Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
File:                     DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json)
Hash identifier:          3kw0E4OXKcPaYRnMgdrcG/aem2EnDLYEQ+R+xvL2AM4=
Subject key identifier:   0F:2E:49:F0:31:98:0D:DA:C5:32:CE:80:DF:7A:CB:7F:BB:50:93:06
Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF
Certificate issuer:       /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
Certificate serial:       13DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
Manifest number:          13BD
Signing time:             Fri 22 Nov 2024 23:04:57 +0000
Manifest this update:     Fri 22 Nov 2024 23:04:56 +0000
Manifest next update:     Fri 29 Nov 2024 23:04:56 +0000
Files and hashes:         1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: 26ciOrfXoRLq/7WnfRs/v9ns1buKpd/fy3bZAxqnZok=)
                          2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: 8bgY9X9zB6LmnNiLcUdgoM67gP9VrDi2wsZPTMT2X3c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl
                          rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5083 (0x13db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
        Validity
            Not Before: Nov 22 23:04:56 2024 GMT
            Not After : Nov 29 23:04:56 2024 GMT
        Subject: CN=67410e19-052c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:36:6b:f4:b9:a1:93:c1:ec:c0:68:b2:70:
                    36:69:76:5e:f4:e2:f2:ba:49:fd:43:05:cb:e8:7c:
                    f0:fd:d8:02:15:d8:99:86:55:c6:aa:c9:a1:92:26:
                    35:48:cb:65:a3:24:a7:81:51:e6:ad:53:5a:85:7f:
                    76:fd:18:92:99:27:5e:dc:92:70:49:a3:de:30:0b:
                    ac:8e:aa:5d:69:17:d6:89:ce:5d:60:a4:8c:8e:e4:
                    fe:b5:f1:0b:b4:52:dc:5d:41:d3:c6:dd:b2:f5:6a:
                    7a:8b:a2:88:d9:4c:36:c9:79:ce:dc:c9:53:a0:4c:
                    55:75:69:d9:6c:36:7b:2c:5e:4a:e5:6c:1f:89:49:
                    66:9a:cd:e8:9d:47:26:ea:64:4f:f4:43:c3:54:b1:
                    1c:01:99:c7:b0:d9:54:40:1a:a2:7e:d8:1e:ef:56:
                    b4:36:3c:c1:bd:85:9c:89:4a:53:d8:2c:30:50:53:
                    79:fc:72:22:37:67:95:23:44:7b:42:d4:28:25:8c:
                    4b:48:a8:8e:7f:bd:42:d3:ef:60:96:fc:ce:8f:dc:
                    38:f4:52:0d:4f:45:27:32:76:2a:1e:a7:a1:7c:e0:
                    dd:90:49:24:8a:aa:5e:5f:25:65:39:e2:39:86:0a:
                    94:eb:97:da:55:ce:c5:0c:63:5c:7d:82:e7:84:34:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2E:49:F0:31:98:0D:DA:C5:32:CE:80:DF:7A:CB:7F:BB:50:93:06
            X509v3 Authority Key Identifier:
                keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:28:80:20:72:20:5d:53:69:95:7b:61:20:57:f2:40:15:61:
         07:f7:81:4f:60:74:65:d0:ec:76:2a:1c:42:cd:08:9e:2f:b2:
         7a:c0:f6:e2:9a:34:8c:e6:ea:9c:cb:23:2f:d8:84:7b:d7:a3:
         f2:44:bf:f6:f1:80:7c:f6:6d:4a:13:d7:3f:74:f5:2c:9a:72:
         11:47:95:f8:1b:45:61:26:2f:49:8e:eb:41:f7:bb:c6:8d:11:
         76:8c:a2:88:f8:5f:33:b3:b4:8c:e9:4d:44:6b:16:85:21:ad:
         8a:06:c9:df:b4:4c:01:88:34:d0:17:9a:6f:af:50:40:e7:7c:
         f7:68:0c:71:3d:6c:a5:48:9f:db:cb:14:b4:93:10:01:19:f3:
         be:d8:09:0c:1c:82:ea:9f:66:cc:85:c0:41:6e:4d:8b:0a:39:
         70:38:70:55:0e:f6:00:5e:93:20:2c:09:86:9d:9f:3e:ba:06:
         b1:b8:3f:93:00:54:13:ad:16:33:1c:92:20:e7:2c:91:18:44:
         42:99:96:4e:96:73:e9:9d:15:8f:58:90:8e:b8:09:09:08:bd:
         ee:30:37:ca:ab:3d:52:b1:99:42:75:2d:f7:6c:00:6b:99:ff:
         14:b5:7c:09:e4:fd:45:20:be:1b:8f:b1:4d:5e:93:7d:40:3a:
         98:05:ec:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org