Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft
File:                     eT80tql6t1A1WBv90ICDiTOrPwM.mft (raw, json)
Hash identifier:          NuQq/qXnS+OSMseYVCbqamykrJJ79yUGVJlJ2HKtcmg=
Subject key identifier:   26:55:0E:DC:C3:83:0A:2D:D5:07:D3:AC:5E:41:AC:0E:F1:6F:34:1B
Authority key identifier: 79:3F:34:B6:A9:7A:B7:50:35:58:1B:FD:D0:80:83:89:33:AB:3F:03
Certificate issuer:       /CN=A91EB9FC/serialNumber=793F34B6A97AB75035581BFDD080838933AB3F03
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft
Manifest number:          3B
Signing time:             Sat 23 Nov 2024 05:27:38 +0000
Manifest this update:     Sat 23 Nov 2024 05:27:37 +0000
Manifest next update:     Sat 30 Nov 2024 05:27:37 +0000
Files and hashes:         1: eT80tql6t1A1WBv90ICDiTOrPwM.crl (hash: fmcOvjpaUygoUpGChGPi49Ej0KKhCWdnmxBjW6tUWNI=)
                          2: 20E7CCE2595D11EF90E23670C4F9AE02.roa (hash: RHyAoxJQkvm3rwIX0Ie7pVxPWutbacOCPpnryVxRc/c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.crl
                          rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB9FC/serialNumber=793F34B6A97AB75035581BFDD080838933AB3F03
        Validity
            Not Before: Nov 23 05:27:37 2024 GMT
            Not After : Nov 30 05:27:37 2024 GMT
        Subject: CN=674167c9-ce29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d8:21:95:b7:94:6f:4c:d1:85:d9:ab:fe:3e:
                    c6:cc:5e:c2:03:a5:43:d6:bd:ba:5d:77:fb:fa:1d:
                    00:68:db:ce:1a:1c:1b:38:fa:11:96:0d:a7:d0:4b:
                    3c:24:12:35:65:0e:b9:2f:f2:1f:75:dc:6d:b7:3d:
                    94:8a:3d:43:7e:02:65:d6:fe:10:cf:0d:3e:41:d9:
                    4b:3d:a3:52:21:8d:4a:49:87:f7:4f:b2:cf:07:09:
                    25:3d:46:97:4b:66:25:16:b3:09:c8:c1:5d:48:a6:
                    c1:ab:c5:4c:33:57:e4:fa:fc:13:91:89:0b:80:47:
                    7f:71:92:35:65:7c:b5:75:33:6f:68:26:57:12:0c:
                    d8:64:e8:23:d9:bc:22:ab:2e:ce:09:f7:e5:a9:bc:
                    7a:c0:6e:ec:2d:56:4a:e2:18:be:e5:ac:bc:50:0f:
                    79:48:4d:dd:ea:eb:22:1a:af:b7:d8:b5:52:cb:51:
                    29:d8:b6:d9:81:19:ea:34:48:26:0f:9c:07:cf:14:
                    5a:5d:c0:f7:9b:0b:b7:16:93:bd:e4:3e:df:a7:6c:
                    26:89:5b:db:81:79:a9:6d:08:b1:42:24:da:77:eb:
                    50:41:94:c5:47:5f:8f:e9:7a:22:5b:27:23:d8:87:
                    c3:ea:9c:32:85:8a:73:e8:6d:aa:7b:a9:2f:72:53:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:55:0E:DC:C3:83:0A:2D:D5:07:D3:AC:5E:41:AC:0E:F1:6F:34:1B
            X509v3 Authority Key Identifier:
                keyid:79:3F:34:B6:A9:7A:B7:50:35:58:1B:FD:D0:80:83:89:33:AB:3F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:71:59:12:d0:75:9a:00:9b:bd:3a:86:93:36:3e:be:11:f4:
         bc:dd:27:92:04:a6:d4:d5:8f:18:b3:77:3f:eb:ff:45:4e:3e:
         37:1f:e6:60:47:84:3e:87:9d:70:27:fa:17:4f:bb:22:dc:06:
         68:22:12:66:5f:f0:ae:86:9c:09:a4:14:04:60:61:90:42:ff:
         4c:9b:eb:22:ed:f6:ff:45:0b:c7:98:a0:39:a1:6f:34:a9:d3:
         07:0d:0c:5c:96:16:56:ad:ad:a0:a6:73:79:87:16:2f:3a:0f:
         b9:02:66:85:23:51:c0:01:d1:20:8a:59:e2:0b:c9:1a:d0:b4:
         56:2b:15:c5:6e:e4:ad:39:42:d1:1f:66:b4:c4:5d:f7:46:fb:
         d0:e8:39:6f:63:24:1b:4a:b6:a7:5a:ea:6f:5f:58:aa:1e:9e:
         d2:af:b4:d2:f3:0c:87:a8:85:c0:9e:c8:2d:be:84:ba:e9:f1:
         28:f9:b9:29:6f:bc:e4:e7:5d:53:6c:45:3f:cc:26:7a:fb:c2:
         6b:0c:01:73:72:0b:93:7e:d0:f5:95:2f:40:24:8e:a6:b4:18:
         54:ec:e7:9e:d6:c1:95:e9:3d:12:4d:6f:20:88:d3:bf:61:40:
         9d:56:bc:9d:3b:9c:fe:2f:e9:d3:0e:59:b6:28:e5:95:4a:ef:
         a1:b5:47:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org