Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
File:                     vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json)
Hash identifier:          F/Y0OCl4+pyuajnwh/JCup8U2gJpXmqkYKD/tzkAAhU=
Subject key identifier:   F7:FB:C6:C9:91:3A:AD:77:9D:C2:05:AB:E6:B1:EB:85:32:74:81:36
Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62
Certificate issuer:       /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
Certificate serial:       02BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
Manifest number:          02B5
Signing time:             Sat 23 Nov 2024 01:03:12 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:11 +0000
Manifest next update:     Sat 30 Nov 2024 01:03:11 +0000
Files and hashes:         1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: JsLho1ijoaqZi0tcWHzfDPEIV7m4Af3f1otjNzqjImA=)
                          2: A05195B4633011ED9122442CC4F9AE02.roa (hash: DzVCTjhUidYA2Rg2xDcdlUFOgDtQxj0BrAXsbysJQW8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl
                          rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
        Validity
            Not Before: Nov 23 01:03:11 2024 GMT
            Not After : Nov 30 01:03:11 2024 GMT
        Subject: CN=674129d0-648a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:8c:90:45:77:e0:5b:0e:69:27:ed:e4:c1:
                    77:ca:19:1d:94:f6:1d:45:38:e6:8e:03:a6:54:2a:
                    04:4b:57:b7:5e:df:72:c9:f9:dd:de:88:48:67:58:
                    14:c6:63:85:b7:85:9d:75:da:fa:da:b0:3d:b8:ff:
                    da:67:23:32:62:e4:ae:0e:0a:82:89:08:76:14:a7:
                    37:c4:4c:2b:32:ee:0f:9b:b3:8b:60:56:67:6f:dc:
                    a5:77:fb:b4:7b:a9:44:d4:73:bd:ab:9e:c0:65:3a:
                    42:7f:22:76:03:56:83:03:f2:68:85:7d:43:08:a9:
                    77:84:53:da:c3:24:04:67:59:ca:0e:8c:c5:b3:3c:
                    71:90:ab:71:9a:5a:21:f1:23:90:f0:48:3b:4c:de:
                    15:27:45:69:e5:06:c6:cf:95:6f:99:5e:7d:eb:d5:
                    72:cb:0a:cd:3b:3e:cc:9a:ab:ca:d8:62:ed:5a:f8:
                    7b:b1:44:5c:fa:bd:ca:c0:af:1a:c6:75:70:b7:56:
                    6f:a4:76:fd:16:e9:60:b8:62:18:92:07:76:ce:11:
                    f0:c8:d7:1e:2b:da:64:0c:25:68:e6:5f:8a:9c:23:
                    fc:7e:f4:73:67:d0:a0:51:99:16:8c:19:e4:3a:aa:
                    f8:b5:1c:3d:17:76:60:5e:d9:8b:74:07:80:a5:24:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FB:C6:C9:91:3A:AD:77:9D:C2:05:AB:E6:B1:EB:85:32:74:81:36
            X509v3 Authority Key Identifier:
                keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:06:48:ba:a1:63:4b:e2:b4:47:ec:50:d7:14:ee:c0:31:e9:
         a9:e4:da:06:3c:b0:98:c7:11:3f:e5:6e:19:76:8b:e0:1e:7e:
         ea:45:0b:be:50:dd:3c:4d:95:1a:64:cb:e5:e8:99:3e:b7:61:
         71:22:ce:71:9c:31:09:f9:e2:75:2a:ee:ee:02:4f:56:80:c0:
         f4:39:a5:b1:ef:4f:dd:ee:bc:ee:26:e0:b0:c1:b0:78:46:85:
         4e:20:1d:c0:94:0b:51:96:27:b6:e6:df:2f:d2:2e:2a:7d:bd:
         bf:a5:5c:d3:42:26:8a:5c:a0:38:17:07:42:c2:31:28:b5:12:
         8a:3f:81:26:25:e7:b8:ec:28:63:6d:b6:78:c1:e0:49:35:0c:
         bb:c3:91:7c:e4:c1:7c:46:37:1a:96:0e:b7:bc:e8:bc:2f:b3:
         73:c1:41:88:8b:e5:db:a2:e8:c7:a6:71:44:57:23:4c:90:04:
         04:cd:63:71:92:b8:20:09:33:3e:ad:64:66:3d:ff:c0:0f:da:
         45:04:d8:62:64:b8:3a:6e:c9:1a:4d:b3:11:e9:eb:f9:65:14:
         b1:46:e5:80:d1:a0:8d:62:42:f9:2c:86:e9:63:76:a5:28:0a:
         f1:84:04:87:4d:11:c1:5c:ca:89:00:88:57:0f:a5:a9:40:a9:
         01:b2:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:34 2024 by rpki-client on console-fra.rpki-client.org