Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
File:                     4QZLtgGhMQh2G1RXofcVJMSky84.mft (raw, json)
Hash identifier:          O/j0iB99cHUWFwnElgp4Etdn5m/zo8hgogAAuEwKj+Y=
Subject key identifier:   11:6F:D0:26:CD:6E:0F:B8:22:E2:19:0A:79:53:96:EC:CD:9C:34:66
Authority key identifier: E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE
Certificate issuer:       /CN=A914B57F/serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE
Certificate serial:       0A6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
Manifest number:          0A69
Signing time:             Fri 22 Nov 2024 19:24:31 +0000
Manifest this update:     Fri 22 Nov 2024 19:24:31 +0000
Manifest next update:     Fri 29 Nov 2024 19:24:31 +0000
Files and hashes:         1: 4QZLtgGhMQh2G1RXofcVJMSky84.crl (hash: uArDf6ioOAdQnbB7K7OypBGko5TLmlzNplFNBCykHXw=)
                          2: 11685AAC4F0D11EAA161D143C4F9AE02.roa (hash: HpuZh21zVl0Ft40GZ9PsEwmlpNjswClEyYGJmu6x+ok=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl
                          rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2671 (0xa6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B57F/serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE
        Validity
            Not Before: Nov 22 19:24:31 2024 GMT
            Not After : Nov 29 19:24:31 2024 GMT
        Subject: CN=6740da6f-2885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:57:63:08:ab:fa:26:19:04:9d:09:9b:64:
                    2a:0f:11:81:05:81:a0:1e:01:0e:02:03:08:74:04:
                    98:1f:f2:92:e7:9a:db:f7:ac:7a:62:03:11:bc:52:
                    18:2c:9d:bc:07:4d:d8:d6:ad:cd:09:d9:8c:b6:63:
                    30:3f:a2:84:06:c6:2d:45:a4:76:a9:2a:3c:ce:9d:
                    1e:a2:32:96:48:11:92:9d:7d:f3:d4:2a:f6:34:22:
                    4b:47:d4:82:7f:c4:d3:28:2f:1f:bf:80:2a:b8:f4:
                    90:11:49:91:07:25:0d:56:bb:9b:36:60:4e:4b:e5:
                    23:6f:99:89:3e:e3:bc:8a:29:ef:ca:1b:8c:8f:fc:
                    00:fc:1f:40:f8:9f:24:51:36:19:1e:77:69:67:33:
                    df:cb:ae:df:6f:c0:05:56:75:7c:51:46:08:0a:42:
                    98:d0:86:fd:0c:93:3c:d7:b7:66:d5:80:b2:a1:ac:
                    28:ff:35:81:1c:84:1a:fd:d7:bc:ec:d2:df:af:d6:
                    93:fc:27:05:8d:de:af:c3:d7:4e:e8:8a:11:05:86:
                    47:9d:7c:a5:02:e2:3b:41:c5:4a:0b:42:37:75:0d:
                    97:46:72:bb:43:11:91:89:dd:6c:2f:dc:7a:5a:09:
                    96:94:8a:fe:0c:41:05:20:cd:56:3f:89:b4:39:6d:
                    95:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6F:D0:26:CD:6E:0F:B8:22:E2:19:0A:79:53:96:EC:CD:9C:34:66
            X509v3 Authority Key Identifier:
                keyid:E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e7:c9:86:a2:1f:63:ab:9d:0f:91:d5:26:48:a0:c4:86:81:
         35:a0:5f:54:13:8c:13:aa:0e:a2:ca:2d:0a:09:09:0b:2c:98:
         12:9c:c9:15:5e:5d:d8:96:6c:12:cc:b6:55:f0:1a:1b:e5:f6:
         e1:85:89:51:04:a0:46:3a:cd:09:ff:5e:f7:6b:bb:c4:27:e5:
         32:bd:75:97:72:ab:35:a8:fe:23:53:d4:ca:b7:cf:5d:cc:9a:
         55:20:18:96:35:0f:28:b1:36:a0:47:d1:2d:6f:40:ef:0c:2a:
         c7:ee:84:0a:eb:f9:ee:b0:cf:1f:b7:28:a5:78:48:b9:c6:b6:
         1e:92:85:ee:c7:16:63:f1:95:f9:d1:c2:53:2f:60:f2:61:0e:
         13:78:0c:4b:36:61:65:dd:f5:62:64:23:60:98:32:39:25:97:
         ae:36:ae:e5:d1:ec:c5:28:9d:6d:19:62:db:fd:e1:08:24:bb:
         35:ba:de:87:f1:b8:d2:2c:50:15:24:44:ac:4a:9a:80:34:99:
         e7:07:bc:79:4e:f3:da:14:8a:5d:e4:0d:94:94:12:ce:f0:ef:
         1f:12:21:d7:69:c4:4b:cb:ec:c5:f2:0a:60:c2:64:23:4b:a3:
         d2:cd:65:4d:69:02:39:2b:32:ee:a0:d6:b9:5f:c7:de:f3:56:
         45:73:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:26 2024 by rpki-client on console-ams.rpki-client.org