Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
File:                     QcEdgay69pPnrWH6EU53uf1PV8M.mft (raw, json)
Hash identifier:          kCXv9pAkQR4m3G+r8yYHrQ/W9UZT42nS4ginXHxGd1E=
Subject key identifier:   A2:5A:84:4F:23:4C:91:A5:E4:A2:B3:60:BC:6E:EF:2D:4E:5D:58:46
Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3
Certificate issuer:       /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
Certificate serial:       05B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
Manifest number:          05B3
Signing time:             Fri 22 Nov 2024 22:40:45 +0000
Manifest this update:     Fri 22 Nov 2024 22:40:44 +0000
Manifest next update:     Fri 29 Nov 2024 22:40:44 +0000
Files and hashes:         1: QcEdgay69pPnrWH6EU53uf1PV8M.crl (hash: eNasLPmSmh7MoP+cmDBT6KNIMi3331AeNPBZaUSzrBo=)
                          2: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (hash: iyBr9siLV3Raf1cSIO0jcjTwdqjbJf25bUYaGgnFBqM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl
                          rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463 (0x5b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
        Validity
            Not Before: Nov 22 22:40:44 2024 GMT
            Not After : Nov 29 22:40:44 2024 GMT
        Subject: CN=6741086d-194f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:0e:a3:8b:5e:ae:33:b0:c6:9b:f6:7c:25:
                    a4:e6:fc:cd:ef:e4:9a:04:9e:24:97:f9:17:db:4d:
                    12:7c:7d:b2:f7:8b:81:fb:7f:5c:68:90:ee:0f:4b:
                    74:9f:55:ab:77:8c:1b:89:fe:92:f7:07:b7:f1:80:
                    dd:db:99:07:c4:44:a9:6a:2e:7d:e3:a0:0e:f5:f5:
                    eb:52:54:d3:7f:c3:ed:82:83:c1:a1:62:09:2a:4f:
                    34:3a:66:5f:40:dd:1f:48:f4:01:52:8d:5e:ee:df:
                    c5:c1:17:be:d7:08:aa:97:e4:e6:21:17:81:d9:ef:
                    14:de:f1:bd:a0:e5:79:0a:47:97:ab:d0:66:54:d6:
                    ac:a1:7f:90:17:04:9b:63:7d:81:de:a0:b3:33:e5:
                    6b:27:fb:11:88:85:c9:6d:b5:bb:c5:08:5a:20:52:
                    48:a0:92:f7:a3:df:ff:5e:6e:5d:74:be:3b:9c:49:
                    2b:e9:15:33:ec:3f:0e:cf:f6:50:93:ef:d4:4f:fc:
                    47:75:5f:a1:cc:6f:18:94:19:bb:99:31:bd:57:9b:
                    cf:94:46:16:29:63:34:fe:d3:99:46:c2:9f:99:11:
                    81:e1:15:54:8d:17:27:88:f3:b0:67:4f:a5:58:f6:
                    17:e7:8f:5c:92:72:ad:12:15:0b:dd:04:58:15:02:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5A:84:4F:23:4C:91:A5:E4:A2:B3:60:BC:6E:EF:2D:4E:5D:58:46
            X509v3 Authority Key Identifier:
                keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d7:f9:33:66:6b:7a:a2:7f:53:66:e6:cb:11:23:34:f0:b8:
         1e:06:8e:0e:ec:f0:c2:48:74:a2:67:66:53:c8:ee:f5:dc:f3:
         db:0a:e5:e3:c2:83:3f:87:fa:78:19:3e:b5:59:d5:c4:f9:0d:
         3c:99:b6:94:41:d8:18:c7:d9:85:0f:09:82:62:94:89:3e:47:
         e2:92:9e:44:4e:b9:89:72:cf:e1:00:1f:e0:fd:af:5f:1b:fb:
         a1:e6:f8:76:ee:53:72:16:dc:1a:c5:6c:06:bc:ad:44:96:94:
         f8:99:7f:d8:0b:60:40:25:cd:b9:66:b9:3d:1c:bd:47:98:b7:
         aa:f5:82:75:29:aa:9a:66:00:73:81:b2:14:7c:78:46:12:ad:
         96:c4:18:03:ec:54:86:10:23:04:1d:40:fc:8f:fa:29:8b:02:
         79:76:5e:c4:08:db:49:f9:af:c1:9c:cb:7f:30:8e:37:be:6f:
         e8:f1:b2:3f:c4:f9:66:89:77:8e:cb:42:96:19:bb:cd:da:90:
         94:c5:e1:96:c4:ea:ef:f5:08:09:34:23:f6:55:cf:0f:02:25:
         2a:0b:52:65:3f:ed:9b:d8:92:0a:88:c6:ce:9a:c5:3d:06:80:
         08:94:40:50:32:e2:8a:d3:f1:2e:db:ef:f0:59:43:40:a3:00:
         ae:fa:da:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org