F:D6:FE:DA:0C:61:F9:20:F9:F9:0D:C6:4C:23:B9:53:35
            X509v3 Authority Key Identifier:
                keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:9f:d4:5a:66:57:54:a9:15:82:66:19:2d:cf:eb:a2:23:
         38:ac:ec:34:b9:39:5f:24:88:bc:6d:d0:d5:a1:04:be:96:ea:
         f3:9c:cc:02:02:f0:4b:7d:70:08:55:f6:0b:b8:55:8a:05:5b:
         20:f0:fe:3b:60:53:9e:cb:20:e3:f0:92:85:f1:02:3a:21:0a:
         f3:55:ac:c4:57:4d:0d:9f:07:d7:86:b3:a0:14:a4:45:38:5f:
         28:2d:af:2b:c6:7c:08:93:16:a6:cd:5f:bf:d6:07:3d:f3:62:
         f0:94:df:4e:99:ef:f3:f2:28:1c:e6:3b:a6:8e:7d:b1:de:32:
         a5:4c:cd:7e:17:f3:e9:e5:37:3c:c8:72:e3:2a:9b:9a:0f:ea:
         db:79:d9:fc:aa:68:7b:da:af:e9:3a:bf:59:50:23:97:07:45:
         63:dd:62:ec:42:cb:e1:9f:63:66:fa:1e:c8:e2:3e:48:45:51:
         33:6c:5c:45:1c:20:db:b5:e4:9a:55:3c:a3:f5:24:87:3b:76:
         04:dc:b8:6e:cb:ac:04:2d:f5:a3:92:93:e0:c2:e0:8e:d5:21:
         c5:03:82:76:32:b9:a4:61:4f:85:6f:30:e2:2b:d9:3e:9d:88:
         85:3f:a8:43:dc:45:7f:3f:cf:5d:49:05:66:eb:29:21:b4:4e:
         b2:63:f1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org