Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
File:                     njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json)
Hash identifier:          aHgckbGl6xW9Qm13vdL3IN/WfwUVzfeVthH3z4gs+tw=
Subject key identifier:   E5:AC:8C:8C:C9:E9:7C:E3:ED:37:25:C6:DE:10:0A:C3:4A:3E:27:C8
Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
Certificate issuer:       /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Certificate serial:       04EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
Manifest number:          04E7
Signing time:             Fri 22 Nov 2024 23:16:43 +0000
Manifest this update:     Fri 22 Nov 2024 23:16:42 +0000
Manifest next update:     Fri 29 Nov 2024 23:16:42 +0000
Files and hashes:         1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: IpEm2D8Ph7QCzuTkSZ3divd8fPsS93wXRyFq5UlAwKI=)
                          2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: Pfjb1wm6jDOim3eSfbu3Z5HUwd0Kah9HIhgDBWP9f4g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl
                          rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
        Validity
            Not Before: Nov 22 23:16:42 2024 GMT
            Not After : Nov 29 23:16:42 2024 GMT
        Subject: CN=674110da-5cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:bd:c2:e4:f6:31:1c:73:27:60:e2:c7:20:
                    09:61:7f:19:14:1c:74:ac:97:86:79:c0:0a:77:29:
                    70:4a:35:d1:82:03:6c:3e:1f:e6:55:48:b0:fe:a8:
                    fe:e2:8b:6b:0d:62:ea:82:ed:67:e7:e3:f7:91:5d:
                    95:25:5d:c3:72:05:89:42:53:20:1a:04:7a:e3:4d:
                    26:81:df:c0:9a:84:e0:50:ad:66:b1:62:06:94:bc:
                    3f:c7:42:3f:ab:db:64:6e:a0:65:44:e8:2c:f3:01:
                    8e:83:05:7d:1f:9f:37:20:d1:73:c0:63:23:e7:3a:
                    4f:cf:a6:16:97:f5:1a:cf:16:50:11:62:f0:5e:0f:
                    7f:51:6d:fd:0f:25:87:fb:c5:f7:cb:47:ff:65:76:
                    fc:09:3d:7b:2f:8b:12:63:98:b5:02:9b:47:c9:fe:
                    14:d6:dc:96:16:c4:4f:48:8b:13:5f:34:63:db:e1:
                    49:28:3b:5c:07:28:a9:3e:1e:f6:2c:db:7f:5b:0d:
                    e4:c8:18:08:24:56:76:72:19:78:50:40:2f:a3:b1:
                    0a:ea:fe:3b:dc:2f:6a:64:c5:23:80:02:0e:66:3d:
                    d6:e8:67:28:7a:a0:4e:3d:e4:00:ae:c0:7e:4e:11:
                    a3:2c:a1:66:7f:db:fb:77:c3:29:e1:f9:f4:4a:65:
                    a7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AC:8C:8C:C9:E9:7C:E3:ED:37:25:C6:DE:10:0A:C3:4A:3E:27:C8
            X509v3 Authority Key Identifier:
                keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2b:7b:9a:88:e8:96:9d:c6:69:05:cc:1a:cf:10:87:37:cc:
         40:ff:93:31:d2:14:db:bc:72:3f:74:bb:17:c9:50:23:fe:f7:
         51:37:f1:60:50:63:2c:19:12:11:2e:c5:2c:56:b8:05:84:46:
         ce:1b:de:e3:67:b1:6e:c2:d7:3f:a7:21:48:9e:58:cb:12:b1:
         90:46:f2:3b:2e:24:4c:cf:db:33:c5:f9:12:2f:f1:19:68:64:
         22:8c:b7:ee:1e:45:33:e8:30:29:a7:70:29:86:c7:bf:64:67:
         0e:d7:4d:73:54:ba:a2:05:4e:42:37:f0:27:c1:59:b4:ae:ec:
         c2:5e:cd:cf:5a:bb:c3:59:58:0d:94:33:f8:f8:03:e1:30:55:
         b0:83:ab:76:64:b5:5c:ae:c6:bd:2c:9b:5e:98:46:de:21:c5:
         23:e2:3d:00:bf:08:14:76:e0:4f:23:2a:72:38:00:5e:ca:ed:
         dd:32:20:96:eb:f7:4b:be:b8:1d:f0:34:94:b8:92:0d:05:c8:
         3f:94:b5:01:43:1c:ff:01:62:b5:51:f5:88:0a:bd:8c:b3:a2:
         8d:5c:ad:17:5b:cb:91:0b:8e:f8:fb:c8:1a:ac:ba:80:65:47:
         f3:d8:2a:78:55:67:04:96:89:a5:71:3a:32:d8:19:3e:b0:05:
         f0:8b:99:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:34 2024 by rpki-client on console-ams.rpki-client.org