Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
File:                     LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json)
Hash identifier:          VgNE78GuseuR3ANh009Q/x/avxKvj8h/KBGI7E7g7ww=
Subject key identifier:   F7:3B:C0:6E:0A:49:69:97:0B:60:02:44:F7:8A:DE:F5:DE:C8:0D:8A
Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
Certificate issuer:       /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
Manifest number:          0143
Signing time:             Sat 23 Nov 2024 02:45:53 +0000
Manifest this update:     Sat 23 Nov 2024 02:45:53 +0000
Manifest next update:     Sat 30 Nov 2024 02:45:53 +0000
Files and hashes:         1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: O+E+Jz+oHmkamsTLqYoKaL3dhYwp6OD+PrMFGuNyIng=)
                          2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: 8ltsRSMx/O4P5xBIXkQL3DQXOAFh4xAYUfE8ZE3IXvQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
                          rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
        Validity
            Not Before: Nov 23 02:45:53 2024 GMT
            Not After : Nov 30 02:45:53 2024 GMT
        Subject: CN=674141e1-f29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:9f:2b:1f:1c:68:fc:b5:62:f9:b3:cb:82:
                    60:7a:61:fc:69:39:74:6c:29:0f:a5:cb:dc:8e:70:
                    15:7a:6e:bb:e6:13:10:3f:f1:8a:8a:b5:ab:2c:ab:
                    09:46:eb:15:b1:8e:b0:3e:f7:e9:5d:28:d0:93:f7:
                    b6:ee:5e:df:af:ea:48:f7:1d:3a:f9:b2:a9:a5:7c:
                    49:c9:ec:74:62:f8:91:6b:2e:b5:18:b4:ae:27:26:
                    68:f3:5c:e2:2d:e5:78:3c:e9:98:a5:91:10:5b:a9:
                    e5:45:e3:5a:34:c3:ff:37:93:e4:e9:06:f5:d3:8e:
                    92:29:96:cf:41:c8:9e:6d:00:b5:63:0a:fe:d5:bb:
                    c5:0c:8a:e7:bc:69:fa:38:7d:c4:91:d8:7a:64:d6:
                    12:3b:63:e3:76:b5:e8:92:fa:8b:14:92:b2:42:0c:
                    ac:ee:d3:4f:5d:d7:e4:90:d5:71:9f:f8:ba:ef:8f:
                    d4:b6:ea:2f:4d:4f:28:d9:71:92:cb:0a:4f:3c:a4:
                    45:67:81:ea:d8:42:5c:5c:35:64:93:da:e7:f9:dd:
                    39:7f:05:2f:70:01:4f:51:7e:f4:3a:26:37:45:7c:
                    db:49:36:96:d9:3a:53:05:3c:0e:25:4e:39:e9:74:
                    75:5f:26:be:ce:82:d6:5e:d2:5e:7d:71:4b:54:17:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3B:C0:6E:0A:49:69:97:0B:60:02:44:F7:8A:DE:F5:DE:C8:0D:8A
            X509v3 Authority Key Identifier:
                keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:83:e8:42:ab:94:a8:e6:2d:bd:2f:15:fb:4f:be:dc:69:09:
         e1:40:34:bf:f6:fb:1a:1e:92:33:dc:86:e0:b3:4c:9b:ad:27:
         98:06:95:6a:67:b7:57:2c:f7:6c:93:34:0e:d4:a6:7a:e1:52:
         1b:d2:b3:60:d5:f9:04:25:36:5e:9a:a3:4e:ed:02:6b:13:15:
         3b:6e:be:14:5e:b9:d5:50:21:a0:a0:12:47:47:c0:15:22:2f:
         30:ef:35:1d:e6:b5:aa:13:b3:2c:d5:d3:5b:8e:ed:98:40:5c:
         f3:50:65:26:90:1c:c4:3d:34:e0:a6:c8:8d:31:2d:fc:18:ff:
         a6:d4:a3:d2:97:a6:e8:e2:5d:5a:12:1f:74:bc:b5:c5:1c:54:
         36:06:ec:86:ab:03:02:3b:ba:17:d1:a3:78:f9:7b:8a:b4:e0:
         12:64:fd:3e:3d:e1:5c:29:11:3d:d9:aa:1c:7f:a6:71:22:c9:
         1e:53:4b:e0:35:66:4f:3b:3f:d5:51:f5:09:db:11:23:a5:b3:
         1f:89:21:d7:3d:94:ad:5a:2d:3f:60:d1:4d:da:40:04:47:58:
         1a:ac:3f:58:6f:13:d0:d7:06:d5:9c:99:20:67:30:ba:2b:c4:
         a7:f2:a0:96:14:d9:58:a1:f8:e2:88:cc:5c:36:47:63:d7:e9:
         f0:dd:c8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org