Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
File:                     eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json)
Hash identifier:          CYaMICsa2tsYuJeaMtdlLFsAftr0KmMQEBCLl5izkiQ=
Subject key identifier:   00:D7:B5:7D:0D:4F:F1:33:B6:F9:03:6F:0B:13:2B:60:EA:D3:23:E2
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Certificate issuer:       /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial:       0734
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
Manifest number:          0713
Signing time:             Fri 22 Nov 2024 21:26:25 +0000
Manifest this update:     Fri 22 Nov 2024 21:26:24 +0000
Manifest next update:     Fri 29 Nov 2024 21:26:24 +0000
Files and hashes:         1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: 2IEUWxZG0TNrVsllFXintVNdh8v7bjspErJLOnwHJHc=)
                          2: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: B2v/Mb9QSV78ZbT0Kkk2qYHjvgGoZiVbEUOX62PctYM=)
                          3: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: 2iVUtqGygZmmPFfaI6hSltedKhRAuZW7CDGbz6IyeRI=)
                          4: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: wlyD169BX96xOiFFRFEDGAmZtHB8cN4i1GCqPo9RNQA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
                          rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1844 (0x734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
        Validity
            Not Before: Nov 22 21:26:24 2024 GMT
            Not After : Nov 29 21:26:24 2024 GMT
        Subject: CN=6740f700-df04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:66:36:1a:eb:8f:19:c0:fe:85:7b:31:5c:
                    d0:49:0b:3b:76:77:20:16:3f:9a:11:04:bf:b2:eb:
                    b3:6b:b1:8e:4f:30:fc:6a:bf:a0:43:99:1c:c9:43:
                    e2:e6:cc:2e:49:7b:e5:b6:88:d1:51:f7:05:6e:a3:
                    8f:b6:48:15:fe:19:bd:ee:ba:f9:34:93:4c:c7:02:
                    4a:d0:e9:82:41:25:e7:56:52:cc:76:59:6f:44:f5:
                    b5:e9:34:a7:be:47:66:b7:93:cc:69:bf:f7:b7:59:
                    31:c0:a8:38:53:f4:9f:a5:e3:86:d4:8b:65:ec:ce:
                    19:db:d6:dc:86:9f:89:52:35:2d:3e:82:a4:28:a3:
                    c4:8e:85:ca:aa:55:23:ac:d6:f0:dc:58:5e:ec:12:
                    73:da:bd:34:b8:a2:7f:6c:d4:4c:5c:4c:4b:27:22:
                    7d:75:e8:9a:b2:1e:1d:ad:31:8c:d7:dd:ca:b8:40:
                    74:0f:51:0a:9b:de:c3:54:45:53:b1:1e:3e:f6:1d:
                    37:fe:14:6b:0d:ce:cf:3a:cb:d3:db:7c:d5:50:4a:
                    eb:58:d8:46:2b:9e:3b:d8:a7:19:95:44:1e:a6:6c:
                    22:01:04:f5:b5:52:1b:94:e5:f5:d6:f1:31:54:34:
                    84:74:77:9e:31:4b:40:40:bb:39:7b:6b:71:9b:36:
                    a2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D7:B5:7D:0D:4F:F1:33:B6:F9:03:6F:0B:13:2B:60:EA:D3:23:E2
            X509v3 Authority Key Identifier:
                keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:4e:c6:69:5f:b9:dc:fb:a0:31:ec:ab:89:34:c1:70:2f:0c:
         71:5c:40:e2:93:55:f5:6b:48:0b:b0:ee:04:38:84:2b:43:16:
         85:42:48:97:a9:41:ab:99:cd:57:f2:e4:58:2b:8e:fb:57:e0:
         8e:e6:e2:98:ff:2c:0b:e9:66:e2:44:34:99:6d:fe:7b:62:ee:
         43:76:54:36:c0:9b:92:e3:3a:01:51:66:36:20:4c:be:9d:e4:
         3b:51:6a:95:33:30:22:f0:28:8a:a6:10:bd:5d:83:66:7f:78:
         93:aa:27:53:70:36:d7:2a:7a:5d:d3:85:73:53:fb:35:ac:ee:
         1e:a1:2e:12:c1:cc:bc:4a:32:3d:02:65:54:21:45:eb:64:2c:
         57:4f:d6:17:a5:5d:39:e2:5e:8d:8a:27:fd:20:70:a9:bb:4b:
         29:ee:64:48:c7:5c:5c:15:89:f8:90:7e:0a:f2:45:ef:87:4b:
         d4:6e:01:f4:72:71:9b:88:0e:86:00:4f:8c:6e:87:3c:71:47:
         94:15:0e:33:cb:15:c2:fa:73:6c:5e:48:63:cc:3e:82:d2:d6:
         2e:60:e3:18:a8:88:bd:cd:51:15:f3:34:a2:66:65:6e:2b:36:
         67:eb:0e:fb:57:4b:7c:ff:cd:d7:bb:ee:c3:79:eb:c4:7c:d1:
         fd:29:62:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:40 2024 by rpki-client on console-ams.rpki-client.org