Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
File:                     svirANV0ZN1dBaRaR8Qg9fiWuPw.mft (raw, json)
Hash identifier:          dcnaYRtpDhjiGRNC9+FVtrhsoCPF/hYqGbdh5mYRrk8=
Subject key identifier:   09:96:1F:1C:71:C3:B5:E3:41:0B:58:7E:C4:9B:28:EE:8B:EC:A9:29
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       137C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
Manifest number:          1333
Signing time:             Sun 24 Nov 2024 16:54:21 +0000
Manifest this update:     Sun 24 Nov 2024 16:54:21 +0000
Manifest next update:     Sun 01 Dec 2024 16:54:21 +0000
Files and hashes:         1: svirANV0ZN1dBaRaR8Qg9fiWuPw.crl (hash: xDuZ/6WKrRgXjBoE5hmnunl5slHxqIll6irTyJhSjxg=)
                          2: 721F913C647311EFAC850922C4F9AE02.roa (hash: +Co5aYqxlH99E4oZQFWHbfrZ3hELNM0SRsMpI1vfXt8=)
                          3: F67928B2607211EFADFDA31CC4F9AE02.roa (hash: GgjTm2foJy13YqAGAhvufjFQnhTuEPbAqgibT/4+/5c=)
                          4: 3C916EA69A7D11EF8450BB33C4F9AE02.roa (hash: U/GxbO65KOHllbw45mhEzrKo7ByHh/4SHxMEbSQwwTs=)
                          5: 24D4478E774611EFA3ACCD6AC4F9AE02.roa (hash: RMEd5XMiiZ2qHrEfTZXxo60gqzZs/KrE41SmTIZdOU8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
                          rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 16:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4988 (0x137c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: Nov 24 16:54:21 2024 GMT
            Not After : Dec  1 16:54:21 2024 GMT
        Subject: CN=67435a3d-64d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:e3:52:81:bf:71:a6:3e:a1:b9:e8:60:f0:
                    0a:e0:da:82:00:4c:1b:48:ba:98:6b:0f:33:7b:25:
                    0f:17:78:84:2a:35:ca:8e:bc:83:20:6f:94:0f:53:
                    8f:7f:9a:37:0b:61:02:ad:a1:3c:ec:0a:1a:ed:38:
                    b3:85:8e:bd:4f:0a:44:c1:e4:16:0c:a5:6f:f5:c9:
                    99:3b:62:89:3f:1b:14:40:5e:82:13:66:2a:b5:00:
                    ae:62:82:d4:cb:04:3e:6f:4e:d8:c2:c4:1b:82:22:
                    52:ee:5a:36:17:98:55:65:69:25:81:6a:07:df:e7:
                    8b:0d:96:42:71:f9:51:99:3f:11:ed:fe:fa:5f:ec:
                    4a:e3:b8:11:5d:60:fb:d7:0c:e3:b4:75:14:95:8d:
                    31:8e:98:01:43:f6:59:ec:19:83:70:99:67:78:9d:
                    3d:3b:64:41:00:93:ff:18:87:7b:a7:20:29:88:80:
                    0f:ac:25:c8:e2:3b:a4:a2:37:2d:11:46:8f:5a:25:
                    f4:9c:ca:3c:fd:0d:17:9d:77:a3:2e:2a:bd:19:88:
                    62:9a:b9:02:79:ae:09:18:c7:ab:b0:e3:a8:e0:c9:
                    af:e1:cc:b7:d3:11:21:68:2e:51:2b:71:23:83:18:
                    33:af:e4:a9:07:6e:50:30:95:d0:24:d8:0f:96:6e:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:96:1F:1C:71:C3:B5:E3:41:0B:58:7E:C4:9B:28:EE:8B:EC:A9:29
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:19:62:ea:e6:dd:eb:ac:43:e7:ba:05:98:a8:65:c4:16:30:
         b9:7f:b1:95:af:68:42:2b:3b:43:62:80:18:8e:ca:3d:08:de:
         48:39:c6:bb:01:40:49:29:ba:5d:fb:69:4f:81:08:ce:77:ca:
         b6:c4:34:81:6d:c4:64:59:64:88:5a:43:d1:20:2a:14:37:fc:
         b2:0b:70:a1:f8:0f:59:40:95:98:05:93:bc:df:ac:7f:42:b1:
         29:9c:b3:d3:93:56:56:01:57:b7:e4:50:50:22:55:30:58:1b:
         b5:56:65:de:d5:60:5c:c2:dc:5b:20:29:07:35:de:ec:9e:2d:
         da:d4:67:d4:22:f0:43:b4:ff:ad:2a:00:1f:44:ee:f4:58:07:
         56:51:3a:0b:bc:ee:4d:9b:d2:77:27:3a:12:2d:35:6c:e9:1e:
         d3:7b:23:87:a6:e9:b7:ad:bf:fc:73:04:28:90:4a:9d:ba:a6:
         f1:e7:56:4b:e8:54:7f:67:9b:f7:5f:9f:6b:1b:d4:9d:09:64:
         63:20:31:89:ee:d0:a2:a0:46:57:93:18:9f:91:d3:35:9c:56:
         06:81:d1:a6:54:fd:7b:b8:5d:6e:d8:7d:b4:58:96:40:19:70:
         78:5d:c3:d3:b5:94:17:c3:8a:65:24:97:0e:d4:67:18:9f:be:
         a7:b9:70:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:36:20 2024 by rpki-client on console-fra.rpki-client.org