Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
File:                     g6pYiXoVH0rLc4TwtV8R7Z164X8.mft (raw, json)
Hash identifier:          H4ybfAAXDk7WlFS1FVlQ48HKWkQsTtpvc2FYOTRhW6M=
Subject key identifier:   58:17:1F:89:CC:03:32:64:6F:4D:0E:CE:EB:59:53:98:CB:0F:DF:0B
Authority key identifier: 83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F
Certificate issuer:       /CN=A915B3AE/serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
Manifest number:          94
Signing time:             Sat 23 Nov 2024 04:29:42 +0000
Manifest this update:     Sat 23 Nov 2024 04:29:42 +0000
Manifest next update:     Sat 30 Nov 2024 04:29:42 +0000
Files and hashes:         1: g6pYiXoVH0rLc4TwtV8R7Z164X8.crl (hash: AEcss6gFrf/MZMLDnUWi1rghhjvH0lmDwgWOkuKlusE=)
                          2: 1AD9E28ECA9411EE9062590AC4F9AE02.roa (hash: 3xbk8prUiE4V60hWvzsYryQ5GjciCDAMJa5YdhGD9Uo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl
                          rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B3AE/serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
        Validity
            Not Before: Nov 23 04:29:42 2024 GMT
            Not After : Nov 30 04:29:42 2024 GMT
        Subject: CN=67415a36-e7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:aa:3b:6f:7e:a7:37:dc:66:30:2e:75:d0:
                    e4:a1:58:ee:a5:42:ff:33:58:c5:b7:8b:1f:ff:2d:
                    08:86:40:f4:25:6e:07:ac:53:47:1a:34:ca:ba:ea:
                    f7:8e:89:e4:5b:a6:44:10:b1:31:86:ff:9a:bc:e6:
                    bb:04:66:08:dd:b7:f6:b3:01:a4:8d:07:cc:65:cd:
                    c7:4c:23:41:57:53:89:b9:6e:d3:64:47:7b:8e:dc:
                    22:29:71:71:38:99:3b:ab:5d:d8:2d:8d:e6:4a:d6:
                    96:e0:73:15:2e:f8:d5:ac:95:45:94:a2:35:6b:62:
                    95:22:b3:93:63:8b:ad:6f:5b:43:fd:8d:09:18:cc:
                    40:f2:ac:41:2a:98:cf:c7:9d:9b:cc:ca:c7:c2:f3:
                    b7:f1:9f:3e:a3:98:67:f8:04:12:d8:21:e6:a3:a5:
                    0d:39:9c:d2:42:d8:05:57:c7:7d:2d:4f:c7:52:b2:
                    84:c1:b8:cf:73:8e:2f:47:89:fb:61:25:48:8f:91:
                    fa:8b:30:23:a6:78:59:96:68:36:c8:26:f3:ee:ca:
                    c4:16:44:01:26:48:ed:6f:44:d3:61:2d:1a:55:07:
                    f6:58:3f:0e:cb:80:74:de:61:f2:f5:78:1e:f3:79:
                    0d:ca:51:84:73:a9:1b:41:e0:45:e5:50:74:b8:6c:
                    ce:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:17:1F:89:CC:03:32:64:6F:4D:0E:CE:EB:59:53:98:CB:0F:DF:0B
            X509v3 Authority Key Identifier:
                keyid:83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2f:ba:9f:07:61:11:8a:97:4c:9c:8b:c6:d6:ff:e0:92:40:
         30:fd:5c:05:93:70:f0:c7:da:dd:5c:32:cb:bc:9f:99:75:01:
         e7:5a:17:27:e6:b8:51:36:ea:c1:84:e6:fb:9c:92:6f:2b:d9:
         44:e3:1d:21:0b:05:aa:9d:ed:dd:48:89:bc:25:0f:4c:23:80:
         2e:1f:94:da:7e:04:de:72:1c:9e:5f:22:75:43:79:22:41:4f:
         b5:70:8a:70:4c:9c:42:b6:ec:c3:04:ae:b3:b3:e9:23:4a:7b:
         60:0f:1c:f9:f1:b4:8e:2b:88:d6:33:85:4f:51:2b:04:d5:f8:
         c6:7d:a7:be:f6:ff:95:57:76:df:e5:64:70:28:1b:87:63:cc:
         93:f1:de:b4:1e:be:4a:3a:a8:ba:46:d3:d5:77:08:c7:f4:4c:
         1d:d0:48:62:72:9e:28:da:f3:c7:fa:d6:82:71:de:aa:68:65:
         7b:08:b2:14:4c:ab:df:89:06:9a:8d:40:f1:40:0b:b1:a5:c3:
         6c:f4:5b:c3:f5:38:3e:4c:80:a9:cd:21:6e:1f:f0:34:80:27:
         87:bb:6a:6a:34:db:84:29:44:4f:35:e0:4e:f4:13:43:24:c6:
         cc:de:26:7c:6b:8d:36:21:c2:f2:d2:5e:1a:c7:7f:dd:d9:e1:
         68:bb:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:25 2024 by rpki-client on console-fra.rpki-client.org