Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File:                     peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier:          nCy5WSLBrucjfFJHSwJxV1322yIEEOlX5d/mZiy1KEE=
Subject key identifier:   99:C7:BA:30:A6:F6:6B:F5:E2:A7:FE:6D:DD:A2:42:57:A5:58:E5:A9
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer:       /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number:          017E
Signing time:             Thu 21 Nov 2024 02:03:01 +0000
Manifest this update:     Thu 21 Nov 2024 02:03:00 +0000
Manifest next update:     Thu 28 Nov 2024 02:03:00 +0000
Files and hashes:         1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: kEN0itEbqIwGUARw3+gLKWtP2Ri4dAaTeRW81UEfOXU=)
                          2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: 1Kz/gacCnhM+fr3wXAjqYRKG+spIHUpJaLSQPwac8Js=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
        Validity
            Not Before: Nov 21 02:03:00 2024 GMT
            Not After : Nov 28 02:03:00 2024 GMT
        Subject: CN=673e94d5-8263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:04:73:00:3a:f6:69:24:d1:e9:17:58:f6:
                    cc:b9:35:88:db:33:05:50:21:0b:a4:d9:a3:2c:a1:
                    38:f0:a8:4f:c5:76:3d:23:66:49:c9:83:61:e7:04:
                    47:f8:0e:52:ad:c7:fe:b7:6c:32:c9:21:80:79:c3:
                    aa:1c:3c:30:1a:88:d8:73:1f:ec:79:16:6e:a3:9e:
                    06:2f:8a:80:44:93:0d:dd:06:36:89:c1:36:01:fd:
                    84:09:e8:ce:4e:a8:db:92:47:c7:2e:b8:48:29:f8:
                    6f:a4:f0:bf:c9:17:29:4b:4d:92:45:6a:cd:e5:a1:
                    8f:83:6e:bb:8c:d8:f4:10:0c:77:b8:e6:ff:78:4a:
                    8f:6b:94:06:09:94:68:e8:17:14:a1:d2:f9:6d:11:
                    60:73:07:ce:6a:6d:fe:3d:33:cc:2a:da:59:65:24:
                    ba:7a:30:12:b7:47:61:ed:67:3c:c7:ef:eb:24:f6:
                    f3:a8:e5:75:91:e8:e5:07:ae:08:b7:7e:a5:61:3c:
                    96:02:64:e9:01:3a:59:32:1a:16:cd:92:8e:78:b5:
                    5a:a6:f5:39:b9:bd:9f:3e:f8:5b:71:74:96:5e:9e:
                    97:f8:f0:76:46:1a:27:6a:bd:0c:d4:ca:d1:52:9d:
                    1d:27:b2:97:67:8f:67:92:a2:95:e1:d8:a0:fd:db:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C7:BA:30:A6:F6:6B:F5:E2:A7:FE:6D:DD:A2:42:57:A5:58:E5:A9
            X509v3 Authority Key Identifier:
                keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:27:f6:b8:29:e5:f5:57:4b:5b:57:ee:42:d4:14:80:d6:c5:
         45:56:d9:2c:f6:4a:6d:3e:af:7b:21:e1:3a:7c:44:ef:d5:e5:
         6c:b4:20:20:28:e5:98:5f:b3:f5:2d:38:56:6b:10:72:36:1c:
         8c:da:42:8c:27:94:3e:dd:f9:52:4b:35:c4:26:b2:9b:ba:ed:
         9d:71:5c:4d:53:25:db:5d:8d:3e:68:57:c5:49:d2:0e:96:23:
         3c:99:e1:40:2e:2f:52:72:72:a3:ae:e7:57:31:6a:69:93:90:
         56:fd:eb:6b:bf:47:cf:fe:2a:61:7d:c9:f5:c6:a4:49:cf:52:
         e6:ff:d4:2b:9d:7a:1e:c3:7f:d2:5a:d1:b4:69:48:b0:de:4e:
         c8:e7:ea:d5:70:8c:ff:f2:1a:b1:23:af:a8:72:07:f8:76:10:
         1f:0c:51:86:d3:1c:74:2c:81:46:a2:b4:96:ac:97:7d:da:4a:
         3d:a4:7d:1d:fc:3d:ee:62:f5:34:66:38:7a:01:4f:59:d7:af:
         87:36:d8:bb:f8:55:88:d1:32:b7:5c:76:8e:4f:7b:10:63:83:
         b5:a1:03:57:09:f9:39:47:5e:40:48:41:4e:2b:96:da:10:72:
         cd:e6:66:c0:a9:b8:60:2f:2e:5d:d4:80:46:79:9e:b4:da:2b:
         96:cc:32:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:39 2024 by rpki-client on console-ams.rpki-client.org