Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
File:                     DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json)
Hash identifier:          ciXnbRK96GrAFsC3yrodtlSa0HshR8r3LsugaGgoDV0=
Subject key identifier:   FA:F1:74:4B:25:F4:B0:71:2D:AD:48:11:6B:98:72:50:99:6F:F2:49
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
Manifest number:          92
Signing time:             Thu 21 Nov 2024 04:37:33 +0000
Manifest this update:     Thu 21 Nov 2024 04:37:32 +0000
Manifest next update:     Thu 28 Nov 2024 04:37:32 +0000
Files and hashes:         1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: G/VyfuNMmY92rRtY1flfhNjOUQWmAQb81DBL1ca07fw=)
                          2: 79F7221E892911EF896D1145C4F9AE02.roa (hash: CdVHSgSFwVlvO0qZ+589iYkzFfVCO/HTOSZdhmiqYtg=)
                          3: F278C026892911EFB08D7746C4F9AE02.roa (hash: vYK9qyYR2qZK8ft3AcqYm/AEVp1ckpD6/U1Duag7/+g=)
                          4: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: h643cI2g+iFcUuenN+s6pHi62OFIxZQfh52pwbMjNbE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: Nov 21 04:37:32 2024 GMT
            Not After : Nov 28 04:37:32 2024 GMT
        Subject: CN=673eb90d-0a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:34:1b:d9:36:ab:48:1c:bb:db:99:7e:fa:18:
                    f7:3a:76:40:77:06:51:be:ff:03:27:9b:73:53:c9:
                    50:26:7c:11:5f:17:7c:66:c7:f0:b8:a6:b6:2d:e4:
                    a3:da:fa:63:4f:12:64:ff:4d:b3:65:ba:f9:01:21:
                    34:d7:71:41:66:ab:d5:4b:48:26:71:17:2e:a1:3d:
                    b6:3d:44:a2:4a:2a:2f:31:80:08:9a:e4:b5:ca:f2:
                    ea:e2:86:ff:d2:3a:6e:e8:f5:41:89:f4:73:0f:a8:
                    59:d0:7f:5a:50:7b:a1:db:11:bb:de:36:f4:87:e2:
                    c9:90:33:95:d4:9b:fa:67:05:a9:ee:33:b4:92:59:
                    11:5f:d0:dc:22:ca:8f:4c:4c:db:be:b9:a8:a6:b6:
                    94:54:a8:bb:c9:7b:8f:7c:48:9c:f5:af:45:6b:36:
                    1d:cd:5f:a9:76:d9:cc:c3:a8:6b:f5:85:60:99:ec:
                    d6:eb:d5:52:d8:e7:b8:0e:3e:d4:c2:ff:72:e6:27:
                    32:87:36:25:94:35:d3:1b:9e:50:2b:a6:47:ac:73:
                    ca:88:a4:84:fc:ec:a4:cf:5d:0c:8a:b6:57:a4:3e:
                    98:b9:91:fd:90:7b:ca:1d:41:39:87:53:ba:47:2d:
                    79:05:6a:e4:b2:ac:61:0d:9e:2a:b8:fc:8f:ed:7b:
                    a7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F1:74:4B:25:F4:B0:71:2D:AD:48:11:6B:98:72:50:99:6F:F2:49
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a9:ca:83:6d:85:2e:55:ca:9b:79:81:a5:35:78:33:3a:8e:
         28:5f:1c:17:58:1f:1c:fe:f1:ed:e1:9d:f3:ae:bc:75:e7:99:
         a6:2c:02:bb:05:42:a3:2d:9e:46:7f:16:67:6f:3f:42:2e:05:
         20:f9:02:b7:40:a9:ee:86:7a:fc:7f:b5:8c:e9:61:ff:73:7f:
         6e:1a:06:3f:29:e0:d9:62:4c:44:44:f6:41:9e:2a:8b:9f:32:
         56:10:44:5d:1b:6d:0e:e9:0d:f0:cb:da:41:1f:bb:3d:73:1a:
         57:25:74:00:5f:be:a3:6a:23:25:66:78:1a:d9:15:bb:54:af:
         c2:16:34:a8:4f:23:88:55:31:f3:ce:56:e8:75:28:59:28:a6:
         82:23:fc:14:65:c4:af:1f:f7:0a:5f:26:fa:2c:8c:1d:fe:85:
         28:d1:c0:fb:0b:f5:9b:a2:c4:b0:ad:46:24:f6:e9:67:47:9c:
         a4:a0:57:e3:1d:cb:05:59:7c:ec:30:14:9e:57:4e:da:ed:e9:
         a3:e2:9f:01:81:0a:54:1e:07:6e:25:1e:53:f7:af:76:8c:a3:
         65:32:be:11:e7:ae:ae:ab:72:48:88:36:04:30:c1:b4:97:0b:
         a1:56:9f:5a:8b:17:aa:a8:00:88:77:62:04:26:4f:f4:c1:5f:
         53:94:ca:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:14 2024 by rpki-client on console-fra.rpki-client.org