Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
File:                     sZKtRE3h8t51vroe79Ei7s99d8w.mft (raw, json)
Hash identifier:          zO8ZaAx0zbzLMm0pWTRbSfldXqcT/3JaTOaODhmNt34=
Subject key identifier:   D1:B8:44:83:C2:34:FC:91:FC:1B:7C:BB:FE:F0:A0:11:75:55:0E:99
Authority key identifier: B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC
Certificate issuer:       /CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
Manifest number:          FB
Signing time:             Thu 21 Nov 2024 03:20:45 +0000
Manifest this update:     Thu 21 Nov 2024 03:20:45 +0000
Manifest next update:     Thu 28 Nov 2024 03:20:44 +0000
Files and hashes:         1: sZKtRE3h8t51vroe79Ei7s99d8w.crl (hash: sfiCisOZ6zdW/spEaEwjoNshSKRJ1Q528ygiTyaMnLY=)
                          2: 26D3006C2BBF11EE929D0D30C4F9AE02.roa (hash: n5e8CDobVexI/8nfPrSZsfP9yc0mgwJtVCiNZA8JziA=)
                          3: 3CDE30F22BBF11EEBCFC8037C4F9AE02.roa (hash: cIG0w6MiaHVhtlfms6mq3GfZxReFURoHuFw/wrX7B2k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl
                          rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
        Validity
            Not Before: Nov 21 03:20:45 2024 GMT
            Not After : Nov 28 03:20:44 2024 GMT
        Subject: CN=673ea70d-24a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:8a:74:62:f7:fa:61:87:32:4a:63:b3:3b:
                    bd:8b:32:c5:dd:32:5c:92:dc:a9:80:7d:46:43:31:
                    79:13:73:86:83:57:9e:ec:e0:77:c7:27:10:41:84:
                    49:41:fd:1b:5c:1b:ca:85:b8:5a:72:a4:3a:f7:54:
                    3d:f2:b7:88:bc:53:57:ee:af:22:0d:32:c5:cc:0f:
                    6f:8e:cd:41:ee:7b:ee:00:4b:65:3f:f4:0b:49:3a:
                    41:09:80:ee:9b:b4:c1:22:fe:44:09:fc:94:d6:c2:
                    a1:54:9d:a1:83:d1:83:07:02:f5:c0:ad:fc:82:41:
                    a6:39:2e:db:85:54:5c:a8:7b:cd:96:32:ce:84:e4:
                    91:67:9c:3e:16:ff:d1:26:8a:17:9c:91:5c:1b:db:
                    73:82:7d:7f:6c:fb:81:97:6e:c4:fb:f3:c0:e9:b7:
                    d3:19:d7:f4:41:7b:19:35:f0:0c:98:aa:de:b5:d5:
                    02:1f:49:c2:2e:c8:92:ca:36:61:7c:20:d4:47:3b:
                    29:d0:ca:cf:86:45:fd:2f:0d:e3:05:2c:d7:03:1e:
                    fd:4f:75:28:f4:11:e2:21:f0:17:af:2e:f7:ec:b1:
                    b6:0d:01:89:d4:32:43:32:ad:5d:50:84:59:74:bd:
                    f1:cc:58:73:66:fd:30:3a:88:2e:25:cf:95:de:af:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B8:44:83:C2:34:FC:91:FC:1B:7C:BB:FE:F0:A0:11:75:55:0E:99
            X509v3 Authority Key Identifier:
                keyid:B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:4e:ae:63:99:5a:7b:d4:c0:18:cb:36:d2:71:84:29:30:5a:
         8f:58:47:b4:23:90:5e:02:df:22:88:be:27:41:58:d2:55:43:
         83:9f:6d:9f:29:06:02:24:fe:fc:35:22:b9:3e:5a:04:ee:f4:
         d0:68:9a:79:b3:71:8a:7a:c0:65:c1:ca:19:bc:db:5c:53:b2:
         ce:b7:ac:2e:82:e2:9b:4e:b8:17:cb:03:e1:6d:22:68:e3:1a:
         d3:1f:48:27:df:29:17:d0:75:a8:38:cf:4d:ee:7c:4f:fb:58:
         41:db:08:51:93:7c:16:b3:eb:5c:36:e4:c0:a9:a6:95:ce:84:
         2a:5f:be:ae:6b:98:e3:9a:2c:41:fe:b1:4c:25:c5:73:a5:52:
         4d:bb:31:20:fc:9e:cb:12:9f:cf:f9:43:4e:a6:5b:38:a5:fb:
         85:98:6b:6d:3d:12:1f:8b:c7:89:35:f6:c1:de:56:b1:39:cb:
         e4:16:bc:fe:04:2c:e7:50:31:40:ab:d1:21:67:1c:5a:3d:2b:
         31:b8:5c:81:46:75:f5:73:25:fe:1f:a4:7d:30:9d:45:e1:86:
         0d:98:39:e2:e9:0e:42:85:80:a0:29:92:8d:df:57:53:8b:ba:
         2f:fe:e4:7f:30:79:b4:d8:0d:c1:01:fa:fc:41:00:8f:a6:df:
         18:16:f4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org