Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
File:                     rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json)
Hash identifier:          MJASbXPH2YY9gUk1IAqGUrXMosJxL2FIXlDpnB0QD0k=
Subject key identifier:   92:3A:1C:16:FF:77:58:83:15:A8:30:FA:75:96:FB:2A:25:92:9B:BB
Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
Certificate issuer:       /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
Manifest number:          C2
Signing time:             Sat 23 Nov 2024 03:56:45 +0000
Manifest this update:     Sat 23 Nov 2024 03:56:45 +0000
Manifest next update:     Sat 30 Nov 2024 03:56:45 +0000
Files and hashes:         1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: mR1joMJoxBOj7GMa1GXGwuOXt4RfU1oUroRLFzigU2o=)
                          2: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: dXDZSfPSyoqfwEaaeMTI4l7Przd6gT4wRfVGbGvRZvM=)
                          3: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: nlX4UA9TsikyajFvvI/4zlXs7BTa/hUYD0dYR5wA+wc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
                          rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
        Validity
            Not Before: Nov 23 03:56:45 2024 GMT
            Not After : Nov 30 03:56:45 2024 GMT
        Subject: CN=6741527d-7cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:0b:b6:11:27:a9:ac:a8:35:67:54:17:77:
                    ff:04:67:80:db:d5:da:ad:fd:70:13:4a:50:e6:a4:
                    6a:4f:11:77:ea:6c:49:8f:c6:89:96:5e:b8:b6:44:
                    e1:9b:5c:85:8f:f3:e7:e7:e4:32:f9:36:a8:67:d8:
                    b8:2a:b4:fe:58:29:28:6a:b3:e4:ba:1e:14:dd:80:
                    33:2d:ed:39:83:1e:e0:f2:3d:e2:af:b5:28:5b:5b:
                    43:da:98:30:0e:b7:04:50:fb:b5:af:2c:f5:42:6d:
                    b9:dd:69:4f:6b:aa:ea:24:bb:16:f0:76:4d:51:8b:
                    3a:25:c5:30:49:da:c7:96:af:d2:dd:9b:51:a0:20:
                    af:a4:87:7d:36:93:56:5c:82:36:fe:36:44:1c:26:
                    8a:93:75:99:34:8d:29:76:33:55:5d:3d:3a:dc:76:
                    18:98:23:ee:95:ce:fb:cd:3f:1c:38:c5:6e:78:ab:
                    14:a7:c0:9b:42:e2:52:76:dc:2e:18:fa:7a:42:54:
                    bc:47:e7:5f:cd:87:3a:77:10:d4:d8:c6:c9:cd:68:
                    24:be:25:98:f2:72:ff:39:0a:0d:1b:6e:8f:4b:e1:
                    78:08:d0:5f:22:25:ba:5c:0c:ec:74:0b:b5:04:ee:
                    85:52:3b:82:e0:ec:d1:ff:d0:39:17:c6:1e:81:a5:
                    ae:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3A:1C:16:FF:77:58:83:15:A8:30:FA:75:96:FB:2A:25:92:9B:BB
            X509v3 Authority Key Identifier:
                keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:3f:a9:fc:52:02:6f:f7:e7:e9:35:ed:f9:1c:48:71:fc:1f:
         ea:53:21:aa:37:15:8b:53:b2:ff:7d:91:f9:20:e5:bc:9b:c4:
         4d:c0:c0:4c:65:c2:51:2c:0f:21:bc:0b:0b:75:61:2e:e9:29:
         03:fa:75:fd:bf:8c:36:f8:11:a1:e4:f9:8d:c2:eb:5a:79:e6:
         0f:a1:92:b3:5f:84:f2:b9:53:76:8f:72:0c:42:c7:75:08:0a:
         4a:a4:01:32:01:d7:4c:b2:03:a0:94:a1:da:41:c7:0d:27:c9:
         31:09:5d:c8:4b:8a:d9:9e:b7:3a:df:41:19:e0:d3:83:3a:67:
         c9:eb:30:5e:a7:4e:01:fe:c5:a5:63:ba:af:9d:26:8f:0e:9d:
         34:30:44:7b:ad:e7:52:1b:cb:7a:a3:dc:67:f1:a7:d2:6a:df:
         d4:f5:52:cc:ef:90:eb:d2:73:93:d5:6a:d3:b3:bc:22:fd:19:
         76:a9:98:10:25:e8:c8:1c:e9:a2:57:33:c5:b6:16:8e:df:db:
         d9:57:44:fb:c8:ec:5e:5b:c1:d0:19:25:ad:a3:58:ee:ff:be:
         f8:60:37:2a:07:c7:17:4b:97:09:76:f0:29:cd:d3:c0:1f:81:
         84:ff:db:5f:c5:a5:71:98:d5:cc:fe:7c:e7:d5:04:39:db:fd:
         ae:28:79:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org