Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
File:                     AEu7wBxXH6cPIOpEBQBX2dyeutI.mft (raw, json)
Hash identifier:          5beju2wu0osvVoOQuwmQX+70sycX6hgKRaYNkYBtK5I=
Subject key identifier:   2E:94:24:93:E3:A5:8C:79:1F:05:5C:54:96:BF:42:44:27:69:7D:13
Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
Certificate issuer:       /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
Manifest number:          7F
Signing time:             Sat 23 Nov 2024 04:41:12 +0000
Manifest this update:     Sat 23 Nov 2024 04:41:12 +0000
Manifest next update:     Sat 30 Nov 2024 04:41:12 +0000
Files and hashes:         1: AEu7wBxXH6cPIOpEBQBX2dyeutI.crl (hash: 54eQDAPJS9i0KMVQk5mnyEZJQMSVgz+YeMTRbfPmZOc=)
                          2: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (hash: IY8DaCEG1YRTotH1n6mpqd+3bhzVn9WvsX3TpMpoT3M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl
                          rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
        Validity
            Not Before: Nov 23 04:41:12 2024 GMT
            Not After : Nov 30 04:41:12 2024 GMT
        Subject: CN=67415ce8-4825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:a5:4b:0e:b2:ec:db:ee:fb:4e:46:aa:5e:
                    11:25:3e:a0:26:65:3a:22:7e:fa:48:20:80:4d:27:
                    c7:f9:46:62:e3:6c:a3:ea:fa:f6:c1:29:6d:22:72:
                    71:bf:42:af:ff:d0:bd:44:5b:bc:d8:5c:fe:38:b3:
                    6f:55:af:86:e4:1d:5b:e7:55:78:b4:a0:43:d3:7e:
                    02:ca:cb:1e:f3:79:d1:0a:29:2d:64:cf:d2:25:35:
                    9a:34:aa:c4:b8:9d:bf:2b:4d:70:00:92:44:98:ac:
                    52:90:78:9d:d2:63:6a:f3:7e:d2:50:83:4e:9e:fa:
                    0b:65:6c:80:4a:80:24:80:0f:61:69:df:85:2a:a3:
                    d2:16:04:61:7c:0f:b5:68:11:fa:d7:3f:6e:42:ce:
                    1d:57:59:a4:1b:4a:19:1d:94:55:ef:a4:78:0b:ba:
                    46:23:fe:1d:ae:c6:c5:b2:81:2a:8c:2e:36:40:b8:
                    c3:9e:17:7b:f5:55:f6:8f:3f:15:a6:e4:76:e4:e3:
                    da:86:b3:05:7d:de:5c:75:a1:5b:a0:1b:27:78:95:
                    b9:c6:28:70:9f:d3:ff:66:bf:13:43:a5:da:9e:b9:
                    f4:66:80:d9:9c:69:47:ea:05:23:39:f6:83:06:46:
                    15:5c:e4:47:fb:d9:3c:02:19:37:b0:ab:a0:ed:d9:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:94:24:93:E3:A5:8C:79:1F:05:5C:54:96:BF:42:44:27:69:7D:13
            X509v3 Authority Key Identifier:
                keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:a9:0a:c0:c3:83:ff:e9:24:f8:86:c9:44:04:b2:5b:3c:75:
         6a:74:ec:02:68:16:b2:3a:db:08:53:4d:76:e0:19:d3:05:7f:
         6b:23:6c:2d:1b:83:49:dc:ff:52:0b:35:24:75:ac:e3:4c:6b:
         9f:15:53:7f:8d:ee:0c:06:77:59:fd:5e:52:fe:de:cf:3a:f0:
         26:40:2c:dd:3a:b8:e6:94:27:3e:33:27:e8:a7:78:94:e8:ee:
         9b:1e:89:06:bf:5e:ed:f0:c2:bc:e0:72:92:20:bf:0d:63:c4:
         0f:24:48:35:cb:5f:78:d1:e8:ba:10:9f:f9:f7:3c:6b:d5:b2:
         af:ab:2f:00:fa:25:d3:18:60:a2:54:f5:19:f6:ae:8c:aa:22:
         7b:7c:17:b1:e0:fc:12:cb:9d:2f:69:e1:b9:39:6b:9a:fc:dc:
         86:7c:fc:30:80:25:56:a5:16:3a:10:b5:4a:01:93:a8:74:75:
         0f:db:5d:b5:3b:c0:bf:1c:a1:2d:31:4a:72:c8:b9:eb:d2:17:
         9a:e0:75:db:b8:07:b2:5d:c8:79:8a:ea:72:e4:b0:c3:30:e8:
         6e:f8:c5:0e:52:8d:28:80:ef:88:24:11:da:97:eb:99:b2:6c:
         b4:5b:4f:af:4e:1d:5c:f1:99:e3:07:95:06:4d:ac:ad:9d:75:
         d6:bf:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org