Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
File:                     qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft (raw, json)
Hash identifier:          kaFwy4ytF0h/x5VowNtHbHWaU9jJsFrVBZa7vQnJHHY=
Subject key identifier:   FD:60:9C:DE:37:B2:64:E6:A1:0C:32:2D:6A:71:30:D9:28:72:A4:C4
Authority key identifier: AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4
Certificate issuer:       /CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
Certificate serial:       082F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
Manifest number:          0828
Signing time:             Sun 24 Nov 2024 20:20:32 +0000
Manifest this update:     Sun 24 Nov 2024 20:20:32 +0000
Manifest next update:     Sun 01 Dec 2024 20:20:32 +0000
Files and hashes:         1: qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl (hash: AssDrYGTN0EaJjkb5pjxYG+NZL4+ogtNZ22GPGrHfeg=)
                          2: 34E1DFE8BF7011EAB745BE31C4F9AE02.roa (hash: Ikd/LHIFGkrNvlawlhSa/JEAr9UmpAWA/8H+UH2uQws=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2095 (0x82f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
        Validity
            Not Before: Nov 24 20:20:32 2024 GMT
            Not After : Dec  1 20:20:32 2024 GMT
        Subject: CN=67438a90-1475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:5e:a7:98:9e:b1:a6:12:84:2e:46:9f:46:
                    eb:a4:d6:e3:7f:72:3c:7f:18:50:f0:f4:34:08:75:
                    28:4f:35:56:f9:90:0f:4f:9a:ce:c5:a4:64:63:35:
                    55:7e:0b:13:ef:55:d6:ab:e5:bd:5e:e5:3c:79:0f:
                    18:f2:ed:9b:30:4c:f8:e5:da:10:92:2b:f2:f9:83:
                    6a:7e:b5:f3:22:35:bd:da:67:e1:f0:b5:5f:2c:6f:
                    35:fe:f2:1c:79:a3:ed:77:bf:b3:4d:4c:1a:fc:d8:
                    80:02:9c:82:90:ed:a2:ac:1e:c3:3b:77:f9:7a:94:
                    68:38:ba:8e:0a:d3:01:eb:4d:24:5f:98:7a:ff:21:
                    87:52:c2:f7:c0:1f:78:86:8a:f5:8e:68:0b:bf:a2:
                    47:e8:98:d0:7a:9a:b8:3a:88:15:37:6e:fa:54:30:
                    34:91:2f:99:63:88:21:13:cd:e0:b3:5d:08:bc:d4:
                    99:05:84:34:9e:8b:3b:7b:2b:d5:ce:07:01:ef:89:
                    0c:25:34:4b:b6:a0:30:ae:1c:e2:af:43:f7:5a:ba:
                    c9:c9:73:f0:86:8d:29:d3:fa:89:21:d9:a8:ed:16:
                    41:05:e0:fd:f9:49:e9:2c:9f:da:0f:63:2e:66:4e:
                    cd:6d:fd:94:99:41:45:9f:af:45:8b:a6:12:45:53:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:60:9C:DE:37:B2:64:E6:A1:0C:32:2D:6A:71:30:D9:28:72:A4:C4
            X509v3 Authority Key Identifier:
                keyid:AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:27:77:3a:65:ff:5c:a0:88:2c:53:7d:57:ef:c9:b8:48:57:
         c5:24:12:28:6f:64:9c:95:6c:10:14:a7:be:10:b3:7e:01:36:
         a7:42:84:c2:28:82:07:20:e0:f1:2f:7d:92:e3:b5:7e:a0:4d:
         7e:07:1a:4a:02:e4:9f:01:9d:07:66:b8:8c:9e:78:2e:70:aa:
         34:9d:e6:45:c1:c6:70:1a:b6:bc:2a:72:c3:e4:e9:1a:71:5c:
         ae:f4:c3:8f:38:41:ac:da:6f:f3:2b:71:8c:d1:6a:65:22:da:
         c9:8d:47:e9:43:89:26:ab:1c:ee:85:94:69:b2:72:b3:60:64:
         6d:83:c4:05:09:2e:bf:83:1a:6a:f8:ce:4b:a1:9d:6d:4d:cf:
         0b:73:33:37:6c:0a:4f:03:c4:32:00:af:b2:ff:1d:c7:f9:d3:
         65:00:18:95:9a:d8:c9:26:88:30:5c:8e:99:35:10:f8:40:e5:
         a4:31:84:1f:54:19:10:48:32:c6:8e:34:2f:d9:4d:6d:44:4c:
         83:72:98:09:ec:cb:49:ea:d7:bb:c5:47:e6:6e:4d:bf:66:bf:
         48:e8:27:73:ab:f7:42:09:72:d6:9b:6f:1f:f7:88:32:6a:1f:
         dd:f2:f6:6c:03:25:97:b0:bc:76:50:ee:1d:66:89:8d:7e:37:
         59:e6:a4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:09 2024 by rpki-client on console-fra.rpki-client.org