Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
File:                     7dan-nQ2Pn9jFksaB04JvojSPDU.mft (raw, json)
Hash identifier:          NKv6Sorpx1hFingpUtBjt8a1QJQpbv8+8YKeOjBfmko=
Subject key identifier:   D4:58:B4:45:48:54:C8:D2:3A:64:9C:07:FC:C3:3F:E6:BA:3A:45:0E
Authority key identifier: ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
Certificate issuer:       /CN=A911AB93/serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
Manifest number:          1E76
Signing time:             Wed 20 Nov 2024 16:04:20 +0000
Manifest this update:     Wed 20 Nov 2024 16:04:19 +0000
Manifest next update:     Wed 27 Nov 2024 16:04:19 +0000
Files and hashes:         1: 7dan-nQ2Pn9jFksaB04JvojSPDU.crl (hash: UnK/Vll+ogBWwmdJsq45M1N6kaV4c4EzLqAjJAVKsR8=)
                          2: 99596A0EB6C011EE857A8B6DC4F9AE02.roa (hash: GCEET+2JYJ9VCEsUJ4AImKOZQwdzydpwW21JOyc1aFY=)
                          3: 729C414EB69711EE8D11887CC4F9AE02.roa (hash: 59O262usbaBddiCuAPOTJvgNmHiSFNquAxY8D6+mQW8=)
                          4: 34545918BA0B11EE9FC74745C4F9AE02.roa (hash: rDNaE/vKw6lZwAV9wFMImDwc7J6mIh2/QNRmkhuzkQo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl
                          rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AB93/serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
        Validity
            Not Before: Nov 20 16:04:19 2024 GMT
            Not After : Nov 27 16:04:19 2024 GMT
        Subject: CN=673e0883-5f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:b2:09:4f:ff:62:83:5a:e8:b9:d1:3f:65:
                    36:6c:1c:e3:bb:1e:3c:54:16:70:63:d5:b6:d0:91:
                    44:a2:f3:05:c3:67:4f:6e:34:63:62:be:40:10:3f:
                    33:9c:12:14:eb:b2:24:38:f0:a7:6b:76:58:60:9e:
                    d3:6b:39:43:6d:1c:46:f6:8d:d8:55:13:96:d9:7c:
                    4c:85:61:2d:5d:54:b3:c0:d0:d8:9d:44:9a:b8:d6:
                    34:e6:33:3a:fd:31:f8:3e:a3:fa:01:31:e4:9c:ac:
                    42:90:73:92:09:00:d1:7e:91:3e:1c:a5:38:da:5a:
                    ea:0e:86:33:65:92:bd:78:ea:10:c2:23:77:c9:de:
                    6b:84:18:c2:fb:d9:4e:b5:41:66:44:35:5a:71:c1:
                    cd:a4:c3:9a:0b:30:13:86:24:53:fe:43:61:01:1a:
                    01:c7:90:af:0f:bb:ed:68:53:e6:e1:7c:c0:3a:9d:
                    b7:fa:76:04:9f:c8:d1:69:ff:85:42:de:ad:2c:d4:
                    52:d8:ae:f9:d2:a8:92:eb:38:64:df:28:4f:eb:bf:
                    e3:7b:95:de:8b:68:81:57:fa:b6:36:15:78:b8:39:
                    b1:c3:58:39:ab:32:a7:0a:c8:0c:13:af:4b:ad:65:
                    99:f9:d2:31:e5:28:97:e2:32:0c:16:ba:9b:76:43:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:58:B4:45:48:54:C8:D2:3A:64:9C:07:FC:C3:3F:E6:BA:3A:45:0E
            X509v3 Authority Key Identifier:
                keyid:ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3f:df:0e:d9:74:f6:89:61:16:ca:65:90:58:a8:36:8f:07:
         78:f9:0f:5f:55:44:f7:b5:61:11:bc:2a:66:fc:93:fc:1f:fd:
         8f:18:7e:1a:a6:fb:62:78:f9:70:4f:1d:3d:12:96:e7:4d:b9:
         f7:83:b4:13:06:b0:ef:14:a8:d7:3b:aa:22:cf:14:17:63:b2:
         6c:15:49:06:c5:7d:7b:ff:19:6f:9c:39:17:e1:69:cc:9e:3a:
         bd:1f:ef:58:89:cc:33:26:df:23:24:a5:f3:38:5f:d8:ff:ed:
         92:7c:6d:93:80:37:15:da:6f:74:8b:7e:c2:24:99:5a:aa:c8:
         85:bf:c5:23:da:a4:27:37:52:a4:da:45:1a:01:38:13:32:78:
         e8:01:a8:0a:22:9c:1d:36:d6:3e:7c:ab:de:0d:0d:b1:9c:c5:
         ac:c9:d1:b9:9d:ae:45:26:20:26:df:fb:18:2b:02:36:d4:99:
         a0:dc:9a:36:40:a5:3d:82:89:ad:54:77:19:00:96:7f:39:0f:
         83:83:b3:e9:46:5a:4c:86:b4:a5:b2:ad:6e:d8:14:03:77:04:
         bb:f6:46:b3:0e:8a:03:26:c9:b9:21:97:63:b4:ac:3b:b0:7a:
         36:e7:8a:c7:65:a8:dd:d6:8a:34:93:d6:96:8b:d1:ff:b2:a8:
         f9:e4:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:11 2024 by rpki-client on console-ams.rpki-client.org