Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft
File:                     EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft (raw, json)
Hash identifier:          tyS6mFKKLBQ5zPomD7VEy+PMO3/vlmxmfSugTkx1Q0E=
Subject key identifier:   32:68:72:33:CB:42:E8:4B:65:8D:1A:FE:A8:1A:BA:D3:5A:19:71:5A
Authority key identifier: 10:94:6A:F9:11:B6:55:46:2C:1A:5E:F0:1D:68:46:88:E1:96:87:D3
Certificate issuer:       /CN=A91348DF/serialNumber=10946AF911B655462C1A5EF01D684688E19687D3
Certificate serial:       02DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJRq-RG2VUYsGl7wHWhGiOGWh9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft
Manifest number:          02D7
Signing time:             Thu 21 Nov 2024 00:54:31 +0000
Manifest this update:     Thu 21 Nov 2024 00:54:30 +0000
Manifest next update:     Thu 28 Nov 2024 00:54:30 +0000
Files and hashes:         1: EJRq-RG2VUYsGl7wHWhGiOGWh9M.crl (hash: 9H8cBmsR6aOp0JzH+n0loq5xYiC25/E2FfRADFeBGmc=)
                          2: 9F8BF452C1E711EC97315146C4F9AE02.roa (hash: k6JWZEcqAHK7iXIk5qcPFOjxidKP93iseKIRI4Du2jw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.crl
                          rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJRq-RG2VUYsGl7wHWhGiOGWh9M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348DF/serialNumber=10946AF911B655462C1A5EF01D684688E19687D3
        Validity
            Not Before: Nov 21 00:54:30 2024 GMT
            Not After : Nov 28 00:54:30 2024 GMT
        Subject: CN=673e84c6-c9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:51:5c:62:2d:98:f2:66:53:88:5f:02:bc:
                    d5:87:81:78:36:b4:1e:30:04:a0:00:81:df:a0:36:
                    a7:2e:b1:9e:52:ec:5d:ee:b4:d6:a1:2c:79:aa:37:
                    13:d8:89:1c:5a:a4:cd:51:34:40:94:e4:1a:0d:a5:
                    e0:bc:31:55:35:b6:4a:ae:6e:4e:29:fe:19:3d:82:
                    02:d7:76:79:cf:e4:85:26:0a:86:b8:0f:d3:b5:a6:
                    38:a5:a2:a1:5b:31:7a:3d:09:79:33:cd:13:15:f1:
                    ca:fa:07:24:db:88:c7:e4:9a:8c:bb:9a:cc:c3:36:
                    b7:36:ab:d0:87:5a:6f:ef:be:61:f0:92:ba:12:74:
                    e6:e4:61:59:14:c1:70:f4:90:18:45:d4:3a:19:40:
                    b9:8f:62:69:05:8b:b1:bd:96:1a:b5:01:ab:f8:7e:
                    ac:05:25:e5:da:e2:37:c9:50:59:e7:17:e4:92:b4:
                    e1:98:3c:44:ac:7d:41:b2:ef:bb:8a:ad:f5:d4:88:
                    c0:d4:2f:86:ec:dc:48:a6:36:8b:c1:7d:ee:89:99:
                    44:f3:fe:1e:22:b3:84:9b:c2:f9:73:bb:4d:32:52:
                    26:d8:03:88:61:71:22:f8:3c:a4:fc:b8:ec:0b:86:
                    c5:81:a9:c9:49:98:81:5a:c8:3a:dd:b3:8c:71:69:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:68:72:33:CB:42:E8:4B:65:8D:1A:FE:A8:1A:BA:D3:5A:19:71:5A
            X509v3 Authority Key Identifier:
                keyid:10:94:6A:F9:11:B6:55:46:2C:1A:5E:F0:1D:68:46:88:E1:96:87:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJRq-RG2VUYsGl7wHWhGiOGWh9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:09:39:61:85:01:de:4b:61:c0:9a:0f:dc:34:88:54:af:2b:
         ba:76:0f:53:70:20:41:78:74:0b:87:bb:31:72:d9:77:78:6f:
         17:7d:38:ea:4e:7c:ea:6b:25:29:0c:3a:18:00:40:3d:62:17:
         03:72:40:bd:2a:d3:31:e3:6f:0e:b3:93:fc:0b:ce:6e:de:f6:
         d5:d7:cc:ba:07:fc:a1:df:e1:f9:20:bd:d2:f2:4f:e3:31:eb:
         87:b7:70:63:70:4d:89:53:f1:7d:20:c5:aa:ca:08:41:20:bb:
         cd:d6:3a:06:72:bd:e4:28:da:24:db:16:31:00:f6:78:12:dc:
         0f:f9:f8:b1:92:5f:7b:ec:41:c1:ad:0e:0d:10:46:12:d2:7c:
         6a:78:41:05:c5:74:93:ab:d6:ce:c7:a7:8a:57:4b:e4:7d:a5:
         e6:b4:72:3d:f3:11:37:bd:17:19:cb:ff:b9:d1:c6:2b:49:0a:
         bb:90:98:57:7f:36:cd:8c:b7:8f:71:de:9f:0a:17:f1:28:f9:
         dd:53:bc:36:ec:c0:d0:ac:a0:a4:64:cd:d5:0d:93:e8:5d:d9:
         f3:d2:c4:52:17:69:21:a4:e6:cf:38:16:e4:42:fe:88:e8:3e:
         7d:65:a7:55:9b:fa:dc:c2:9a:5f:73:3f:a0:14:7d:e6:e0:84:
         36:23:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:34 2024 by rpki-client on console-ams.rpki-client.org