Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
File:                     vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft (raw, json)
Hash identifier:          aBSItYVYdgfEqeXmB19f/cV8Qr3BmpBWgATttO0U72Q=
Subject key identifier:   7E:60:9F:D1:AD:47:57:C8:3B:6D:2A:99:C3:B0:97:64:3D:2C:88:50
Authority key identifier: BF:08:E8:E0:B2:A6:76:DC:AE:C4:9D:51:9B:FE:C7:65:46:C2:16:7E
Certificate issuer:       /CN=A916B30C/serialNumber=BF08E8E0B2A676DCAEC49D519BFEC76546C2167E
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
Manifest number:          A3
Signing time:             Thu 21 Nov 2024 04:22:44 +0000
Manifest this update:     Thu 21 Nov 2024 04:22:43 +0000
Manifest next update:     Thu 28 Nov 2024 04:22:43 +0000
Files and hashes:         1: vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl (hash: 2XhOHdEii28AFYN8EvGcFonB9IzkuGkOKq3ykk9OXEc=)
                          2: C75C471CB05F11EEB81C6C79C4F9AE02.roa (hash: EdSZ6qr63xC+oSn3BtQeqPtqk0XiF3n+3mroGstsIKo=)
                          3: 610EBED6B06911EEA7F1DA31C4F9AE02.roa (hash: U8W7Ewp5/SdLbkdRNTL2q4DNj5csWNACLl4FWcVO/wo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl
                          rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B30C/serialNumber=BF08E8E0B2A676DCAEC49D519BFEC76546C2167E
        Validity
            Not Before: Nov 21 04:22:43 2024 GMT
            Not After : Nov 28 04:22:43 2024 GMT
        Subject: CN=673eb593-8c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:66:9a:50:b3:e9:a7:a2:ae:2e:22:21:59:
                    f5:29:18:39:d0:94:46:ef:59:60:b8:60:f2:e0:8a:
                    c1:71:59:9a:1e:4f:ff:8f:38:3b:0c:94:55:20:f3:
                    b6:e8:3e:2c:89:c9:9e:b2:3c:f4:2e:82:4b:c4:08:
                    14:e1:67:57:f3:92:fe:38:66:9e:e8:7b:1c:0a:2f:
                    83:12:87:4b:42:03:b3:16:2b:f1:7b:a8:3e:0a:5c:
                    13:ea:bf:b9:89:36:f8:6c:2d:9e:b9:f3:12:6c:7e:
                    cd:52:a4:d6:41:9b:f7:98:8b:d4:7a:f0:36:79:16:
                    ba:27:17:54:a4:ac:ab:01:23:8a:95:35:c8:b1:0f:
                    89:2d:87:90:11:f4:6f:c9:64:9f:22:1c:14:4d:0b:
                    6e:29:92:9f:16:0c:9a:f3:f2:3b:08:1b:17:10:e0:
                    07:dc:ad:da:ff:f3:5d:96:ca:86:94:5a:83:47:95:
                    86:42:09:2a:c6:be:dc:b0:80:90:03:38:62:e4:0c:
                    47:c0:13:7c:9e:f6:1a:38:4e:f4:09:3a:85:a9:a4:
                    04:95:6b:ba:4a:aa:03:53:0d:d9:75:a2:99:74:0e:
                    4f:e5:41:b2:dc:d3:df:00:f9:08:64:3d:b2:b4:69:
                    7f:98:e3:9a:7c:84:23:b8:e3:63:9c:49:37:b8:c9:
                    1f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:60:9F:D1:AD:47:57:C8:3B:6D:2A:99:C3:B0:97:64:3D:2C:88:50
            X509v3 Authority Key Identifier:
                keyid:BF:08:E8:E0:B2:A6:76:DC:AE:C4:9D:51:9B:FE:C7:65:46:C2:16:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cd:33:bb:2f:90:8a:e9:eb:c4:6c:b8:15:8f:ad:99:7a:0a:
         0c:83:5d:ed:ba:a9:7c:55:0f:7e:61:ef:aa:74:bd:25:f6:15:
         be:fd:f9:38:d9:b0:c6:70:44:68:2b:bf:8c:77:26:bb:ae:f8:
         86:99:b1:71:7f:a1:ba:5b:8c:a4:50:74:83:c0:a2:a2:fa:5c:
         82:00:c2:9c:53:0b:fc:2c:8b:0a:fc:e4:f7:a5:48:5b:8a:25:
         a1:3d:c2:81:59:5d:eb:51:26:7b:da:f3:6c:8e:ef:52:4c:cb:
         70:3c:94:15:7f:17:84:3f:37:e7:86:82:a1:4f:75:cf:fc:dd:
         ad:d8:06:cb:55:b9:a2:f8:b6:39:01:e3:9b:2d:d4:3b:5e:eb:
         cd:6d:2c:17:72:c3:56:38:5d:a8:07:eb:b3:65:66:d5:f0:ca:
         a3:b8:b7:1e:50:f6:7e:42:cb:cd:24:51:57:1b:26:68:be:c0:
         6b:da:77:db:db:d4:34:14:f8:0a:e0:e2:35:6c:81:7d:02:13:
         c4:0d:4f:05:9b:2a:2d:f8:95:89:e3:f9:0b:2b:9c:d9:6b:29:
         42:86:26:e3:55:4a:8d:bb:47:42:93:e9:6c:ba:4e:54:d1:93:
         b5:ad:32:2f:de:a2:56:64:9a:78:b4:2a:53:c4:8d:3b:d5:91:
         10:e0:88:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:58 2024 by rpki-client on console-fra.rpki-client.org