Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          8IaaEykB66ZrtCNr7nuX1X/eY+Z6aTOhY68NtnUJ3WU=
Subject key identifier:   5E:EA:3E:52:1A:3D:05:A1:F8:04:3B:91:C1:59:2B:0D:3C:5C:84:EB
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0B55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0B4F
Signing time:             Fri 22 Nov 2024 18:54:40 +0000
Manifest this update:     Fri 22 Nov 2024 18:54:39 +0000
Manifest next update:     Fri 29 Nov 2024 18:54:39 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: kcn/iLTxMvcboHIB3wSf3UJrCb1PlCXLvfgnUSXPapE=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: TuZIRI45kuPYCZuG09vTJgvLxAPNkl0UDbeQsSKLIcs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2901 (0xb55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Nov 22 18:54:39 2024 GMT
            Not After : Nov 29 18:54:39 2024 GMT
        Subject: CN=6740d36f-fe50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:83:09:51:a5:89:38:12:f4:32:df:a9:26:
                    45:8d:04:ae:e0:1c:d4:4b:1f:15:1b:fe:03:0e:5e:
                    bc:d1:09:34:32:e9:c0:75:35:7c:79:9a:1a:00:22:
                    44:ba:8d:91:ce:22:ae:fb:b5:54:ac:3d:a7:f8:1e:
                    b5:f1:51:91:a3:74:9a:b1:b7:2c:85:42:65:1b:2f:
                    da:49:cd:35:74:1b:d0:ea:ee:05:8d:14:69:60:ac:
                    aa:8a:2e:eb:87:83:5a:f6:b8:c6:11:23:a9:9d:f2:
                    70:04:68:9e:4e:66:02:80:4a:23:90:df:45:25:69:
                    9d:85:3e:0d:4a:90:81:f9:ac:f8:8d:cd:fd:63:da:
                    1a:38:9e:03:11:bd:4c:d0:3b:28:0c:a8:9e:c4:e4:
                    f7:38:cd:54:1d:d8:87:94:2c:69:ac:64:4b:71:ad:
                    14:9c:fe:c6:85:c6:73:87:ee:51:ab:c6:66:aa:42:
                    a8:e9:30:b8:58:c2:37:c9:c3:95:9e:c9:7e:5c:00:
                    54:f4:91:b5:a0:33:24:e8:c7:7c:0f:97:b1:23:23:
                    45:ec:60:a3:6f:53:20:24:ab:2a:4d:5b:45:21:15:
                    e3:b3:70:f8:ea:a3:8b:47:43:8d:b3:8f:7a:44:19:
                    aa:7e:4e:a5:f2:47:fc:97:57:5c:87:6d:e1:f8:c7:
                    88:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EA:3E:52:1A:3D:05:A1:F8:04:3B:91:C1:59:2B:0D:3C:5C:84:EB
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ca:be:54:cb:c0:e5:82:57:3e:d0:05:12:5d:3b:13:9f:dd:
         7b:de:22:e6:e4:9d:33:87:ed:58:cc:18:10:f9:65:5d:1e:04:
         18:91:9b:dc:29:31:d9:1c:ea:ed:15:c8:b8:ef:2b:91:b0:4b:
         36:32:9f:7e:5e:f7:21:98:db:7b:12:93:2a:bd:1f:7d:71:b4:
         b0:ff:66:1f:89:86:24:e4:7d:54:ff:ea:fa:79:de:c7:b3:b9:
         b5:05:df:ac:e0:c3:bc:4c:35:8f:eb:f1:a1:8e:d1:eb:75:f7:
         97:02:aa:0d:a2:5d:ac:18:f1:bf:30:01:79:04:d4:57:f5:0c:
         56:9a:db:b9:f4:7e:36:50:53:b7:e7:2f:6c:6b:d7:f5:ca:e0:
         45:74:da:eb:e4:11:f6:22:b1:0b:96:76:7f:93:87:71:53:8c:
         f5:d1:4f:e7:58:9f:32:90:ff:5f:3e:fb:59:e7:ee:53:6b:33:
         a1:51:87:7e:fd:89:5d:21:01:68:3b:db:8b:14:50:bd:33:1f:
         50:4d:ed:ca:6f:75:1a:20:66:b1:ff:59:c0:fa:0f:cc:94:04:
         ee:7b:f5:8a:09:54:53:b7:7e:64:db:7d:75:4e:78:3d:4c:a5:
         da:6a:ca:be:ac:30:f2:85:f0:33:88:d1:89:80:86:af:7f:a0:
         a8:d4:fa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org