Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
File:                     -swzUrzjgChT2_SwQFJc_B4VLmA.mft (raw, json)
Hash identifier:          yJ8SCfOVh7cEDljA1LbdQBaVjWdqyLFk5v2eIsb6/hs=
Subject key identifier:   5C:AD:04:AB:BB:18:DB:26:C7:F2:9A:28:EC:03:38:17:F7:64:18:3B
Authority key identifier: FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60
Certificate issuer:       /CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
Manifest number:          41
Signing time:             Sun 03 Nov 2024 05:17:21 +0000
Manifest this update:     Sun 03 Nov 2024 05:17:20 +0000
Manifest next update:     Sun 10 Nov 2024 05:17:20 +0000
Files and hashes:         1: -swzUrzjgChT2_SwQFJc_B4VLmA.crl (hash: ZbbpsnBh7K10VF1/RUGUu14OCHcCDZCe8U3nvmxRQ08=)
                          2: 164D3C32379711EF9ECC714EC4F9AE02.roa (hash: MwAJLA+u3nsJdB5hxYAQtsiYv2wQXxIJZHkWx14cyEw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
        Validity
            Not Before: Nov  3 05:17:20 2024 GMT
            Not After : Nov 10 05:17:20 2024 GMT
        Subject: CN=67270761-840a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:10:53:ef:cd:5d:db:f5:b5:21:91:cf:54:
                    e3:98:ca:78:eb:8f:89:b8:3a:3e:a6:c9:e1:10:f0:
                    dc:df:8e:22:bd:e7:84:11:89:a4:03:4e:46:fb:b4:
                    a3:89:0b:b3:c8:82:c5:09:34:b4:01:ee:a7:08:74:
                    0d:02:55:6f:86:5f:ff:f6:d6:d3:51:3e:8d:d5:24:
                    bb:43:bc:f7:95:b7:c0:cb:73:22:7e:f2:88:10:56:
                    5d:2f:a2:4a:84:05:d3:b6:d8:df:b2:d5:26:35:2e:
                    9f:9f:12:9b:8e:2b:f2:79:f2:d5:be:72:1e:0c:64:
                    d9:b2:86:7b:06:b7:e5:d7:0e:93:db:b6:4b:25:f0:
                    89:0c:ca:6a:1f:b4:97:9c:67:bd:2c:ca:4b:e1:7d:
                    c7:ae:97:e1:c8:4d:bc:83:db:e4:8d:73:7e:cb:f9:
                    77:e0:cc:1a:f7:a1:b8:6c:32:ea:b5:51:90:e4:b2:
                    94:65:10:3d:04:29:85:2a:e5:b9:9c:f4:2c:82:9e:
                    4e:41:58:49:c7:2d:f7:f5:c5:6b:f4:1a:25:07:44:
                    ed:6c:63:99:14:6e:a0:5b:aa:e2:7d:d9:af:c1:94:
                    88:af:e0:8b:74:7d:e6:f3:92:20:52:ed:1a:14:ef:
                    72:b4:7c:87:cd:08:a5:ac:71:9f:82:fb:0d:41:63:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AD:04:AB:BB:18:DB:26:C7:F2:9A:28:EC:03:38:17:F7:64:18:3B
            X509v3 Authority Key Identifier:
                keyid:FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:22:2b:c7:53:95:a0:52:e3:8e:5a:b5:4a:33:8f:3c:e1:6a:
         1f:1e:31:fe:f2:c7:3f:6e:e3:55:81:f6:85:0b:ca:ff:5a:a9:
         20:17:dc:ce:7e:20:11:d4:74:e4:6e:56:6e:d9:a3:df:7f:10:
         a4:0d:95:5a:b3:99:c6:d1:af:f4:44:50:68:6a:16:fe:15:9e:
         94:44:5a:dc:7c:f5:d3:e6:2a:c9:cb:90:78:6f:17:f7:be:0d:
         c3:d5:c0:ae:88:12:58:57:7c:97:da:93:0a:41:80:f5:ab:44:
         7a:e6:34:94:cf:f4:3d:1c:26:1d:1c:fd:85:61:94:01:5f:a8:
         f6:2e:c3:bb:08:b6:e8:6f:95:47:d6:a3:69:db:f4:05:82:41:
         d5:b0:ff:f5:14:72:c3:53:07:dc:35:b9:ab:ce:75:16:5f:fd:
         00:28:09:ae:c9:33:41:6e:c5:20:c5:10:24:b6:a1:c8:ed:69:
         06:aa:9e:da:e1:c0:17:15:54:7d:28:81:eb:55:58:da:e1:97:
         6d:97:f3:96:24:8d:6b:e2:59:7b:fb:f9:ec:0b:b8:f1:9e:c2:
         8d:3e:ed:02:09:54:77:5e:fe:c6:3e:57:75:8c:58:d1:64:ef:
         88:65:8c:9e:68:ce:9c:69:52:da:f4:de:f8:0e:77:95:3f:e9:
         68:4b:76:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 06:59:34 2024 by rpki-client on console-ams.rpki-client.org