Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
File:                     ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json)
Hash identifier:          AxVfzMHibueR+vLvG6n06zVxsr0Sy1rZ47pH0/drA2w=
Subject key identifier:   35:CB:DC:A0:54:37:48:68:CB:73:1B:5D:59:B2:26:5A:C4:3D:A1:9F
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Certificate issuer:       /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
Manifest number:          FE
Signing time:             Sat 23 Nov 2024 03:21:38 +0000
Manifest this update:     Sat 23 Nov 2024 03:21:37 +0000
Manifest next update:     Sat 30 Nov 2024 03:21:37 +0000
Files and hashes:         1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: YGQuAwmMINMWi6AeKvIAIUICh/aNF9OINQwsxEgkHCs=)
                          2: 4950E3D278DD11EE8A6C4021C4F9AE02.roa (hash: Wqf/UZ8rMgVoYOxFa1Ev+jSS/yI2xrRNpsu2d8EWaHI=)
                          3: CBCF110C7D1F11EF80D0A264C4F9AE02.roa (hash: t8a9sR6oLKMKZpiGzSHI7sTmBpqhkmpTloPWAXRbA2w=)
                          4: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: WjHWHlMw004j7AFf+/V42umH42AnNHW4KVxKLw4YzKY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
                          rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
        Validity
            Not Before: Nov 23 03:21:37 2024 GMT
            Not After : Nov 30 03:21:37 2024 GMT
        Subject: CN=67414a41-21a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:45:bd:7f:f0:fd:ef:28:98:b1:af:f0:e0:80:
                    fa:7d:b9:b0:f5:b9:e6:d3:74:84:cf:13:3d:7f:9d:
                    0a:36:7c:89:af:dc:9f:5a:ee:fd:4b:d5:9d:88:2f:
                    4f:89:d9:7c:64:55:6c:54:2a:b8:ca:91:48:d5:c1:
                    38:bc:61:de:a6:10:ce:bc:3d:8b:34:ae:81:01:e7:
                    f3:37:12:fc:8b:56:d0:0a:4b:d0:62:bf:97:b9:58:
                    14:9d:83:a1:67:4d:33:7b:c6:cc:86:f4:e5:e5:2a:
                    a1:18:75:c9:4a:db:fa:e5:69:e3:15:81:04:54:2a:
                    a6:41:f7:44:6a:84:83:b8:b2:54:8d:b1:ed:0f:c8:
                    5c:7f:dd:cd:d8:4d:c8:94:57:6e:a6:11:9a:68:3f:
                    66:ee:99:86:69:98:99:d6:cb:25:b4:39:ab:95:56:
                    8e:69:53:fa:4f:10:31:83:48:69:16:4a:b0:7c:7e:
                    34:04:0a:19:31:ba:7f:a4:08:5a:46:fa:91:a3:78:
                    fc:59:6d:69:7d:84:84:78:99:08:07:03:0a:08:f0:
                    53:2b:a0:18:1d:1f:61:45:ce:30:77:d2:9f:24:d7:
                    f0:50:77:38:24:2c:64:5a:ae:e0:19:f9:89:de:ce:
                    5c:7e:f4:5d:1a:37:91:ff:94:1d:11:42:15:0d:1e:
                    2f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CB:DC:A0:54:37:48:68:CB:73:1B:5D:59:B2:26:5A:C4:3D:A1:9F
            X509v3 Authority Key Identifier:
                keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3a:72:42:71:0e:5f:c3:f1:84:c7:3f:92:72:3d:59:8d:4c:
         b4:f0:19:75:76:35:73:d9:6c:32:eb:b0:fe:e6:19:99:61:d5:
         2d:d8:11:e6:f4:df:89:d5:e7:2f:16:2c:40:a6:58:2e:3e:52:
         50:c0:d9:0e:bf:db:7e:46:17:5e:03:be:5b:c0:97:e0:c6:a8:
         e1:2b:a7:59:50:36:0b:17:bf:0b:fe:3b:59:79:9f:25:61:17:
         e8:d4:f2:e8:f3:ff:36:fd:98:99:d8:4e:15:fe:19:2d:26:d4:
         53:48:79:35:07:4d:b3:ec:86:81:e7:5e:24:26:ee:69:e9:fa:
         92:7b:ff:1b:f4:08:5c:9c:19:ce:5e:ac:12:c2:55:2b:b3:68:
         d9:d3:33:82:95:02:57:bc:2b:a3:0c:d1:32:ed:c6:a1:5b:c9:
         80:48:44:db:19:69:eb:b3:22:58:2f:d9:57:c2:c0:cd:91:3e:
         e6:96:32:08:58:34:f4:27:64:aa:04:0d:80:16:0e:ce:05:48:
         a8:0f:01:20:30:bc:77:3b:09:d6:7b:03:a9:cb:d9:31:cc:40:
         8c:89:2e:f7:72:4d:fa:fe:3b:a3:b8:37:d1:8d:91:ee:cf:fd:
         00:a6:e4:87:33:a1:f9:8d:b0:4b:df:3a:ad:e7:3e:d7:46:c6:
         06:e4:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org