Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft
File:                     UudzDz1hVWPrWMn6dZKhvYBbWjU.mft (raw, json)
Hash identifier:          9Vz6T0mF3leOY5ikMtYInvsPpbC53WV/UaCHPZU7+88=
Subject key identifier:   71:AF:3A:9F:34:75:5C:EA:B3:31:10:31:B2:12:5F:2B:B3:B5:A2:F0
Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35
Certificate issuer:       /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft
Manifest number:          0175
Signing time:             Sat 23 Nov 2024 02:07:26 +0000
Manifest this update:     Sat 23 Nov 2024 02:07:25 +0000
Manifest next update:     Sat 30 Nov 2024 02:07:25 +0000
Files and hashes:         1: UudzDz1hVWPrWMn6dZKhvYBbWjU.crl (hash: s2m/FDn123wz+QcfaoLtoC4ZqUlC9Qv3TWem4R/c4vU=)
                          2: AE148B2A6BB911ED97343873C4F9AE02.roa (hash: u6SVoGQGrtu5LIBqra8PV8OpxktuEo3Qc4ssotlBn0o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl
                          rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35
        Validity
            Not Before: Nov 23 02:07:25 2024 GMT
            Not After : Nov 30 02:07:25 2024 GMT
        Subject: CN=674138dd-f38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:44:9d:a1:d2:e7:8c:a8:e1:6b:7e:2d:5b:
                    d5:43:85:c7:a1:05:52:86:8c:48:b0:06:0d:51:62:
                    cc:75:3c:c9:af:aa:d8:93:8d:b0:4c:6f:b1:68:a8:
                    c5:c5:dc:cc:23:d2:3c:43:2c:c0:8b:ef:8e:cb:bc:
                    3a:81:d2:a8:bf:80:4f:cc:a8:2f:5d:9f:d6:8d:5e:
                    8f:cf:b3:9d:a1:7c:a9:94:69:5f:8e:f9:e7:44:1e:
                    3b:71:9d:9d:f0:fd:85:c4:9e:50:d5:b2:58:f2:c6:
                    af:bc:5f:14:01:e3:12:7f:2a:a9:49:8a:eb:25:82:
                    87:fc:f9:db:c1:f9:d3:37:cd:1b:65:d8:28:11:3c:
                    63:41:ea:aa:89:05:5f:8f:86:ca:8d:60:cd:03:7c:
                    c3:a5:3b:55:c6:65:75:d3:1d:70:eb:a4:a7:23:47:
                    21:26:c0:9c:68:03:31:3b:d3:58:cf:3b:dc:6d:f1:
                    26:a3:5c:16:62:e2:74:53:b3:93:ef:93:6a:a9:ec:
                    cd:1e:cf:01:02:7f:9c:01:58:a5:4c:eb:e3:e0:0a:
                    2e:31:ca:7d:43:5c:72:b6:ff:de:79:71:31:8c:65:
                    6d:53:04:48:a5:6c:de:eb:3a:71:63:17:ea:f5:c9:
                    1c:8a:ed:03:e9:f9:06:c5:f6:3e:ef:c0:a1:80:b3:
                    0c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AF:3A:9F:34:75:5C:EA:B3:31:10:31:B2:12:5F:2B:B3:B5:A2:F0
            X509v3 Authority Key Identifier:
                keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:05:a6:56:9d:e5:19:1b:c4:bf:dd:17:2c:f0:cf:15:02:97:
         6d:fa:94:a8:3a:b6:db:d1:4b:01:77:60:df:bb:1d:34:56:c2:
         75:06:09:35:60:24:6c:5b:b8:ca:d3:77:f5:2f:e3:ab:d0:bf:
         10:d9:53:0b:94:7c:2e:da:fb:5c:d1:38:72:63:71:c5:88:b8:
         34:23:68:15:67:35:f4:6d:77:e4:5d:76:23:be:4e:f3:24:e1:
         bb:67:02:8a:90:da:dd:62:94:c9:c8:b8:33:99:66:e7:f8:5d:
         b6:a3:e2:70:f1:92:64:29:7f:47:21:60:f4:22:de:26:cf:1a:
         cf:16:11:ae:fb:9b:75:1b:88:94:59:ef:97:a5:be:1c:89:ba:
         0e:b5:3e:ae:47:16:42:5b:39:92:3f:c2:c6:87:aa:9c:77:37:
         74:f4:68:8f:0c:6a:2b:87:03:38:f5:c1:79:d8:83:41:78:5a:
         df:c7:c4:01:86:9e:0a:97:c3:e1:e8:e1:51:11:83:7a:cd:a2:
         9c:48:69:d3:2a:3f:ce:87:8f:16:c5:ea:59:da:94:96:70:10:
         f3:18:24:48:fd:ac:cd:85:0d:5f:68:aa:4d:52:aa:aa:33:4d:
         cf:bd:c9:e5:4d:33:44:6e:ca:52:f1:f8:f4:85:60:ed:fb:03:
         75:2c:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org