Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
File:                     lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json)
Hash identifier:          WwptgWZ52/xAAi9JTyc00SmU/00s/UjbwYZFjMpZvxY=
Subject key identifier:   54:63:C6:9A:61:52:24:2A:43:EC:3D:9A:4F:E5:28:DF:88:99:9E:BF
Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
Certificate issuer:       /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
Manifest number:          29
Signing time:             Sat 23 Nov 2024 05:42:56 +0000
Manifest this update:     Sat 23 Nov 2024 05:42:55 +0000
Manifest next update:     Sat 30 Nov 2024 05:42:55 +0000
Files and hashes:         1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: ESlFwS7z+Zpr66z60swK1EnNFMkd8hwNFpxgmvwr8hk=)
                          2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: ASyOdjxX3bTv6LEG6rhAb+4hOVrCfvwO9cJPKa93j28=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl
                          rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01
        Validity
            Not Before: Nov 23 05:42:55 2024 GMT
            Not After : Nov 30 05:42:55 2024 GMT
        Subject: CN=67416b5f-9bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:cf:1a:8b:37:c1:c4:e7:11:76:8d:22:e4:
                    23:2a:ad:08:17:50:5f:78:bc:08:1e:4a:11:97:98:
                    84:7e:19:7f:83:cc:11:f3:0c:71:f1:68:5a:1d:0d:
                    fc:b5:b8:28:9b:58:0a:f5:7e:08:f6:94:f2:85:e2:
                    51:b1:de:00:6b:2e:f2:92:23:78:47:38:25:16:6a:
                    14:e3:76:a6:e2:5e:00:68:53:6d:b5:f4:2c:d9:bc:
                    45:0c:61:cf:b1:5f:40:cc:b1:38:77:8f:d7:b0:11:
                    be:90:b7:02:f2:35:98:8d:9c:d9:d7:ee:ad:b7:20:
                    a6:dc:ec:13:23:6c:dd:e0:72:f9:b2:a8:54:1a:6e:
                    4b:55:20:ba:82:0f:07:52:6b:11:1f:44:08:bb:16:
                    82:ba:df:5f:ee:9d:ae:19:de:c3:0c:c4:a0:e7:e4:
                    f2:5e:fc:71:4d:cf:d5:ef:68:96:cf:7c:da:88:1a:
                    5c:35:e1:ad:10:94:2a:34:22:51:17:10:e2:09:03:
                    58:60:9b:27:76:16:04:46:a4:e1:04:47:a1:4f:80:
                    9b:57:aa:04:13:65:53:24:91:6e:73:57:f4:41:3c:
                    cb:e0:d9:40:c7:3d:b9:7d:e5:e1:72:77:bd:9f:46:
                    bc:76:48:7a:24:19:a5:fe:4e:8a:26:0d:96:87:e4:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:63:C6:9A:61:52:24:2A:43:EC:3D:9A:4F:E5:28:DF:88:99:9E:BF
            X509v3 Authority Key Identifier:
                keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:62:b2:67:98:52:cd:5b:8c:5a:80:a8:73:16:e5:0b:8f:ce:
         33:f0:cc:7f:b6:b3:2e:cb:97:3c:eb:65:73:54:8f:58:06:10:
         b5:c0:95:32:e7:f4:02:6f:20:78:18:d5:e0:c5:48:73:d3:83:
         ab:15:45:7f:41:01:91:ca:87:f7:83:d4:e0:c7:d8:1c:f4:76:
         1c:0a:4e:fd:56:94:20:e3:67:69:1c:4c:b2:2a:dc:54:de:3f:
         84:9f:88:b1:c4:f7:10:04:ba:80:8d:db:e0:a5:af:c0:8c:34:
         e9:ce:e2:da:88:67:58:7d:08:89:69:08:c3:ca:89:51:cb:d3:
         b1:45:f9:b8:7f:49:a5:b5:ee:0e:50:fb:97:b0:27:10:c8:d6:
         2c:57:a0:86:f6:b1:dd:e1:d2:09:f4:28:e3:ad:1f:31:37:1f:
         5e:77:af:39:a4:4e:a5:5e:29:6d:fd:4f:16:59:b2:39:b6:48:
         9c:cd:ea:61:55:5a:77:83:eb:25:fc:3b:82:c8:06:a0:a4:b3:
         ff:b2:4a:14:f5:ee:6f:18:1f:2c:62:df:4e:ff:51:e7:a2:04:
         32:77:b4:b2:a9:46:77:95:e8:e3:e9:b5:8e:49:4c:d8:9d:c8:
         49:28:4f:44:18:b8:b7:ac:f1:a7:d0:2a:43:ae:60:38:a7:fd:
         65:fd:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org