Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File:                     c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier:          Lbml+xg2z3wO+Js/8rfEgh6lmu8RLq/scYWwxdgsz/g=
Subject key identifier:   6A:40:CA:27:5C:D8:62:69:55:4C:9B:71:5E:41:EC:34:5F:39:AE:06
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1DAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number:          1D97
Signing time:             Fri 22 Nov 2024 16:07:22 +0000
Manifest this update:     Fri 22 Nov 2024 16:07:22 +0000
Manifest next update:     Fri 29 Nov 2024 16:07:22 +0000
Files and hashes:         1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: pWu7e5VFMXhYPIOTfuT81zuZvsgO8jZrtDcIW7qDnvc=)
                          2: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: B/BCaz2TXiyhMYghIJx4ExT6EIypcbPithXsBrEqDik=)
                          3: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: p5M3oLuyovgEJt+e7UIJb36SBKNl99DuYtwpYSg96IE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7594 (0x1daa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: Nov 22 16:07:22 2024 GMT
            Not After : Nov 29 16:07:22 2024 GMT
        Subject: CN=6740ac3a-7b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:f6:ee:78:4d:cd:4c:1b:53:1a:44:18:92:
                    9d:b7:6c:35:6b:04:2f:87:cf:fb:91:d0:70:f1:d1:
                    3c:f1:dd:5e:99:70:c2:78:0c:fa:65:dc:86:35:70:
                    f6:da:c6:d0:bb:d3:aa:c5:8f:c8:d2:dd:34:01:4b:
                    ba:52:a8:20:67:f5:ac:66:f8:8c:e8:e8:8b:52:4b:
                    1f:83:b1:73:2b:5b:07:3a:12:74:3e:5a:96:64:7f:
                    fe:c8:59:85:e9:75:06:c5:b3:ef:47:0a:53:92:b3:
                    da:02:12:d0:04:9e:ef:a6:2f:af:86:87:a9:70:ba:
                    45:2e:fc:0a:04:fc:dd:7d:6d:e6:cb:5b:66:9c:23:
                    a9:14:ef:43:f6:a0:8c:b3:44:49:df:56:5a:5b:53:
                    98:a3:e6:b5:41:de:20:1c:88:9f:cb:ed:2e:2e:09:
                    58:fd:a3:a2:60:7c:3b:ec:7e:8a:d9:64:76:b9:61:
                    87:63:dc:c3:97:0a:3e:e0:f7:ab:97:b5:ea:df:75:
                    62:f9:67:bc:59:cf:a7:c4:f8:e5:be:f5:e6:ff:91:
                    18:bb:c9:cb:72:dd:66:c5:5d:23:c3:2d:02:f1:bb:
                    32:ed:1b:7a:a7:52:6a:de:46:35:6e:14:18:cc:a6:
                    a6:40:24:7a:fe:1f:be:ed:79:32:51:6f:9a:94:58:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:40:CA:27:5C:D8:62:69:55:4C:9B:71:5E:41:EC:34:5F:39:AE:06
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:93:49:0d:ad:ae:b6:cd:a4:04:7a:58:b0:0f:71:21:1e:db:
         66:9b:06:06:26:2f:2b:7c:07:60:c5:3a:8c:d7:69:e0:03:a8:
         6f:a7:9e:ca:8b:53:65:94:03:d0:9a:f2:61:b9:77:bb:14:13:
         91:80:e6:68:65:8c:8d:76:44:b8:d1:53:47:b5:bc:8e:ed:a0:
         36:5e:40:18:86:52:80:0c:13:d2:c9:d4:2a:e7:42:c0:be:62:
         d3:55:57:c1:36:5c:7e:bb:69:81:96:db:bb:bb:c5:c6:9b:02:
         23:d0:0a:c0:4f:2e:c6:b4:d2:c8:56:10:65:cd:17:f2:1c:55:
         56:af:82:45:42:92:9c:40:e8:17:09:2f:43:ac:fd:aa:47:75:
         5a:e3:55:14:58:26:5f:44:87:c3:e9:5f:37:9a:5c:99:e2:b5:
         45:af:b3:44:41:73:8b:bb:b1:2d:c4:a8:cc:af:43:a9:d6:b0:
         4b:41:dd:7e:70:05:7e:af:94:b7:7a:f6:90:66:8c:3e:3e:cf:
         a2:62:9c:47:48:e2:f8:07:d7:9f:f0:b9:66:bc:58:43:89:6d:
         2f:85:21:d6:e7:51:97:10:25:45:ec:7a:43:85:bf:a5:34:7d:
         f0:08:ab:30:29:f3:10:82:8c:5f:cd:30:28:75:87:d1:73:11:
         d3:fe:f1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:39 2024 by rpki-client on console-fra.rpki-client.org