Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
File:                     83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json)
Hash identifier:          ZWGjHMHSMD4ohWFCFTC//9+AsTHeudguSBhgn72Zqtw=
Subject key identifier:   23:2C:E2:64:CC:38:6C:FE:07:B8:C5:7F:4D:A0:58:13:78:16:B9:24
Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
Certificate issuer:       /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
Certificate serial:       091F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
Manifest number:          0918
Signing time:             Fri 22 Nov 2024 20:05:39 +0000
Manifest this update:     Fri 22 Nov 2024 20:05:39 +0000
Manifest next update:     Fri 29 Nov 2024 20:05:39 +0000
Files and hashes:         1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: FRkS8Y8l1iiQWH5mKUbibwkKkSHOymF0TA/71xY3S+o=)
                          2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: ktdvmQq3O7BY6N2LknvoDnkjfa5kYL37ZMNO2GZxjaQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2335 (0x91f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
        Validity
            Not Before: Nov 22 20:05:39 2024 GMT
            Not After : Nov 29 20:05:39 2024 GMT
        Subject: CN=6740e413-6c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:87:b7:83:a3:45:56:9f:fb:98:61:30:ce:8b:
                    13:fa:fe:38:6c:b0:15:32:8f:50:68:ca:86:fa:60:
                    98:1d:59:0e:54:89:0e:cb:52:d6:90:fd:d2:92:12:
                    41:d9:9b:6d:8b:c7:66:a3:25:5c:95:79:6b:85:98:
                    a1:e1:84:2a:bf:2b:3a:2e:ca:c5:07:fe:f3:e2:32:
                    8c:62:44:83:ae:f4:7f:74:2a:a8:97:b4:7e:37:b4:
                    95:90:7c:b1:fc:b0:98:a8:e4:ec:8f:c5:41:3c:19:
                    04:22:5d:80:06:29:3f:2e:3a:c5:2c:a0:70:63:51:
                    52:39:3b:28:bc:8f:c2:0a:24:41:ef:32:e7:1e:3c:
                    cf:5a:7a:53:a7:c8:ae:93:ad:cb:04:59:91:82:cb:
                    40:15:10:62:98:27:da:4d:8f:4b:2a:50:ca:e1:38:
                    9f:12:a8:28:20:f4:3c:3d:16:02:f0:dd:7c:af:5a:
                    88:04:a6:cc:2a:e8:ad:0a:ed:2c:38:86:20:15:21:
                    ca:59:79:54:4c:dc:9d:ff:38:3c:47:5e:0b:89:be:
                    3a:80:c8:bc:15:00:7e:d1:02:69:f1:4f:c4:8a:2a:
                    e5:16:06:46:c2:79:0d:10:0b:e4:31:cd:ad:05:8a:
                    60:3c:6e:87:e5:86:ce:20:ca:cc:70:cb:26:c2:42:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2C:E2:64:CC:38:6C:FE:07:B8:C5:7F:4D:A0:58:13:78:16:B9:24
            X509v3 Authority Key Identifier:
                keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:78:8d:32:dc:50:99:1a:ff:d5:19:49:63:3c:ec:cd:e8:8e:
         47:74:d9:2a:96:c0:d9:01:28:a0:c5:7f:4e:c6:bc:c2:aa:ce:
         bc:71:8d:3f:9a:20:27:b6:37:c8:11:b6:f4:bb:53:d6:cd:4a:
         58:02:94:16:bd:a1:54:b4:bc:1b:11:e4:65:f5:a1:28:53:0b:
         b8:70:26:81:b2:1b:00:4a:1d:67:65:9b:a6:99:7f:b5:05:94:
         46:45:a1:53:47:f9:28:09:48:50:30:d3:2d:25:29:8c:d5:61:
         bc:82:f8:32:53:28:04:c7:5e:1c:6c:36:7f:46:6a:2b:db:99:
         57:2a:62:cb:2f:b2:b7:80:0a:32:58:b2:78:b4:f5:66:a6:46:
         71:68:e2:3f:39:4e:cd:8d:cf:51:49:d2:61:ab:3c:8f:62:4c:
         e8:6f:99:ab:06:13:f0:58:46:66:05:b4:10:85:2d:85:73:b7:
         ed:62:39:be:26:9e:21:84:92:fc:51:f5:b5:f6:b6:38:4e:76:
         f4:8a:98:6e:a1:64:75:3f:ff:35:73:83:4f:cc:ef:38:53:05:
         e1:ac:81:25:7a:0d:8c:2b:b9:fc:9d:38:41:ad:c2:ab:91:78:
         e9:9c:8d:45:d7:11:7f:17:ec:59:3e:37:15:31:f2:23:1c:c3:
         a2:c2:83:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org