Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
File:                     4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json)
Hash identifier:          EX5msIjQeoH/x5YQq5a4A9OUT4OgvLASYpZHlzLQqfo=
Subject key identifier:   E0:42:CE:C8:F2:F5:F9:36:8A:B5:22:EB:18:9C:18:B5:AE:14:4B:4A
Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
Certificate issuer:       /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Certificate serial:       049A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
Manifest number:          0498
Signing time:             Fri 22 Nov 2024 23:31:53 +0000
Manifest this update:     Fri 22 Nov 2024 23:31:52 +0000
Manifest next update:     Fri 29 Nov 2024 23:31:52 +0000
Files and hashes:         1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: eAuRxvZsAkfl4GUIjAfYbwg62umt4sm8iPHj3Z0XZRM=)
                          2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: mjyt1YwDNmlbVB+s1ceKNJUb36Gp/fdDhWoek/UDCZM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
                          rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178 (0x49a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
        Validity
            Not Before: Nov 22 23:31:52 2024 GMT
            Not After : Nov 29 23:31:52 2024 GMT
        Subject: CN=67411468-0cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:81:be:68:88:8f:84:5b:67:29:e1:59:e0:
                    13:10:5b:79:88:59:77:8a:48:35:c8:84:35:97:44:
                    a3:66:b3:79:6d:22:31:3b:49:a0:1d:2c:44:bd:50:
                    84:dc:22:16:d8:ac:83:54:1e:99:cf:63:70:78:5d:
                    b7:bf:9b:50:34:3c:68:91:03:76:73:e9:63:5f:33:
                    25:f9:cb:52:82:e4:d3:57:63:1f:f1:35:53:bd:5b:
                    2f:3a:16:27:a4:59:ff:7f:84:79:2a:e3:cb:1f:d0:
                    0d:05:f2:69:10:1f:5c:8a:b7:8f:aa:47:3c:ef:c6:
                    4d:fb:1c:df:70:7d:30:4c:fe:e9:9d:e3:12:73:8b:
                    2e:8c:0a:f6:9b:1e:ba:b2:2f:a7:2e:96:60:8f:db:
                    c4:b8:98:92:b9:0b:89:c7:41:c9:c8:08:ff:08:b1:
                    a5:71:b4:6c:7c:78:64:28:1b:ea:8c:8e:6a:30:bb:
                    5b:d6:9a:f9:12:38:ef:21:73:2d:a5:cb:7f:48:29:
                    e4:8f:ed:25:84:c3:40:22:0d:1d:ca:be:fb:14:b1:
                    8c:0f:d2:e5:76:48:5b:e7:27:cd:e5:d2:66:3c:d3:
                    d8:5e:ef:56:07:a8:9a:5a:3f:7c:59:d8:a1:e1:41:
                    5a:ce:ba:c9:fe:bd:6b:cb:82:8e:4d:9d:78:14:c6:
                    9b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:42:CE:C8:F2:F5:F9:36:8A:B5:22:EB:18:9C:18:B5:AE:14:4B:4A
            X509v3 Authority Key Identifier:
                keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9a:45:82:18:d2:ce:be:a6:0e:2e:91:75:fe:0d:13:c8:c9:
         e2:35:ab:4c:1b:10:f2:1b:ba:9e:e1:26:d0:00:f7:4a:e8:e0:
         a4:6b:0e:b1:b5:a9:08:cc:44:c2:6f:75:42:dc:e5:a8:5d:b0:
         3f:69:d1:b1:48:43:78:2b:cf:bd:00:ef:15:46:4d:7c:be:bf:
         46:0a:8d:c5:64:39:e8:ae:a4:c4:cd:c4:f8:d3:25:f3:ed:0c:
         3f:8d:3a:9b:9c:97:f9:50:b2:ca:51:ac:56:77:9b:b4:3d:62:
         e7:d2:00:71:2f:b8:5b:ef:18:9b:ca:8a:f2:c3:ff:51:fa:3b:
         eb:18:af:4f:e8:8c:5d:78:89:a5:22:7b:df:56:3d:d9:23:c7:
         90:0a:cd:96:56:73:64:20:25:fc:17:91:75:b2:00:4c:9a:92:
         62:e2:29:92:12:f2:d0:8c:97:48:7c:12:c9:15:20:9f:6b:b5:
         cc:5b:24:d7:85:34:f1:63:d4:79:6b:27:2a:56:e2:50:24:42:
         60:f2:d5:67:7d:4a:99:85:e9:83:b6:79:3f:2e:06:a3:29:e5:
         ae:fb:f3:a3:c0:05:94:12:2d:c0:73:ec:2e:b0:a7:12:17:6a:
         8a:5c:a0:6b:df:d1:f9:d5:00:0f:00:21:c1:c5:8b:e4:d9:ac:
         87:20:85:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org