Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
File:                     eameEjE6dnHw2VkHDVD_70tSVSU.mft (raw, json)
Hash identifier:          PzW/q0MXEzID6rStd35A3++2o9+PyNiUxh/WgfE+uss=
Subject key identifier:   A3:A3:70:7D:34:20:D2:F9:64:66:8A:3C:DD:9C:F8:87:CE:3F:50:DB
Authority key identifier: 79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25
Certificate issuer:       /CN=A91E3015/serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
Manifest number:          5D
Signing time:             Sat 23 Nov 2024 05:01:50 +0000
Manifest this update:     Sat 23 Nov 2024 05:01:49 +0000
Manifest next update:     Sat 30 Nov 2024 05:01:49 +0000
Files and hashes:         1: eameEjE6dnHw2VkHDVD_70tSVSU.crl (hash: pptc5DvcZaxztVxbZKynQd8LudTMBvS0KxK1K4VTdIA=)
                          2: 732ACDFA1C7D11EF95F4D214C4F9AE02.roa (hash: D54fzGr3XuP/sJMXmQZGHvGWo91QA4TjhHmNz0qmjV0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl
                          rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3015/serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525
        Validity
            Not Before: Nov 23 05:01:49 2024 GMT
            Not After : Nov 30 05:01:49 2024 GMT
        Subject: CN=674161be-8e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:d0:c6:70:30:54:09:67:e5:15:0c:09:b6:
                    2e:3b:87:73:6e:52:7d:33:9c:cd:da:77:53:49:19:
                    07:ef:25:0e:2a:57:d0:ed:51:4d:f4:48:69:1b:64:
                    22:76:e4:20:16:c7:9f:3c:27:8d:72:4b:73:6a:da:
                    00:10:2d:47:bd:4c:51:9b:93:41:85:91:87:9e:1f:
                    52:a1:4e:ee:cc:52:b6:ad:37:21:c7:71:df:36:50:
                    36:32:f2:f7:4a:50:12:3e:18:29:9c:53:71:3c:b2:
                    9d:ec:1a:98:49:17:e4:1b:06:aa:54:1f:2c:09:73:
                    14:18:fd:01:0e:08:84:17:34:88:ba:ca:8f:24:08:
                    e0:80:49:98:02:83:5c:5c:25:b6:c7:ec:07:d6:12:
                    e0:6b:22:27:3b:f9:2b:9c:6c:85:d4:f7:04:3c:f9:
                    30:17:dc:a1:54:ec:9f:e9:0d:fb:b7:7d:a5:e9:66:
                    1e:1d:3d:49:c5:0a:6b:17:e6:55:e3:08:42:51:5d:
                    31:b4:3a:ed:01:6a:a2:19:3f:a8:ed:1a:d6:e1:6b:
                    6e:56:96:bc:88:5a:e1:4c:7f:cb:c1:03:41:c4:71:
                    1a:e2:da:8a:d9:cf:cb:83:6c:fb:97:97:6e:3b:f7:
                    fb:c3:ec:d0:d2:bb:27:66:d9:24:04:e7:81:07:73:
                    06:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A3:70:7D:34:20:D2:F9:64:66:8A:3C:DD:9C:F8:87:CE:3F:50:DB
            X509v3 Authority Key Identifier:
                keyid:79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:27:bd:fa:82:21:e7:17:a3:23:95:f3:33:52:95:dc:cd:25:
         ba:c3:0d:d4:22:12:b7:6d:f1:1a:84:e6:8b:7a:22:c5:8e:d0:
         43:ae:76:9a:f8:a2:20:2e:04:1b:4d:00:85:e1:07:ea:e8:71:
         2e:9d:67:71:c9:9a:5f:69:95:dd:ae:b8:d3:c7:85:27:45:41:
         fd:03:ef:5b:b5:bf:2c:3d:6d:1d:88:75:cb:36:01:46:81:a9:
         19:4e:43:c2:49:bf:1a:88:56:52:10:65:10:d0:4b:da:6c:b0:
         d8:9c:4d:4d:00:7f:22:b8:b0:27:57:a7:f0:6d:60:77:fb:98:
         b0:ba:00:00:c8:50:2b:97:5b:35:22:6c:67:80:81:54:70:36:
         4e:14:26:2e:38:51:15:23:3a:40:97:27:84:59:80:1d:98:7f:
         9a:17:83:0d:3a:aa:3d:8d:2f:8f:91:c7:b0:09:20:3e:22:ea:
         ad:35:f2:d3:f0:94:be:9f:12:1d:c8:c5:44:52:b7:65:2e:4e:
         53:cf:ec:9f:f6:0d:56:23:9e:0c:bc:51:7d:13:df:01:66:13:
         94:b6:0c:f9:cc:cc:d8:e9:14:04:95:c5:8f:e3:96:08:44:53:
         bf:e8:98:f6:46:ee:ac:27:eb:f9:6f:cc:1c:d6:ed:a7:7b:a6:
         cd:53:0b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org