Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
File:                     SLmUWYf2drRs7T3hKEmoo49AaLU.mft (raw, json)
Hash identifier:          Bo44I0OBBw9/oLQk5DI/sDA5UZNAoBwVR79jOwB9KLw=
Subject key identifier:   86:56:F1:FA:A0:16:62:62:A7:B8:26:48:3F:AE:FD:EA:F2:FF:00:54
Authority key identifier: 48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5
Certificate issuer:       /CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5
Certificate serial:       078E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
Manifest number:          077B
Signing time:             Fri 22 Nov 2024 20:59:58 +0000
Manifest this update:     Fri 22 Nov 2024 20:59:58 +0000
Manifest next update:     Fri 29 Nov 2024 20:59:58 +0000
Files and hashes:         1: SLmUWYf2drRs7T3hKEmoo49AaLU.crl (hash: sBWEGpE2g3/m/GzWGJH1zIcIg+TqYrGM3ptVnYB8Ev8=)
                          2: 37A46070F6F211EA922F482BC4F9AE02.roa (hash: ulbSY28XJFQuMyMRnX4bdktKm/xcu3tL1ZMG0ew7F2I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1934 (0x78e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5
        Validity
            Not Before: Nov 22 20:59:58 2024 GMT
            Not After : Nov 29 20:59:58 2024 GMT
        Subject: CN=6740f0ce-f5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:02:1f:a7:8f:4b:35:85:a8:7a:b5:30:d5:
                    4b:b5:1a:47:94:d0:60:04:34:9c:31:07:63:c3:41:
                    80:92:85:b8:92:f5:2d:23:10:7a:c8:b8:5b:8b:4f:
                    74:d0:3b:4f:4c:4c:bf:33:22:4e:2e:5e:8c:3a:ed:
                    68:38:75:6f:c8:b3:4e:9d:00:ca:28:3b:8f:88:6f:
                    41:c6:65:df:43:5c:bf:9f:1e:35:cf:97:cc:e7:92:
                    25:02:2e:1b:9e:ed:df:5f:6b:55:b1:aa:a3:0a:55:
                    d5:79:c4:e6:27:2d:60:80:6a:53:f5:a7:b8:f6:2b:
                    ac:8f:69:63:7b:97:7d:1e:5a:1b:ab:18:df:37:8d:
                    50:7a:b4:27:d8:2d:f4:9f:87:80:3c:0b:5f:a7:dd:
                    0a:6d:76:b9:c8:f8:0e:14:bf:ae:22:cd:a1:c7:96:
                    e2:e3:9c:9b:0e:e4:15:05:dd:70:de:65:13:a0:dd:
                    e5:8a:ae:ea:6b:cc:b4:e8:df:7d:c7:13:1d:b2:3c:
                    01:d1:fd:09:72:e3:3f:bf:d0:b8:8b:0f:cc:cd:82:
                    21:d3:10:8c:25:66:4b:af:57:47:ff:54:e8:67:c6:
                    02:aa:11:3d:a5:10:9c:3d:e7:d7:3f:a0:d9:68:10:
                    0c:1e:7c:2c:4d:dd:2e:90:d1:c7:ef:a4:95:55:7b:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:56:F1:FA:A0:16:62:62:A7:B8:26:48:3F:AE:FD:EA:F2:FF:00:54
            X509v3 Authority Key Identifier:
                keyid:48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c2:fd:73:6c:d8:1d:25:3f:82:99:2f:d1:44:b4:fc:a4:8a:
         8c:e1:80:59:20:c5:07:05:e3:d3:5e:48:32:22:cf:ea:71:9a:
         c9:e6:46:c3:62:ab:3b:5b:ca:e1:6a:10:5a:2d:14:ca:ac:73:
         81:42:c0:8c:6e:94:31:a1:e7:88:1c:87:b6:f0:af:bf:6d:eb:
         eb:74:ac:51:c7:23:79:03:72:46:4a:f9:b7:d2:db:5b:7a:cc:
         c0:be:fb:79:fa:68:2b:05:5b:bf:75:d4:53:d8:c7:88:3b:58:
         c8:f1:b7:92:bd:18:1f:c4:5d:bc:53:de:95:d7:73:d9:34:5f:
         43:11:9d:1d:b9:53:45:cf:a1:bf:af:f8:a1:69:b0:26:05:67:
         40:77:0e:55:c5:7a:ce:68:94:f8:64:ea:a3:3f:73:96:70:c5:
         82:02:fc:37:47:7f:55:04:c8:4c:f2:ce:7e:d3:8e:86:06:17:
         7d:96:24:11:2e:8a:ec:ae:d7:ce:ed:c6:c8:b9:48:c1:9a:c1:
         1f:8a:b2:5e:05:45:42:b8:1a:1d:c0:2d:92:11:f5:19:55:cb:
         38:9f:a9:d4:60:99:d6:62:7d:20:5a:f7:d7:b3:c9:a0:dd:3f:
         d8:1c:d0:7b:b0:cc:34:e9:8c:ee:83:18:b7:3c:44:28:16:2f:
         b8:ae:eb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:48 2024 by rpki-client on console-ams.rpki-client.org