Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
File:                     0X13ywyJuZTN2suidScKHnTcqic.mft (raw, json)
Hash identifier:          odIKfVtdbn6DnP9Y300uM5KPE5i6FtfoWS+cIZ/3ggs=
Subject key identifier:   25:86:84:71:C2:86:40:D6:83:54:8B:1B:14:73:A8:EA:13:F8:A9:A1
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Certificate issuer:       /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial:       3478
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
Manifest number:          344A
Signing time:             Fri 22 Nov 2024 14:24:46 +0000
Manifest this update:     Fri 22 Nov 2024 14:24:46 +0000
Manifest next update:     Fri 29 Nov 2024 14:24:46 +0000
Files and hashes:         1: 0X13ywyJuZTN2suidScKHnTcqic.crl (hash: 5d1O0+HKVWLlPElJ3ni0AJYJ/5C+ZX3kO0REVMjmZ/M=)
                          2: 11D961427C0311EBB2F8C86CC4F9AE02.roa (hash: Sb+T+Aiuv11PThRPjJUZQbTAKtri3ge+udK5G3hmsfY=)
                          3: 75AB676E747811EDA48E0D52C4F9AE02.roa (hash: Qn1WM06chi02gzUwTVrnXfMikD/uGjvyaRc+4AnXcGQ=)
                          4: 76B90530747811EDA48E0D52C4F9AE02.roa (hash: aDcFPj9k1Wma3kYuqtZDaJFjgE39HYPXBABBwap0MIs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
                          rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13432 (0x3478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
        Validity
            Not Before: Nov 22 14:24:46 2024 GMT
            Not After : Nov 29 14:24:46 2024 GMT
        Subject: CN=6740942e-6e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:43:8a:48:51:4d:b2:cd:10:c9:65:b1:a5:
                    4c:ab:5a:6e:6d:3a:84:d6:a7:6c:ff:2c:47:f1:d9:
                    50:ec:e2:4a:07:85:9d:68:65:39:06:33:a1:0a:7b:
                    4c:d5:9c:66:e5:38:15:26:52:72:87:ae:9d:a5:fc:
                    13:64:9d:80:47:d6:97:18:53:19:39:c0:1e:0b:49:
                    83:e9:c8:68:ac:49:63:1b:88:be:ec:77:24:ea:9e:
                    f7:48:5c:88:f4:aa:4a:b6:8e:06:22:33:a1:64:1d:
                    7a:69:e4:5d:cd:ec:6a:e0:36:66:4c:de:f4:93:1a:
                    c5:6d:8e:d1:b4:9a:9d:b6:b3:f6:eb:1d:a9:77:d5:
                    39:78:11:62:06:76:05:58:86:1d:54:28:aa:ac:a0:
                    39:a7:e4:20:8e:a2:28:fd:5c:27:4e:68:de:40:d5:
                    0f:89:9c:09:05:22:ea:26:aa:58:43:56:ae:85:14:
                    4c:0b:8d:ad:29:c4:27:2c:f5:d9:91:5d:f0:3b:1f:
                    af:f6:30:29:9c:67:04:95:47:21:10:dc:be:6f:8a:
                    7c:15:e3:30:45:41:7c:12:0c:fc:57:87:c7:dd:5a:
                    c7:5b:31:6d:79:5f:18:58:c2:23:22:0c:0b:3d:2d:
                    9d:2b:3a:b4:21:87:f8:4b:13:bb:72:4b:74:c8:94:
                    70:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:86:84:71:C2:86:40:D6:83:54:8B:1B:14:73:A8:EA:13:F8:A9:A1
            X509v3 Authority Key Identifier:
                keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:9f:be:c3:d0:e8:4b:4c:6f:5a:25:1e:f2:79:cd:89:be:
         76:e6:c4:dd:24:00:e8:e3:5a:ea:8e:70:40:f1:2a:3d:5c:59:
         5d:07:f6:34:fb:b2:11:7e:60:e4:c2:f7:1b:de:ce:41:5e:48:
         be:2d:91:c6:6e:fb:40:04:c7:7e:af:fe:b4:f5:bf:46:f1:de:
         aa:dc:22:ea:75:68:c5:af:1e:0f:98:db:6d:1e:fb:a4:4a:22:
         46:0b:5a:9e:8d:77:bc:57:4d:9d:45:64:c3:c6:3e:67:eb:fc:
         b8:e1:2f:c0:0e:4d:68:95:9f:60:d1:e8:9e:f8:9a:7a:45:6b:
         47:86:9f:72:d6:d2:86:76:4b:78:36:e5:08:35:97:81:fc:cd:
         48:88:6c:ed:29:0b:58:9e:4a:55:73:d0:cc:6b:79:86:2a:6c:
         e6:4d:ec:9e:02:d1:42:5a:73:ad:1a:55:42:1b:66:58:22:63:
         50:8f:7d:45:f9:b6:08:ab:81:42:06:29:b9:ff:f0:5e:f2:d5:
         61:6e:6d:49:1d:d3:02:ea:d9:3f:78:48:7f:fc:b4:a6:32:ce:
         e9:01:82:04:53:c2:50:76:53:b5:b0:63:8f:33:c8:ec:b1:51:
         75:8e:0d:a9:b8:37:99:d9:2d:59:53:d5:d1:ef:e0:c4:66:e6:
         63:95:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:37 2024 by rpki-client on console-fra.rpki-client.org