Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File:                     aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier:          H2l92x27z35/m0nzv2bTUrwKWblZICUOKoC2Utx68L8=
Subject key identifier:   AD:F8:26:D0:18:1D:A3:8A:68:A7:4D:AC:86:0D:B6:54:30:A5:EB:43
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer:       /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial:       344E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number:          3431
Signing time:             Fri 22 Nov 2024 15:20:07 +0000
Manifest this update:     Fri 22 Nov 2024 15:20:07 +0000
Manifest next update:     Fri 29 Nov 2024 15:20:07 +0000
Files and hashes:         1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: 3lEVYmVgSeCq2DEVVonWasNdr7HWeBye/Y5fAEa+PTc=)
                          2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: H9fsyURTb8qh5DVJOvXZinGpj/nUZcubrPdBUX+wonM=)
                          3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: jaRSKEufT55PHq8OPoLG/qgSfjEXVPXjl00275Oa/lI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
                          rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13390 (0x344e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
        Validity
            Not Before: Nov 22 15:20:07 2024 GMT
            Not After : Nov 29 15:20:07 2024 GMT
        Subject: CN=6740a127-2aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:9d:bc:0c:5a:34:c8:0a:ac:0c:66:70:82:
                    ed:87:d8:0e:c7:1b:59:0f:40:0c:37:21:47:85:53:
                    de:39:d2:36:06:cf:f5:c6:25:a7:5e:d4:18:11:dc:
                    25:8c:b6:77:8a:f7:e7:04:c1:ea:f4:6c:61:80:5c:
                    23:77:62:30:a1:b9:0f:fe:36:29:bd:62:25:29:33:
                    79:34:2c:87:a9:7e:ca:b2:07:b5:6d:38:95:f0:0e:
                    9b:4b:85:7f:3f:05:bd:87:27:8c:26:e6:73:7e:4a:
                    73:19:3c:26:38:7b:4b:93:1f:cc:ab:22:ff:aa:5a:
                    00:23:f2:ce:55:08:b3:94:73:f2:84:f5:c7:d3:7f:
                    ed:20:fe:4a:9b:28:0f:63:e8:ed:64:37:c9:3f:2d:
                    f6:38:02:f3:13:ac:05:a9:83:c1:1d:72:fb:a2:b7:
                    18:b3:d9:20:c8:d1:5b:b7:0b:65:da:95:7f:da:d6:
                    f2:57:62:03:99:40:ad:27:33:45:f7:16:22:37:94:
                    d6:ec:f5:9b:bc:be:18:bd:81:7b:7a:d1:9b:4d:20:
                    d7:32:44:14:ad:41:65:0f:fb:c2:4d:67:1e:b0:b2:
                    b2:17:d2:f2:6c:69:2f:a3:75:be:15:25:b4:a3:c5:
                    22:e4:50:1c:00:0f:82:07:33:b2:99:ec:ac:54:eb:
                    b8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F8:26:D0:18:1D:A3:8A:68:A7:4D:AC:86:0D:B6:54:30:A5:EB:43
            X509v3 Authority Key Identifier:
                keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:08:60:a1:aa:94:17:df:b6:51:3c:d3:58:d0:33:40:37:d7:
         0d:90:47:62:0a:2e:31:ee:50:cc:a5:b2:55:61:00:31:1c:52:
         2b:70:18:40:99:8f:ef:5e:ea:8f:6c:c5:d7:d3:9c:b5:73:72:
         de:b2:41:67:ab:50:6f:7d:4e:18:09:c1:9b:80:a1:73:41:cb:
         29:51:91:6b:80:6e:18:05:ed:11:a6:76:0e:2c:c4:0f:d9:2d:
         9c:43:75:d3:d4:49:1a:f8:3e:e9:ee:60:69:08:f1:35:68:14:
         68:74:10:bd:e8:bc:d1:4e:2d:d2:0a:9e:0a:76:37:7d:31:c5:
         83:d7:01:7e:8b:e2:3d:6d:8a:97:fe:60:dc:a8:cb:f4:05:57:
         ee:7b:47:81:59:66:2c:27:03:3a:67:06:2a:dc:08:88:8b:80:
         87:18:e9:e4:d1:07:20:2a:f0:1a:14:e4:4f:28:6e:ba:a4:56:
         ad:41:48:f2:8f:c6:0a:15:b1:cd:f1:8d:cd:1b:4a:d7:6d:bd:
         33:eb:e3:fc:ea:67:d4:d8:5d:b1:be:c8:55:6e:fb:a1:d0:03:
         7e:ff:ae:64:d1:6a:73:8f:bd:b8:c4:c6:d8:f9:b4:49:3f:4f:
         cc:9b:d7:4d:71:e9:44:f8:d4:93:38:39:5d:9e:a7:40:ba:6c:
         7b:ec:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:20 2024 by rpki-client on console-ams.rpki-client.org