Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File:                     Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier:          vIZqOZCC5ZHBWenPlWF5w99j4dU29Tf9WlTuWRruSwg=
Subject key identifier:   3F:FC:CF:DB:A5:61:55:E3:95:80:54:C9:EE:B7:1C:06:92:63:B7:1C
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer:       /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial:       02DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number:          02D2
Signing time:             Thu 21 Nov 2024 00:55:20 +0000
Manifest this update:     Thu 21 Nov 2024 00:55:19 +0000
Manifest next update:     Thu 28 Nov 2024 00:55:19 +0000
Files and hashes:         1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: db7O/G+rgbAOHdFCh0oNSHcD9qfPd/QdkatEq/xqKKw=)
                          2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: Wt9pMWKxr+daOi/B9m/xRaP82vVhCrzp4mOJhmuxsCo=)
                          3: 2D1405C0C6CB11ECB185E43EC4F9AE02.roa (hash: XecBqqisXSKLGQ9HAXEQoFYf4wembyQPpbTzSWQ2As0=)
                          4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: wAinW3EzbrBxNVmPBx/cE+ByR4TusgaQNiUtZIMngpw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
                          rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
        Validity
            Not Before: Nov 21 00:55:19 2024 GMT
            Not After : Nov 28 00:55:19 2024 GMT
        Subject: CN=673e84f8-abc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:32:09:5d:e8:e2:6c:b7:c9:e2:16:f6:66:
                    29:7f:22:2a:7c:c0:26:12:75:a0:fc:7c:80:62:b4:
                    26:b4:ef:6f:87:58:83:75:c7:62:f9:d4:3d:25:26:
                    66:a5:46:bc:f5:7d:c5:c0:ac:ec:6c:1c:94:37:74:
                    49:88:3c:e1:28:22:a4:9b:9f:11:5c:11:79:6d:88:
                    cc:0f:e6:02:69:e9:63:fa:15:6f:25:37:1c:99:df:
                    4d:1f:4c:e6:f6:e6:d8:d2:95:8c:54:df:31:54:fd:
                    00:1e:c7:26:2f:b5:72:21:37:92:3f:4f:95:ec:1a:
                    df:52:f6:43:3d:af:33:75:ec:fb:99:7f:5e:11:e1:
                    58:ec:da:27:2c:83:b9:0c:d2:ef:6b:c4:d2:04:42:
                    00:b3:5f:89:fb:62:84:83:c0:2f:9e:e0:3e:74:23:
                    be:a8:23:e4:f0:67:c5:3f:01:e7:8f:1a:61:2d:47:
                    ef:56:fb:62:34:8c:1c:26:46:c1:e7:2a:21:6b:7f:
                    73:6c:ff:7b:13:59:56:26:0c:f3:87:80:51:a2:d8:
                    2f:88:c8:ed:77:ae:5c:da:22:15:6b:bd:c8:9e:1e:
                    59:9e:e5:ee:98:86:95:77:d1:4a:11:64:a6:c8:a0:
                    fb:26:a2:7b:52:3f:6b:ef:c9:54:5f:01:42:59:c4:
                    71:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FC:CF:DB:A5:61:55:E3:95:80:54:C9:EE:B7:1C:06:92:63:B7:1C
            X509v3 Authority Key Identifier:
                keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0e:ad:b3:a2:8e:f2:6e:36:32:45:df:b0:47:f5:54:ca:fb:
         a6:7e:3e:47:59:d6:f4:ee:a4:cc:d9:ff:59:3e:da:1c:25:90:
         db:a7:40:f5:53:1a:08:c1:b4:7d:f7:96:65:f9:c0:40:4f:56:
         61:c1:e7:38:83:b6:0a:49:7a:5e:8c:8e:fd:65:f5:12:31:c7:
         20:f2:84:56:aa:9c:c8:80:97:7b:66:f2:46:b5:e6:82:6a:8c:
         f4:aa:29:49:7b:e5:a3:2f:d8:87:ef:fd:0f:2a:06:74:8c:31:
         ca:b1:72:c3:6a:bd:56:8d:d1:7c:57:ab:a2:3c:e7:77:58:d8:
         3a:5b:c8:b6:af:a2:82:3e:04:bd:35:84:a5:d5:cc:45:6b:cf:
         6c:92:ea:b7:f5:90:53:02:8d:e8:96:b0:27:f8:d2:fd:6a:bb:
         2e:1a:f7:34:cc:ab:2b:1e:59:6c:f1:4d:50:a7:cc:31:ed:2d:
         d1:53:43:4e:2e:40:b2:7c:fe:d0:fd:fb:64:8e:fa:f1:15:ad:
         a5:cc:eb:3e:53:2c:85:e5:2d:86:29:82:d9:c8:7b:00:19:dd:
         39:95:db:8c:59:58:4e:e2:9f:27:22:61:7a:33:d3:6c:2d:91:
         32:63:39:07:da:f8:18:4b:b9:43:e4:29:93:2f:d0:ab:d4:82:
         14:5b:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:36 2024 by rpki-client on console-ams.rpki-client.org