Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
File:                     H7TDxXlvFLOd9R77qdra_Vzr0Js.mft (raw, json)
Hash identifier:          Da0id7kw0L0gKaswj8j9bkJxVq1uiAOXY8ss457HMFA=
Subject key identifier:   E2:62:5A:5E:D5:2A:02:DA:88:3C:0F:EE:86:1E:92:87:B0:01:73:AA
Authority key identifier: 1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
Certificate issuer:       /CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
Certificate serial:       0532
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
Manifest number:          0528
Signing time:             Fri 22 Nov 2024 23:05:57 +0000
Manifest this update:     Fri 22 Nov 2024 23:05:56 +0000
Manifest next update:     Fri 29 Nov 2024 23:05:56 +0000
Files and hashes:         1: H7TDxXlvFLOd9R77qdra_Vzr0Js.crl (hash: uW8E4KnrIrTVLnz1CxApB4+aLYffKjcF8kxMgbNhSX4=)
                          2: 9E4B680ED91A11EB8639B184C4F9AE02.roa (hash: 4N9ZPhzcedA0cm446nEM6Nx+zkkKXUT4YIpXEuFU8+k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl
                          rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330 (0x532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
        Validity
            Not Before: Nov 22 23:05:56 2024 GMT
            Not After : Nov 29 23:05:56 2024 GMT
        Subject: CN=67410e55-6669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:1f:77:44:51:a9:29:32:d9:71:1c:55:e7:
                    00:60:0f:96:a1:44:da:23:f6:a1:4e:52:75:3a:f6:
                    80:be:8c:7a:2a:28:3d:8a:46:fd:08:84:0b:1d:e9:
                    96:ce:8f:66:f7:35:45:4a:ed:6d:93:44:33:13:cc:
                    3f:05:94:f9:c1:4f:78:90:92:d8:17:46:db:b7:db:
                    b9:c7:2b:28:11:13:e6:16:8a:95:8c:13:31:ba:3d:
                    8f:87:b3:be:06:c3:f8:14:49:fc:b9:e3:d7:a9:1b:
                    ac:4a:51:1e:10:b1:d1:cd:ee:69:f2:0f:a4:85:43:
                    79:45:0f:23:04:86:e7:f1:7e:80:4f:32:2f:cc:38:
                    a0:f9:ea:ec:1e:a7:b4:68:a1:62:f9:3f:fb:c5:be:
                    a2:8a:6e:77:61:e0:f1:0c:81:d8:90:32:14:a3:a8:
                    b8:69:ed:38:94:b6:58:db:81:9b:7a:a6:20:2f:a7:
                    3d:18:44:e7:e3:09:59:f3:c7:8c:8b:59:32:0e:4a:
                    b6:cd:21:67:5c:50:81:b3:21:80:75:71:3b:66:fe:
                    df:d9:a8:36:8a:39:c3:f1:35:0f:ad:e6:ac:9c:4a:
                    d9:7e:52:89:67:1b:67:72:c3:c2:02:41:48:64:2b:
                    fd:ff:bd:d3:5f:1a:c3:7a:01:92:fa:c8:03:f6:28:
                    f9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:62:5A:5E:D5:2A:02:DA:88:3C:0F:EE:86:1E:92:87:B0:01:73:AA
            X509v3 Authority Key Identifier:
                keyid:1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d5:5d:04:dd:e8:89:55:86:cf:55:d0:0c:15:22:6f:3e:49:
         24:84:b5:2a:97:f8:27:91:9a:79:bf:95:97:c3:6e:bf:26:3b:
         93:9c:85:42:3f:b0:1c:76:36:c4:d8:06:88:eb:ef:d5:c2:0b:
         88:5b:f3:b8:0e:5d:57:ee:9c:05:8f:51:6d:cb:84:1a:4c:58:
         b8:17:64:a9:dc:cf:d4:cf:f6:20:01:26:02:19:97:b2:18:6b:
         10:7a:a5:21:5f:a5:10:4a:64:d3:d2:8b:fd:b3:69:7e:9a:bf:
         f4:5c:1f:f1:ce:0e:9d:ae:c6:df:be:3c:00:ea:fa:14:cc:d8:
         aa:3a:eb:fb:72:7c:b5:87:ae:bd:cb:16:36:f8:80:7c:7a:f7:
         d9:01:2c:bd:e3:a9:d4:0a:92:26:fe:8e:c8:5b:f3:87:67:80:
         42:27:a0:dc:f2:36:d1:0b:fd:75:79:ea:3a:54:7c:a1:05:cc:
         53:9b:e0:84:1d:2b:7b:27:6e:a7:b1:45:f2:6f:ff:9a:5a:cb:
         2c:e1:bc:57:92:48:a7:69:97:4f:e7:fd:35:16:44:6f:3d:13:
         f7:1a:f7:eb:77:d3:b1:62:ee:2b:9e:e6:fb:80:b1:c8:00:e1:
         e1:0d:e7:02:ae:ed:38:e4:20:54:bd:94:0e:8d:b5:ce:31:77:
         6e:56:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org