Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
File:                     atr7oploMMUdaBwyEtBLXHJMEx0.mft (raw, json)
Hash identifier:          tG80EoQiV4HBOE5Gafq1em6uJgEQWfCPmB7z/EHoYCc=
Subject key identifier:   F2:3A:6C:C7:5F:36:46:88:4C:81:DB:C4:65:22:C9:CF:1C:17:25:62
Authority key identifier: 6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D
Certificate issuer:       /CN=A913F8FC/serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
Manifest number:          A0
Signing time:             Sat 23 Nov 2024 04:23:30 +0000
Manifest this update:     Sat 23 Nov 2024 04:23:29 +0000
Manifest next update:     Sat 30 Nov 2024 04:23:29 +0000
Files and hashes:         1: atr7oploMMUdaBwyEtBLXHJMEx0.crl (hash: DYj3nxzYI12ZULFd4/Q25+qHYmjnTT/AgOmYA/ILx+s=)
                          2: 8EE39CBEBD1B11EE9256E851C4F9AE02.roa (hash: jRdYoSLqX1McavAvcMe6uOX0PZVOdCEP8k8+NHeutBg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl
                          rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F8FC/serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
        Validity
            Not Before: Nov 23 04:23:29 2024 GMT
            Not After : Nov 30 04:23:29 2024 GMT
        Subject: CN=674158c2-4d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:d0:4b:a1:07:59:c3:18:13:4a:3a:60:5e:
                    0f:3d:13:cd:35:bb:f5:95:e7:d9:68:49:8a:29:9a:
                    4a:11:34:64:71:54:f9:ce:e4:46:98:73:39:1b:a4:
                    67:2c:30:82:1a:0a:d1:63:f7:4b:d9:b8:a0:67:f6:
                    9c:92:24:3e:34:3d:a5:80:bc:40:ef:06:de:6f:a5:
                    37:59:f3:c0:f3:38:af:28:23:74:38:8b:84:1a:18:
                    f4:7c:b0:59:a7:b5:d9:a8:57:a1:ab:25:65:6a:33:
                    23:8c:42:d5:d5:cc:22:93:89:85:50:f4:2e:7f:c7:
                    91:31:5d:0a:a9:5c:03:df:d9:dc:61:8f:bd:5f:22:
                    b5:b7:00:85:e6:86:3f:c4:29:f4:53:37:73:00:9b:
                    c3:65:08:d0:6f:8a:57:0f:54:dc:f7:26:d4:03:46:
                    21:a8:96:59:20:ae:c8:ab:fd:c3:f9:9b:24:f8:19:
                    90:71:2c:be:ca:f8:5b:5b:e9:48:9d:78:c8:ab:ea:
                    a1:23:f6:de:59:f7:81:98:df:26:76:42:e6:d7:93:
                    dc:e5:da:c7:b1:13:5c:ff:2f:46:42:a8:c1:5f:f1:
                    9e:99:9f:a4:fc:11:8c:ab:b7:27:d6:e4:c3:eb:cc:
                    0c:6e:9e:77:fc:05:b7:50:dc:58:56:bf:f9:5e:45:
                    bf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3A:6C:C7:5F:36:46:88:4C:81:DB:C4:65:22:C9:CF:1C:17:25:62
            X509v3 Authority Key Identifier:
                keyid:6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7c:98:8d:5e:e6:ed:a5:53:8e:38:91:f7:aa:2e:40:47:ca:
         48:e1:8f:f6:fa:eb:a8:b4:8e:0a:29:65:2a:0c:61:fc:41:b2:
         33:d5:8c:04:85:b4:c8:e6:ff:27:c3:ef:55:ef:88:f3:82:bf:
         d0:1a:d6:18:04:bb:93:b3:24:1c:7e:07:99:50:d1:3f:a1:15:
         09:0c:3d:ac:78:94:1c:5a:75:ac:1e:02:5b:1d:d4:12:30:36:
         bd:8c:a6:9b:32:1e:7b:03:9f:aa:63:35:4a:99:e3:eb:81:64:
         0f:f0:0f:f2:44:cc:78:c8:90:fe:4c:1d:f2:e1:c2:12:ee:34:
         8f:15:6b:8c:bc:0b:7f:88:fd:f0:a3:ea:ba:e2:b4:d5:aa:ed:
         a1:6d:2e:4e:f6:f1:bf:2a:06:91:3e:d6:cd:2b:e9:2d:15:2b:
         f9:d1:61:55:22:1e:2f:c8:df:18:a0:20:01:3a:6c:ef:2f:f9:
         bb:15:58:e1:93:9b:40:a0:dc:c9:ae:c6:04:ae:a7:c3:fc:b1:
         c0:73:30:4f:72:e4:7d:ca:a4:ce:6b:77:f7:5a:5d:69:c6:7f:
         62:b6:d5:a6:2b:bf:5b:a2:66:ed:24:49:7f:06:58:59:e1:b9:
         f1:9f:8b:54:ae:2a:15:b0:5f:54:5b:c1:e5:5b:19:16:30:5b:
         ba:3c:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org