Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
File:                     Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft (raw, json)
Hash identifier:          SvMGgr1KAjpOYu9SMs9foskunY+8TgO5B88NvX8lz/Q=
Subject key identifier:   6A:32:88:9E:C7:B9:2E:F9:B6:1E:0C:59:4F:87:A9:8E:6A:1A:92:EB
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Certificate issuer:       /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial:       1982
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
Manifest number:          196C
Signing time:             Fri 22 Nov 2024 16:25:36 +0000
Manifest this update:     Fri 22 Nov 2024 16:25:35 +0000
Manifest next update:     Fri 29 Nov 2024 16:25:35 +0000
Files and hashes:         1: Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl (hash: u9Se9StzShPiT6BJNkcTeQiL8PoI5NuZ7qcjU0TypEc=)
                          2: 3D9FCF3CB74511EBB4D47C23C4F9AE02.roa (hash: 9+3UyD1Q20e2zV38LX7bdeMBcGdkBg9w+aGhhPmiSEQ=)
                          3: 1AC872EC2C9611EF84447F23C4F9AE02.roa (hash: rN5yihShhKdLjzPd/w3ifbi99zxrtnFDkYTWJsfuvtE=)
                          4: CDD1E222775711EF95F9762FC4F9AE02.roa (hash: LmTJ1lQGy1Mj6ugXjLYPPR+nI+hGGbLoo3EtkR/Iu6c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6530 (0x1982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
        Validity
            Not Before: Nov 22 16:25:35 2024 GMT
            Not After : Nov 29 16:25:35 2024 GMT
        Subject: CN=6740b07f-e4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:5c:8c:85:66:23:0c:80:e6:78:e7:47:bf:
                    b7:f9:c3:90:9f:7d:83:70:01:71:b2:bc:30:7b:98:
                    89:47:9e:31:69:0a:4b:3c:5d:c2:0d:01:dd:fc:50:
                    79:c8:38:64:d2:9d:37:6d:b6:f3:d8:33:aa:a0:d7:
                    41:c5:68:76:f1:2e:b8:ca:01:0d:84:e0:67:ae:04:
                    8e:2b:3c:71:c8:aa:8f:bb:f1:56:b3:3c:e0:af:34:
                    2b:46:51:68:14:1c:69:28:bc:89:56:0c:99:ba:0d:
                    7f:a2:2f:65:9e:8c:63:20:e7:b2:84:e8:75:c3:68:
                    67:d8:f7:76:7a:2f:58:7c:8f:33:4a:1e:35:13:be:
                    35:72:80:4a:c4:3d:89:2a:b3:47:bf:d4:8b:96:4c:
                    a2:c2:de:67:b4:09:b6:7f:ac:1d:81:72:b9:f3:89:
                    8b:8b:5e:98:00:8d:02:22:28:d9:38:38:40:98:1b:
                    e6:57:f3:4a:8d:02:33:03:55:0f:2e:66:5f:d3:f2:
                    0b:80:b7:03:fa:89:ca:de:b3:e0:bd:2a:c1:b4:81:
                    94:11:ec:a1:08:d9:ea:2a:ba:32:64:3e:71:50:55:
                    36:b7:f6:2f:79:46:04:d0:1a:5e:94:93:20:df:51:
                    ba:4c:09:77:1b:54:88:d0:05:ff:8b:aa:c8:9e:0e:
                    f9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:32:88:9E:C7:B9:2E:F9:B6:1E:0C:59:4F:87:A9:8E:6A:1A:92:EB
            X509v3 Authority Key Identifier:
                keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c9:55:54:8a:fb:b7:05:3f:10:39:ed:5e:30:98:66:08:8d:
         4d:89:92:39:d3:26:d8:f7:51:21:86:74:51:da:eb:70:86:71:
         93:3a:a5:10:a6:5a:a0:21:e4:1e:32:6a:89:54:84:22:b8:13:
         55:b9:99:2f:96:de:f6:5e:34:48:6b:85:d6:c5:db:e0:b3:3d:
         f7:3b:73:cf:6a:63:32:2a:21:1e:9f:b5:cf:90:3f:41:6d:46:
         b3:c3:48:e1:e6:7b:e8:6c:27:72:b4:ef:97:4a:0d:7d:b1:ac:
         5d:ab:31:b0:e4:51:d0:84:b2:cb:59:6c:07:3a:ed:f5:05:98:
         5a:ec:01:58:5d:4d:04:c2:d9:3f:38:c6:ac:81:45:7d:fe:2b:
         74:4d:ee:b4:8a:16:50:40:82:50:40:7c:1a:65:1f:0f:fe:a4:
         c9:35:ef:03:84:78:1f:76:5f:40:44:9d:39:e9:a0:5b:54:2d:
         55:bd:d6:4c:55:72:f9:3e:b3:ce:91:8d:4a:13:98:d9:b5:b7:
         35:ff:55:90:19:73:15:ed:2d:29:14:d5:c4:fc:96:3f:9c:c1:
         b4:6a:a6:e4:76:3c:14:0a:50:48:6c:05:c8:99:3b:a5:09:85:
         15:87:b3:3a:db:32:fb:13:b5:5d:11:2c:f6:92:22:50:43:71:
         92:b8:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org