Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
File:                     qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json)
Hash identifier:          TRkxdMHseG+w7TKpB6i9KwEfeLvTJfmLUKPSPP7D+Nc=
Subject key identifier:   C0:7C:5A:01:D5:77:6A:A2:B6:10:EF:16:19:F0:1D:DE:B5:73:58:5A
Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
Certificate issuer:       /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Certificate serial:       06F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
Manifest number:          06E2
Signing time:             Fri 22 Nov 2024 21:38:46 +0000
Manifest this update:     Fri 22 Nov 2024 21:38:46 +0000
Manifest next update:     Fri 29 Nov 2024 21:38:46 +0000
Files and hashes:         1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: X8VGjF5ZOMiuotQ/sCsWV3IR3EsRM3X0YrJ6kfZqAi8=)
                          2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: 7TiOJsMX/wgaeKFEpKrzPspRYI7TQpEjsx5oLZcM6fo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
                          rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778 (0x6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
        Validity
            Not Before: Nov 22 21:38:46 2024 GMT
            Not After : Nov 29 21:38:46 2024 GMT
        Subject: CN=6740f9e6-e7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:77:f9:be:b9:b9:17:c9:91:80:f9:af:57:
                    22:db:e1:69:13:bb:f0:1e:57:4b:66:5d:9d:6f:9a:
                    75:e9:80:b6:81:2c:c4:76:ed:0d:33:5c:a9:a3:d0:
                    70:5e:75:02:97:f9:19:52:b7:83:a3:31:fe:ac:5a:
                    b0:28:03:96:f7:09:3d:40:25:19:53:9b:39:34:34:
                    bb:f5:03:76:e4:c0:d3:88:8e:4e:5f:b4:9e:18:41:
                    a0:47:54:38:65:0d:73:8d:a5:fb:de:63:f4:ed:bf:
                    c1:1b:97:2f:8a:71:d9:20:b4:de:b5:88:fb:53:c7:
                    af:f8:d0:7d:04:5d:fc:5c:9d:85:c0:13:96:8b:e4:
                    79:0c:ea:81:21:b4:7c:e1:9c:8c:79:65:47:82:49:
                    02:c1:93:ac:33:e5:12:6a:3c:df:f3:fd:a8:8f:4a:
                    dd:12:d3:bc:64:ba:d5:e1:89:1a:71:b2:97:b7:06:
                    30:0c:8b:e8:fb:c5:15:23:9a:c9:db:fd:cc:23:29:
                    f5:c1:05:29:2b:19:a6:20:e7:46:06:98:19:2f:6b:
                    b5:de:ca:c8:e0:e4:7d:91:22:da:9e:57:43:7e:d6:
                    dd:1e:83:93:9f:d4:21:5f:66:a5:fe:a4:d9:b6:3f:
                    ab:ef:95:f8:c8:17:35:70:f9:0c:ba:35:6c:dd:7e:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7C:5A:01:D5:77:6A:A2:B6:10:EF:16:19:F0:1D:DE:B5:73:58:5A
            X509v3 Authority Key Identifier:
                keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:be:d3:18:f2:c2:0b:de:51:69:fb:49:db:97:e5:b0:c0:78:
         15:25:da:67:5c:7e:1b:ce:cc:1b:61:ec:88:69:60:6b:e8:0e:
         f8:1b:e4:99:49:80:4c:34:80:c8:56:15:43:59:6e:e3:6f:1b:
         c1:9d:20:ee:53:35:ea:ad:0a:b8:b8:ee:69:8c:f1:95:21:01:
         6c:fa:b7:f5:cb:60:b7:35:e5:51:f6:df:64:a1:18:06:33:fe:
         d8:14:03:dc:29:f5:ff:16:ca:04:15:c9:b6:e5:0b:38:1d:6d:
         fc:50:65:da:a2:80:06:ec:7d:07:ec:b9:8a:c5:ae:7e:d6:2f:
         cc:20:ea:ad:4a:27:a1:ce:42:59:b9:98:64:5b:68:85:47:08:
         fb:14:ee:31:bf:9d:8f:0c:1c:1f:0d:38:37:08:54:f1:98:24:
         e1:dc:6b:f3:6c:c9:da:dd:09:fa:b1:d9:90:69:22:a2:41:80:
         d2:ae:6b:67:f2:ac:84:5a:ac:11:f0:4f:fd:a2:08:ba:f2:2c:
         43:3f:de:ae:5b:01:d5:4a:6c:a5:df:b0:b0:06:38:19:dd:b0:
         4a:e2:83:95:a4:f4:3e:f9:21:c9:a6:cc:4e:02:3b:1e:b0:98:
         bf:75:a6:07:e1:41:a8:22:fc:72:8f:6c:78:c7:70:69:9b:41:
         84:19:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org