Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
File:                     E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json)
Hash identifier:          /JvLtJO6mZMRZ8m/Y/N8PbxsxHwC0G+noK8BkFPA7rE=
Subject key identifier:   AB:61:B3:C5:81:10:F6:58:DC:66:74:7F:9E:6A:CA:98:0A:84:F6:12
Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Certificate issuer:       /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
Manifest number:          2C
Signing time:             Thu 19 Sep 2024 05:57:45 +0000
Manifest this update:     Thu 19 Sep 2024 05:57:44 +0000
Manifest next update:     Thu 26 Sep 2024 05:57:44 +0000
Files and hashes:         1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: hqRAQRikVlf83eSi35nd+OlGkOUzKkYOcvttyw/8R1k=)
                          2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: fcp/kSCKLyceNrAoRX8L9CBT7OWwtj1KK81m97wM7rw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 05:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
        Validity
            Not Before: Sep 19 05:57:44 2024 GMT
            Not After : Sep 26 05:57:44 2024 GMT
        Subject: CN=66ebbd58-1b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:b9:86:0d:28:d0:1c:f9:8a:2a:dc:38:12:
                    22:87:77:46:22:11:73:74:d9:0b:27:45:3b:09:b1:
                    5b:64:20:b6:bc:a6:61:ec:f2:e8:67:dd:51:94:75:
                    32:43:a5:ce:31:55:f2:e2:16:c9:5c:0a:cb:03:d3:
                    31:c6:71:41:e4:ca:e1:f8:6c:ae:90:bb:43:97:01:
                    49:68:c1:c1:43:e6:d2:b0:30:6d:34:16:59:45:64:
                    de:ad:5f:0f:7e:31:1e:ff:d1:c4:61:43:89:96:c3:
                    8a:68:31:46:8e:2e:e0:44:a6:3e:c3:9a:13:26:fb:
                    54:1a:9f:c9:7f:94:a0:63:f4:c1:3a:f1:4b:a6:30:
                    a1:92:ca:01:9b:c8:b1:3c:7f:2d:39:b4:ce:5c:55:
                    5c:88:2b:f5:4f:31:12:3a:73:e6:44:1b:85:d0:21:
                    0c:01:45:ce:68:af:2d:54:25:7e:ed:ee:76:03:ff:
                    fa:0c:b5:6c:51:2b:f7:5c:86:06:af:7f:cc:d9:86:
                    6e:02:0b:69:cc:d1:f3:88:49:d1:80:fb:b7:e4:42:
                    b6:96:1b:2a:32:aa:cd:82:6e:32:f3:52:15:c8:53:
                    96:5b:30:65:ba:74:74:1a:ce:05:95:b8:1e:1e:ad:
                    0d:be:9d:a7:43:61:b4:9c:53:8d:36:30:4c:ce:17:
                    57:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:61:B3:C5:81:10:F6:58:DC:66:74:7F:9E:6A:CA:98:0A:84:F6:12
            X509v3 Authority Key Identifier:
                keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3d:d0:c1:b7:ae:ef:d3:b5:d4:f2:95:b3:83:57:b8:51:d3:
         9c:05:80:6b:d7:7c:3e:fa:98:a7:67:6b:66:74:0c:6b:de:52:
         e4:a2:69:04:cf:49:b7:e4:08:fb:91:fe:42:34:fb:ae:91:69:
         54:b5:5f:89:39:d7:95:1b:f7:ea:37:03:9f:7c:01:bd:0a:16:
         4b:72:44:40:be:dd:bf:7c:9e:64:bc:60:f8:bb:56:de:c0:db:
         f0:ee:c2:db:c3:91:e1:5b:10:bc:c2:02:9b:fa:72:c7:9a:f3:
         b0:d0:9a:27:40:45:bc:7f:fb:7a:de:48:11:cd:41:40:64:43:
         c9:ef:1d:5c:08:5a:eb:b3:0d:1e:47:e6:73:4c:ff:58:c3:a6:
         e6:57:a6:eb:85:07:5f:4c:a2:22:9e:1d:2b:52:50:37:69:cd:
         ba:ee:a8:27:bb:7a:1d:b7:c2:8b:8b:6b:7c:3d:60:f3:6f:1e:
         59:47:30:f4:f9:e8:f2:30:21:da:dd:f6:6e:00:1e:d2:e8:f7:
         42:8b:42:12:ac:52:8e:c2:79:53:87:d9:79:5c:ae:52:4c:93:
         8f:9c:a1:0d:cf:4a:0e:9d:76:82:9d:ce:18:fb:80:82:f5:8e:
         30:e0:61:7b:69:d8:04:f4:f3:1f:80:41:cb:84:59:84:eb:cd:
         41:64:f6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 08:57:05 2024 by rpki-client on console-ams.rpki-client.org