Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
File:                     0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft (raw, json)
Hash identifier:          bUKwMLn4GOkFbbKDAI80T4aoCan81/CgHMgt9mQHuWs=
Subject key identifier:   B8:21:0F:95:9E:B3:F7:5E:6F:31:AA:57:C0:33:3B:07:6F:18:46:EF
Authority key identifier: D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F
Certificate issuer:       /CN=A91139AB/serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
Manifest number:          07B8
Signing time:             Fri 22 Nov 2024 21:31:22 +0000
Manifest this update:     Fri 22 Nov 2024 21:31:22 +0000
Manifest next update:     Fri 29 Nov 2024 21:31:22 +0000
Files and hashes:         1: 0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl (hash: FabbAzgGT2IyGjBrZjG9Awrbghd6a9Tsf0I2az6PWgk=)
                          2: 5428E56AF53911EEB8A4592AC4F9AE02.roa (hash: V0jvv16GxWWSgYF6je4xv4QElPKOl/7nA+3XTVSMXTs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl
                          rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91139AB/serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F
        Validity
            Not Before: Nov 22 21:31:22 2024 GMT
            Not After : Nov 29 21:31:22 2024 GMT
        Subject: CN=6740f82a-fd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:74:cb:ee:47:2a:03:10:b8:87:97:d0:af:
                    06:0a:0c:27:1f:2a:86:25:b6:6f:5c:90:f3:a6:d7:
                    34:a5:df:a8:39:86:43:bb:57:60:94:aa:3a:a2:72:
                    e0:6a:70:6f:4a:14:6f:4b:98:b7:96:f9:dc:f0:c3:
                    63:aa:a0:fa:62:f6:df:c6:f2:f2:cc:43:61:44:ad:
                    5f:26:ef:19:84:02:df:93:86:09:c2:d4:aa:e9:7c:
                    61:48:dd:ee:13:46:92:25:07:ce:a8:b7:2f:5b:30:
                    c3:e7:f1:a0:2f:41:33:5d:8f:c7:78:e4:73:45:2c:
                    40:67:dd:14:ef:f8:a3:15:72:da:d5:b7:ec:dd:6c:
                    42:f7:6b:da:14:4a:3d:9f:24:cc:dc:4e:2b:c6:07:
                    09:d3:b4:22:fb:c1:4b:79:84:3c:f6:00:6a:2e:da:
                    cc:69:fc:59:5c:8b:e3:1f:56:07:bd:1d:0e:b4:01:
                    06:46:dc:c2:64:72:fa:19:29:1d:39:81:13:87:c7:
                    0b:d5:ba:d5:e5:c6:d6:cb:4b:90:f5:6e:0a:1b:1a:
                    dc:0d:93:ef:00:88:35:d7:59:6b:49:6c:dc:91:13:
                    a1:f9:51:28:77:a5:4a:33:18:77:95:a0:b8:ab:60:
                    7f:1b:0b:3e:d3:6f:93:56:02:b1:6e:6d:62:dc:4f:
                    53:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:21:0F:95:9E:B3:F7:5E:6F:31:AA:57:C0:33:3B:07:6F:18:46:EF
            X509v3 Authority Key Identifier:
                keyid:D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:88:ac:60:a7:07:38:fa:35:c0:5c:62:48:ae:ca:e4:76:
         6a:39:fe:3d:a7:24:82:9c:d9:f8:28:9d:4d:e9:d3:59:f1:90:
         3c:61:e9:89:ec:3c:42:dd:15:f7:cc:92:50:97:bc:58:62:f1:
         a3:4b:27:c3:82:60:70:94:78:3f:5d:55:6e:0e:df:fc:3e:a6:
         55:99:2d:81:f7:08:78:92:a1:d1:f1:07:46:b5:10:92:aa:ea:
         c1:a4:27:b5:74:26:f8:e9:13:04:64:5e:ef:cb:07:4d:8e:93:
         01:1b:65:7b:9f:78:62:d8:bc:7a:4d:36:86:9e:67:05:fa:34:
         bf:e8:fb:bb:55:40:db:32:56:4b:55:f6:35:8e:1c:68:5e:55:
         4a:9a:3e:12:b6:8c:d7:c6:63:02:d5:cf:40:fd:6a:f2:f2:47:
         df:e5:19:a6:ba:28:07:84:fe:16:55:d8:47:6c:0e:30:48:22:
         74:46:38:3e:6d:4d:1e:8a:36:39:4d:0b:33:80:24:89:b0:33:
         d2:5b:e6:34:09:5b:50:6f:d7:1d:05:55:74:49:fa:ae:de:98:
         64:c6:85:f2:9f:73:dc:f7:d1:17:03:37:7f:a9:f6:c4:61:20:
         00:99:90:f5:5c:50:f3:f1:da:d6:c7:20:70:7d:d9:dc:8c:a9:
         9f:c5:bb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org