Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
File:                     rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json)
Hash identifier:          wtiyOYsGzPITwwizkgHfbqtQJ1O0LvyiuiVYUXZQjtk=
Subject key identifier:   66:84:38:B5:D8:AA:BC:EC:96:7E:AC:4F:61:88:E5:B2:39:6A:EA:AD
Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17
Certificate issuer:       /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
Manifest number:          5B
Signing time:             Sun 03 Nov 2024 05:01:12 +0000
Manifest this update:     Sun 03 Nov 2024 05:01:12 +0000
Manifest next update:     Sun 10 Nov 2024 05:01:12 +0000
Files and hashes:         1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: T/71W3t0Kt9Ff2GScgy4SBTTOmHpop/9efjDxMixp9I=)
                          2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: wwGZpT48wP330+bWP5HvFyf3d6u+Sna23wh8+O18ssw=)
                          3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: kAoCwtSL8DYNhEnCxiYeyq+03pY+E8NsD8+lYLcvbO4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl
                          rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17
        Validity
            Not Before: Nov  3 05:01:12 2024 GMT
            Not After : Nov 10 05:01:12 2024 GMT
        Subject: CN=67270398-dfcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:9c:bf:ea:29:db:56:33:88:e6:02:75:46:
                    9c:17:e5:73:71:a3:ae:f4:47:45:0e:d5:33:38:49:
                    b4:87:8d:8d:97:90:5b:c6:84:d2:ae:94:54:be:9f:
                    bd:19:ff:cf:8f:05:cb:ec:00:c8:bc:22:2c:47:9e:
                    53:82:25:d3:d2:aa:57:33:14:a7:df:0d:47:c3:06:
                    ea:03:60:22:9e:6f:80:8d:ac:33:59:0b:98:32:1b:
                    09:b7:62:3e:38:c6:73:cf:37:5c:d4:79:f8:93:d7:
                    d9:da:ec:05:fa:3d:b1:35:41:86:c4:37:a5:27:93:
                    72:27:32:44:bd:63:c3:f3:bb:49:2a:f5:0a:9c:fe:
                    6e:74:28:c1:e0:c8:11:89:28:ed:37:79:fd:f6:2c:
                    46:6d:ee:34:c5:81:88:9f:c5:1e:3c:c3:cd:ed:6b:
                    52:26:80:5e:4a:78:c3:0e:2a:77:23:11:94:e8:f5:
                    85:ec:4d:58:92:5e:11:67:31:27:bf:e4:1d:41:3b:
                    32:48:17:a2:b7:a5:02:2c:2a:24:e4:95:ea:55:51:
                    c7:5d:37:b7:ec:3b:2a:b1:a8:1e:7e:e0:b1:5b:54:
                    ea:7c:db:bf:05:50:44:46:87:b4:34:04:dc:ae:7c:
                    ac:0b:25:b0:5b:b3:46:42:78:ab:38:5a:7d:68:6f:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:84:38:B5:D8:AA:BC:EC:96:7E:AC:4F:61:88:E5:B2:39:6A:EA:AD
            X509v3 Authority Key Identifier:
                keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:fd:bf:41:1e:f0:07:e6:67:c4:f6:d1:c5:7e:12:ec:13:
         c1:50:5d:be:83:bf:65:c1:67:28:57:48:26:59:5c:7c:ed:38:
         5c:3e:b3:a3:ae:d1:b4:c8:a9:70:fb:82:48:e1:5d:b5:c7:d4:
         ee:38:23:e7:87:e3:96:31:05:6b:82:eb:6b:9a:22:03:4c:e7:
         4d:be:36:42:d7:f8:32:cd:cf:9a:22:eb:b5:10:17:a1:3e:15:
         ab:bb:b9:df:cf:1d:5f:36:d9:22:95:cc:e5:aa:2e:c6:2d:be:
         f6:48:f8:3e:7d:fd:1d:50:e1:09:64:28:56:f9:1c:70:32:f4:
         ac:98:a0:39:5e:31:7a:07:71:aa:75:b3:c1:e2:f1:a4:aa:51:
         e5:3d:61:e3:b3:20:88:70:41:aa:c9:35:c6:67:07:30:30:7c:
         e8:a8:03:6a:98:4a:38:73:29:be:ee:87:13:07:b9:11:88:b9:
         e2:df:82:a6:9d:e1:40:6c:5c:72:f6:8d:dc:c3:fc:fd:0a:96:
         06:bd:c4:f9:47:46:b5:c9:4a:68:eb:ad:7b:ad:b3:10:5b:d8:
         7e:85:d1:6c:3e:e2:56:c7:02:9d:c9:53:28:de:45:be:b9:76:
         75:76:e2:b5:15:6d:1e:8b:5f:ab:e7:1d:10:f2:d3:2f:d3:f6:
         91:ad:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 06:07:31 2024 by rpki-client on console-fra.rpki-client.org