Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File:                     TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier:          DZzSo52x3vAunS5AIp8mtfMxuM+nke+uhR8DPH9WtBA=
Subject key identifier:   94:44:41:F2:21:40:E3:F7:C9:26:35:12:BB:DD:D7:81:83:6E:C7:D6
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       032A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number:          0326
Signing time:             Thu 21 Nov 2024 00:43:26 +0000
Manifest this update:     Thu 21 Nov 2024 00:43:25 +0000
Manifest next update:     Thu 28 Nov 2024 00:43:25 +0000
Files and hashes:         1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: 0po54rod+JnhKUsYwdtEfq7rb2ozD/pqKkmSfPv7b3A=)
                          2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: 7sllHtcg2JAQH6y/I95UaiNcgMx5Ie6eNWsWAGqdrVU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Nov 21 00:43:25 2024 GMT
            Not After : Nov 28 00:43:25 2024 GMT
        Subject: CN=673e822d-b973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:c2:8e:da:66:d3:18:83:d9:94:b8:ea:69:
                    43:58:23:d0:07:5e:d8:cd:1c:8a:ad:a3:23:43:f8:
                    f2:03:4d:b9:89:84:8d:b9:12:16:c6:31:2e:34:4c:
                    3f:b3:35:f2:86:68:35:62:ed:0d:42:0f:c6:36:6e:
                    38:70:c7:79:af:f3:a7:e7:42:93:b9:ff:89:13:c0:
                    6b:43:90:d6:63:21:fa:f2:47:2e:2b:23:91:03:d6:
                    e4:80:6b:13:16:48:4a:95:19:98:15:cd:e3:ed:18:
                    54:2c:0a:2c:c4:ed:81:97:85:6b:92:12:d4:85:00:
                    45:2d:42:f9:2e:52:50:6d:b7:2b:0a:e8:05:f9:70:
                    b6:17:9e:ab:c6:c6:96:62:6a:47:24:41:9b:85:c1:
                    59:17:46:fd:f4:ee:24:ed:f3:fc:eb:f3:44:2e:ec:
                    c4:0d:57:3a:72:0e:f8:a8:17:13:fa:c1:e2:b5:25:
                    fd:26:63:c8:7a:c2:07:67:1d:52:54:1d:d1:d8:49:
                    ea:e2:e8:68:94:9e:22:84:69:56:b7:51:ce:ea:02:
                    26:23:4c:44:ef:1b:35:7a:55:a9:7b:64:d5:1b:77:
                    01:e4:8f:cf:fc:d1:b2:a3:73:92:e3:40:60:01:4d:
                    ea:88:35:50:3c:7e:22:7f:c6:db:88:3f:83:aa:14:
                    c8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:44:41:F2:21:40:E3:F7:C9:26:35:12:BB:DD:D7:81:83:6E:C7:D6
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:be:fd:9b:4f:14:2c:6b:f6:b9:c7:99:f0:eb:a8:ec:e5:b8:
         03:96:12:3a:81:42:da:68:6f:6e:09:72:06:6b:95:f5:8a:b1:
         c3:33:fb:e2:3a:bd:08:5a:c2:fa:e5:b7:c6:42:b4:2f:05:b4:
         6d:f4:88:02:cc:24:74:7d:b6:78:eb:93:e0:c9:60:cc:4e:d0:
         08:e7:04:e5:9a:f0:42:03:49:83:81:3a:c3:54:e0:65:73:cc:
         33:94:41:56:60:03:ce:b8:97:ad:4a:76:7f:ba:47:0b:95:5b:
         5b:0e:29:97:1f:bd:ed:12:ed:0e:f4:29:45:2d:c8:d8:75:ac:
         62:31:67:aa:12:d6:cb:66:f3:95:a2:99:8a:0e:b9:9d:2f:35:
         d2:ba:b0:58:6a:db:7a:9c:c3:9e:dd:71:2f:69:ae:a3:fb:3f:
         4f:76:c8:e3:4b:39:e5:02:a0:c3:54:d9:b7:b0:32:50:1c:92:
         2b:7a:41:4b:f7:d5:84:d0:63:ac:77:09:c4:19:cb:82:f4:27:
         00:40:ab:41:53:c3:0e:2e:9c:47:99:dc:06:2e:c5:03:9e:30:
         fd:61:5e:9e:ec:3c:81:e3:70:67:ec:e1:d9:f3:4d:2c:f8:3f:
         6c:3e:1e:67:88:ff:fe:3a:47:de:de:4b:1f:16:8f:df:8b:e4:
         7f:67:b5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:53 2024 by rpki-client on console-fra.rpki-client.org