Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
File:                     Qf4dQTWrLWdiPnYIM5hGitT6odw.mft (raw, json)
Hash identifier:          6/GJ3DPfBlKoaJBO8gdeQhVaaMC5qGE5V88gA8jvq/Q=
Subject key identifier:   B6:14:70:04:5C:50:8A:F4:29:73:F8:9F:AA:17:8B:03:1F:AB:4E:12
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Certificate issuer:       /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial:       1B94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
Manifest number:          1B63
Signing time:             Fri 22 Nov 2024 16:17:24 +0000
Manifest this update:     Fri 22 Nov 2024 16:17:23 +0000
Manifest next update:     Fri 29 Nov 2024 16:17:23 +0000
Files and hashes:         1: Qf4dQTWrLWdiPnYIM5hGitT6odw.crl (hash: 0uYCcAVItMAFFEXSqz00aCSkFy3Z9mBSSk4Rsn3p2CQ=)
                          2: C177A6728D2011EF97C11D3CC4F9AE02.roa (hash: qqv99MidNMOt4MehbGZ8pvkQ6h/BMUNOb2r+cG35R9s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
                          rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7060 (0x1b94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
        Validity
            Not Before: Nov 22 16:17:23 2024 GMT
            Not After : Nov 29 16:17:23 2024 GMT
        Subject: CN=6740ae93-0884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bd:07:46:51:30:98:9c:c0:a7:54:48:fe:89:
                    b6:e9:57:d9:ab:cc:64:f4:74:ea:e5:31:4f:9c:e2:
                    44:2a:a0:03:f2:9e:16:eb:b3:26:5e:c9:a1:27:23:
                    bc:3e:74:a7:f7:97:89:1e:be:38:b5:c8:62:74:59:
                    6d:3b:b9:8b:87:83:a8:ca:4c:39:f0:94:15:4f:0f:
                    df:ff:08:81:de:2e:38:c1:49:f0:6c:20:a3:4e:34:
                    7d:87:eb:90:ca:9b:67:ad:43:7e:03:12:5a:3a:15:
                    98:5c:0c:79:2b:c7:de:0c:65:81:90:a7:4b:a1:36:
                    0a:58:d9:86:ba:6d:ac:38:17:76:55:b4:3f:43:9c:
                    c3:9c:c1:c3:80:30:e6:b9:e2:40:0c:ea:2e:d8:a4:
                    b5:d0:36:8f:1e:29:82:a3:cc:b1:16:92:dc:c8:7c:
                    45:44:b8:dc:73:6e:8b:08:7c:87:09:38:a3:e9:aa:
                    3f:23:bd:59:c9:62:05:07:b9:26:00:3b:53:6d:7f:
                    d7:57:53:12:6b:bc:65:84:25:7a:9b:06:ee:45:fe:
                    07:6f:9d:23:a6:7d:64:35:53:9a:8f:5b:3c:13:94:
                    a1:95:4a:36:c2:81:e8:73:31:f5:90:d1:cc:cc:02:
                    66:f4:ce:d0:5e:fe:13:23:b2:ce:69:a8:03:b3:28:
                    b9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:14:70:04:5C:50:8A:F4:29:73:F8:9F:AA:17:8B:03:1F:AB:4E:12
            X509v3 Authority Key Identifier:
                keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e3:97:24:cf:ac:d8:dd:5e:a3:29:7f:48:32:9e:ba:bb:5b:
         9a:21:60:e8:68:64:9d:89:2e:6d:ba:71:ca:b0:97:b0:29:ce:
         af:79:9c:83:81:15:ea:14:2d:f7:14:3b:09:65:e1:d7:09:1e:
         e7:5d:81:4e:ad:df:ee:09:76:f3:5b:18:2b:bc:40:07:32:73:
         86:4e:fd:e4:1a:6d:69:e9:2e:2f:ef:9f:c6:05:a8:ee:a2:5d:
         0a:83:6d:d9:e4:ee:3b:42:ab:da:ff:a5:d3:a9:27:b4:af:d7:
         45:5a:62:95:e5:15:65:7f:e1:83:74:27:a9:44:6d:d3:7a:f9:
         5d:5e:37:e1:85:93:c2:3f:c5:a2:9f:81:18:b2:d3:23:35:0a:
         21:0a:db:e2:9d:b1:91:34:32:e3:28:e9:5d:71:a6:7c:74:ea:
         e9:0c:10:fc:89:a2:ba:26:01:1c:7d:4e:36:98:6c:cf:92:6d:
         ad:0e:8e:fe:b1:5c:58:8a:a3:78:e5:48:7c:3b:f2:c2:cc:1d:
         9f:77:f9:6e:47:8b:81:17:17:e1:99:d5:2d:7f:7c:18:6f:35:
         28:53:32:75:e0:14:23:01:97:62:31:28:00:79:96:ea:34:4b:
         ab:35:38:e5:8d:d3:61:e2:9d:ea:f2:03:e3:47:05:89:1c:9a:
         dd:e5:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org