Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File:                     78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier:          ScrufyRr08emEbaHbGM++XfQgC36b4emv0XuQxksfMM=
Subject key identifier:   5C:BB:2B:5E:90:7D:BA:87:FD:CC:18:B8:AF:AD:65:23:D5:6B:59:43
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer:       /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number:          38
Signing time:             Sun 15 Sep 2024 09:56:51 +0000
Manifest this update:     Sun 15 Sep 2024 09:56:51 +0000
Manifest next update:     Sun 22 Sep 2024 09:56:51 +0000
Files and hashes:         1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: Yasw2mp8jWPs4nG1nw6gRIR8GU6v6zly9P+46HWWhVs=)
                          2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: xNbG/utcKUstvbI/+h9lWTxk2xr/yLWlvLD0rYAm3fw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
                          rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
        Validity
            Not Before: Sep 15 09:56:51 2024 GMT
            Not After : Sep 22 09:56:51 2024 GMT
        Subject: CN=66e6af63-91f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:70:d7:f6:ef:de:8d:18:4d:9b:f1:2a:b0:
                    b6:3a:d4:00:1b:0a:5b:ba:17:12:5e:6e:bb:b2:89:
                    16:c8:ac:d7:2d:eb:a4:08:31:22:aa:35:e0:9f:24:
                    06:86:5a:80:37:36:e1:8d:f1:e4:d6:3d:31:79:52:
                    78:54:9c:a9:f4:b8:33:73:df:1d:8e:03:ae:9f:d4:
                    50:6b:e9:61:b6:7a:87:41:62:04:32:4a:43:1c:dc:
                    9a:60:15:86:3d:9d:38:68:35:29:8c:e8:6e:bf:6d:
                    dd:91:dd:ac:d7:0e:b6:cd:6e:16:22:3a:73:52:06:
                    10:e4:90:4b:fc:51:19:9a:b9:b1:0c:6e:a2:72:ff:
                    ca:6c:f3:7b:ab:21:cf:51:29:6e:10:a9:36:99:e0:
                    ee:0c:49:29:22:cd:6d:82:27:43:2b:5e:67:cf:f7:
                    89:c0:b6:d1:b7:db:b2:f6:d1:47:2b:de:ee:41:b2:
                    70:34:c3:bb:fb:09:f0:c3:c8:79:6f:d8:f4:4a:7f:
                    7d:da:9e:6b:fe:c5:cf:90:ea:ff:33:3b:5a:1c:cc:
                    69:f8:a2:aa:b5:ac:1d:1c:21:95:19:97:1a:cb:ce:
                    c5:42:74:79:c3:d4:1b:ad:cc:55:61:f2:64:24:21:
                    3c:f5:fb:07:93:e0:b5:0a:7d:4e:77:17:cc:7e:a0:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BB:2B:5E:90:7D:BA:87:FD:CC:18:B8:AF:AD:65:23:D5:6B:59:43
            X509v3 Authority Key Identifier:
                keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b4:19:4e:8c:5f:54:f3:5a:8c:28:9f:f0:a7:a7:fa:cf:e5:
         18:77:a8:08:fc:66:9e:69:5e:a9:c8:60:84:16:e9:21:6d:d7:
         66:0c:e2:4a:3a:49:f0:7e:f3:4e:ff:f6:c3:0c:50:39:b9:97:
         19:02:62:dc:2a:5e:fd:04:d5:37:93:57:21:5c:83:e6:e9:d3:
         b5:96:a5:73:5d:37:a0:27:70:47:72:db:f3:80:80:0b:31:2e:
         6c:9e:92:c4:7c:a2:da:00:d8:34:01:08:a5:1b:44:42:76:a4:
         d0:49:89:ac:c5:2b:bb:b4:e5:cb:0b:e0:46:7f:5b:05:12:3c:
         dd:7a:c1:5c:a3:24:f6:2c:c7:d6:6a:b7:25:75:c0:16:60:b8:
         90:b0:50:35:47:b1:25:65:5a:da:67:ef:8e:e7:96:69:6c:bb:
         38:bc:fd:2d:60:82:9f:f3:6c:77:85:82:d0:58:c0:cc:e1:23:
         8c:5b:93:94:6e:09:38:4f:bd:bc:99:56:bf:c4:5a:ff:75:cc:
         ae:51:d7:d7:56:5c:dd:d4:93:66:6f:d4:64:ec:52:bb:c8:f8:
         83:19:28:16:6d:7b:73:a1:ea:de:ec:1e:be:f1:83:5a:59:df:
         de:60:0e:bd:98:9c:1f:2d:20:ba:a7:86:31:6b:ec:5d:28:2c:
         01:95:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 10:46:17 2024 by rpki-client on console-ams.rpki-client.org