Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
File:                     _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json)
Hash identifier:          pXmxloxSYJg57tKP85zQxRnrHFuoU0QbxRxHEjkceGU=
Subject key identifier:   53:D6:3C:78:4A:41:E1:9A:FE:24:FC:38:AB:AA:6D:AA:AA:E6:07:F0
Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
Certificate issuer:       /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
Manifest number:          C1
Signing time:             Thu 21 Nov 2024 04:05:28 +0000
Manifest this update:     Thu 21 Nov 2024 04:05:27 +0000
Manifest next update:     Thu 28 Nov 2024 04:05:27 +0000
Files and hashes:         1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: QNgB7Crftkt65kuLtVhL1nzKT3e1cEriL0GJJfAxLS8=)
                          2: AA02862E890C11EE87862551C4F9AE02.roa (hash: If7gROK16zr/SZJjbOJJFTa1P8/BQcHi3NBwMSreHp8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
                          rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
        Validity
            Not Before: Nov 21 04:05:27 2024 GMT
            Not After : Nov 28 04:05:27 2024 GMT
        Subject: CN=673eb187-e440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bb:53:b0:7a:0c:eb:19:b3:ab:f9:0d:40:b0:
                    23:47:a8:88:77:0f:05:20:54:65:2e:9d:a6:26:12:
                    d8:83:85:b5:5a:5a:92:e8:85:87:3b:bc:2d:02:bd:
                    f3:88:a4:0b:85:48:28:c8:cd:d2:30:45:f3:4e:4c:
                    53:da:1d:99:bd:a2:d2:f4:f3:da:d5:0d:65:8f:a6:
                    bd:4f:74:87:29:63:80:10:e3:6c:9b:2e:9b:67:e6:
                    c4:70:f5:46:d5:c3:70:0c:ae:8e:e0:44:d0:fd:eb:
                    b8:22:30:d2:af:fd:4c:99:82:81:cd:76:50:9e:45:
                    9f:32:22:38:e7:42:cf:c7:cc:d1:1b:4e:62:02:77:
                    31:82:fa:46:d7:ba:c7:b7:5a:e9:00:66:d9:98:97:
                    71:b8:6e:be:2e:ca:32:2f:92:e4:bb:df:e4:df:ea:
                    fe:8f:a1:e6:09:b6:3b:9a:54:f3:06:32:fe:ff:1b:
                    66:45:0e:18:c5:40:c9:3e:ca:e1:ae:d2:69:65:bf:
                    07:48:20:11:d5:67:2e:11:23:b9:37:1f:67:e7:71:
                    03:ad:5b:48:dd:bc:77:38:80:1c:e3:7c:98:ca:fe:
                    51:89:55:36:8b:61:3f:68:c0:fc:9e:93:3c:9d:5a:
                    3b:c2:63:ef:20:54:a9:2a:3e:d5:6a:a3:ca:ef:33:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D6:3C:78:4A:41:E1:9A:FE:24:FC:38:AB:AA:6D:AA:AA:E6:07:F0
            X509v3 Authority Key Identifier:
                keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:01:9d:43:52:43:5b:f8:b3:a2:42:5e:db:83:de:c3:17:cf:
         e9:76:51:34:65:d1:53:ac:72:6f:ea:c3:77:1a:fb:22:db:e6:
         5f:93:40:c3:c5:ec:0e:19:dd:97:93:03:a0:12:9c:94:d3:65:
         dc:fe:1a:00:b3:82:56:7f:a7:f1:5a:22:18:82:e8:53:06:17:
         53:0c:bd:e3:46:10:49:26:a3:ed:b9:51:8c:3e:b8:6e:f7:2d:
         f4:04:b0:eb:1a:50:ff:86:87:6d:6f:d8:78:ab:42:36:4e:76:
         54:b6:82:1a:7c:d4:d0:a3:c9:b9:99:81:3f:5b:90:2d:ad:4c:
         e7:2c:3d:a0:d7:2e:bf:7d:c1:2e:b1:07:42:f1:c0:c2:40:93:
         6f:fc:0e:6d:72:06:58:3a:1a:b0:1f:4a:00:b7:29:78:13:ee:
         8a:83:97:06:92:38:37:e2:d9:b6:0d:ff:29:c1:8e:69:86:66:
         a1:fc:16:d2:46:9c:8c:28:a4:2e:83:7a:6e:6b:48:f0:ec:fe:
         13:c1:4c:87:c0:e3:47:90:15:ef:7c:4d:fb:6d:66:6e:9d:6a:
         76:20:8d:92:48:62:1f:cc:eb:bc:ec:4f:bf:4a:aa:61:31:e8:
         1b:46:4f:5a:2f:cc:ca:b7:80:f9:2b:04:78:2f:24:00:ca:1b:
         fe:c8:f3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:52 2024 by rpki-client on console-fra.rpki-client.org