Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D657/7167885E42F811EA87424C3DC4F9AE02/uTpsTJBSDd3Jmj02SQW1UjV00yQ.mft
File:                     uTpsTJBSDd3Jmj02SQW1UjV00yQ.mft (raw, json)
Hash identifier:          34iudnlAmiEC1jS7qol95ic4zu0RfqOJBSTfeeEtQkU=
Subject key identifier:   7E:60:FB:7F:FA:8D:8E:FA:02:9A:06:3B:96:94:30:27:BF:52:83:D9
Authority key identifier: B9:3A:6C:4C:90:52:0D:DD:C9:9A:3D:36:49:05:B5:52:35:74:D3:24
Certificate issuer:       /CN=A913D657/serialNumber=B93A6C4C90520DDDC99A3D364905B5523574D324
Certificate serial:       0AB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uTpsTJBSDd3Jmj02SQW1UjV00yQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D657/7167885E42F811EA87424C3DC4F9AE02/uTpsTJBSDd3Jmj02SQW1UjV00yQ.mft
Manifest number:          0AAA
Signing time:             Fri 22 Nov 2024 19:16:38 +0000
Manifest this update:     Fri 22 Nov 2024 19:16:38 +0000
Manifest next update:     Fri 29 Nov 2024 19:16:38 +0000
Files and hashes:         1: uTpsTJBSDd3Jmj02SQW1UjV00yQ.crl (hash: O8XmtdYsKBNJTb87TdVGcZGQZo8zc/LlBd3/muPqA5o=)
                          2: E40F9840431D11EA9772B432C4F9AE02.roa (hash: lJj0lEitjgrqi8XLQtDJNuTNmGXS6tADBUsrYZnfIUE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D657/7167885E42F811EA87424C3DC4F9AE02/uTpsTJBSDd3Jmj02SQW1UjV00yQ.crl
                          rsync://rpki.apnic.net/member_repository/A913D657/7167885E42F811EA87424C3DC4F9AE02/uTpsTJBSDd3Jmj02SQW1UjV00yQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uTpsTJBSDd3Jmj02SQW1UjV00yQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2738 (0xab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D657/serialNumber=B93A6C4C90520DDDC99A3D364905B5523574D324
        Validity
            Not Before: Nov 22 19:16:38 2024 GMT
            Not After : Nov 29 19:16:38 2024 GMT
        Subject: CN=6740d896-7842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:93:23:fc:52:d9:52:51:10:8a:0b:f4:25:bf:
                    17:79:2a:6a:9d:4f:b7:13:15:0c:04:ee:f9:a4:c6:
                    f3:85:3e:16:1f:df:8e:fe:95:c3:df:25:7e:95:97:
                    a3:1c:6d:d8:e5:f7:07:ef:da:66:91:42:95:e0:b2:
                    3f:ca:a6:ce:29:29:24:03:c9:ca:03:ef:d4:f4:79:
                    13:d2:15:90:b0:1f:0a:92:2d:78:98:77:de:1e:51:
                    4f:2f:40:8e:80:1b:0e:f2:f4:12:18:b4:b8:35:6c:
                    3e:0f:54:fd:f5:98:f1:3c:14:ca:00:61:97:3b:5d:
                    d4:90:c6:1e:1f:15:05:48:b6:16:31:68:8b:84:ce:
                    2c:00:78:07:da:21:24:87:2b:6a:c3:64:23:28:a0:
                    9c:36:f0:3c:47:2e:98:87:0f:6d:22:f4:09:39:5e:
                    e0:a1:c1:1b:8a:53:f8:06:9a:3e:74:cf:b7:56:02:
                    8f:a1:cc:2d:26:f9:b9:7f:03:ab:0e:da:f8:a0:63:
                    e7:cd:e3:b4:f0:23:32:ac:ab:90:6d:6d:cb:2e:da:
                    23:96:9b:5c:cf:41:ef:29:1d:26:7e:c6:b3:ac:2d:
                    00:6a:ae:df:0c:a8:6d:f8:af:fd:46:27:c7:94:be:
                    96:2f:07:12:2a:89:f9:06:1e:dc:61:41:f4:2f:94:
                    70:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:60:FB:7F:FA:8D:8E:FA:02:9A:06:3B:96:94:30:27:BF:52:83:D9
            X509v3 Authority Key Identifier:
                keyid:B9:3A:6C:4C:90:52:0D:DD:C9:9A:3D:36:49:05:B5:52:35:74:D3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D657/7167885E42F811EA87424C3DC4F9AE02/uTpsTJBSDd3Jmj02SQW1UjV00yQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uTpsTJBSDd3Jmj02SQW1UjV00yQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D657/7167885E42F811EA87424C3DC4F9AE02/uTpsTJBSDd3Jmj02SQW1UjV00yQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:10:c4:63:b4:ae:61:0d:fc:63:d9:94:cb:c2:11:42:3f:59:
         72:cc:8c:23:c9:5b:25:c9:35:94:7b:bb:2a:52:00:ec:eb:9f:
         42:3f:26:c7:0f:ca:52:68:27:71:df:30:6e:38:d3:f3:94:b0:
         f6:01:d6:5c:65:a1:2d:9a:07:61:02:a5:fc:06:83:3d:84:1a:
         c5:bc:4a:07:bc:8f:f0:5e:40:95:5c:89:27:63:5e:2d:77:ee:
         29:1f:f9:85:b0:0e:9b:74:b3:cf:ec:6f:bc:f7:b5:39:f9:a1:
         10:02:2e:9b:bf:88:b8:a8:df:44:1b:77:df:48:98:fd:63:b5:
         f0:ff:6c:19:56:b8:59:f3:0a:67:7c:79:71:bf:43:35:a2:38:
         18:c1:4b:bb:6a:a8:bc:f3:12:73:a9:7c:d3:1c:8a:09:34:b0:
         04:f4:12:a0:e3:d1:d2:8b:e2:68:b1:3f:ef:42:f4:4a:1a:06:
         81:f0:cb:2f:60:48:26:9d:80:8c:24:cf:2f:50:c6:53:93:b7:
         0e:56:99:6d:b7:88:d8:62:63:4f:66:ec:12:e4:e0:92:81:82:
         fe:a5:b7:74:d3:be:d3:2a:16:cc:67:07:d2:76:a6:2a:19:82:
         5b:a6:9a:9d:a3:c7:c6:73:31:4e:c9:c7:f9:09:3e:ea:ea:52:
         9a:f3:f9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:24 2024 by rpki-client on console-ams.rpki-client.org