Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
File:                     CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json)
Hash identifier:          19xTRr4BP5+oSkCQFnUyRJF1+sz4+/BitMvt7fh2aOs=
Subject key identifier:   E4:8E:2A:F7:02:13:C3:2B:07:50:90:0B:F3:90:6A:40:83:B6:72:63
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Certificate issuer:       /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
Manifest number:          60
Signing time:             Thu 21 Nov 2024 05:06:51 +0000
Manifest this update:     Thu 21 Nov 2024 05:06:51 +0000
Manifest next update:     Thu 28 Nov 2024 05:06:51 +0000
Files and hashes:         1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: O4HZOvzl0KZYHDCfZG2F4gb8dxGb0ufHLQAuLeptWtA=)
                          2: FDC5FC0C232411EF868B873EC4F9AE02.roa (hash: ollqUlHXEfXQhQfDGC+/77xh3ifYmQTxENHBKgBxBPw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
        Validity
            Not Before: Nov 21 05:06:51 2024 GMT
            Not After : Nov 28 05:06:51 2024 GMT
        Subject: CN=673ebfeb-0ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:c2:bb:ca:eb:20:b2:25:82:3c:9c:aa:37:
                    07:25:89:03:a7:69:d3:72:d0:76:98:b4:6b:2b:3e:
                    db:24:45:4d:a2:78:bf:43:27:5a:07:81:e4:3d:d5:
                    a3:10:42:f1:05:d9:20:ab:25:7c:1d:6d:df:53:4a:
                    0d:8c:1c:5b:42:79:82:ea:c5:c6:41:63:04:c4:6f:
                    ca:d7:1e:e0:40:97:74:cc:3d:e2:dd:71:1c:1a:27:
                    92:f5:5c:4f:88:62:86:c4:a3:8f:c7:8a:85:26:79:
                    3e:6e:cb:94:1e:fb:ea:8c:5a:62:b0:96:ac:42:64:
                    f1:5a:5e:22:dd:6e:74:78:79:dc:cb:f2:e5:a3:f8:
                    fa:73:06:d2:ff:b3:e4:40:82:11:ad:10:5e:61:7a:
                    c1:5e:2b:14:78:ee:c1:d5:da:8c:aa:7c:8e:d3:a2:
                    ec:39:89:bb:3e:3e:f6:98:48:2f:37:58:12:16:5f:
                    fb:07:27:69:79:e6:77:e3:e1:71:e6:45:0d:dc:49:
                    70:e5:83:1d:e6:f1:bb:40:b5:d1:9c:34:72:c8:59:
                    2c:52:18:b2:dd:d0:41:c6:20:48:ef:5a:cf:4c:b8:
                    9b:a4:0e:3b:2b:97:d8:20:30:7f:23:c9:ab:a1:ba:
                    11:50:97:7e:20:92:74:c1:e8:15:f0:93:2a:f8:7d:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8E:2A:F7:02:13:C3:2B:07:50:90:0B:F3:90:6A:40:83:B6:72:63
            X509v3 Authority Key Identifier:
                keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:82:ac:36:19:1f:78:d8:86:4b:2e:07:61:0e:57:02:b5:da:
         d3:a7:7d:ed:82:6b:b5:8a:9f:bb:f4:6c:7d:c7:bc:71:10:69:
         1b:62:f8:a6:27:e0:a7:29:d5:fb:80:1b:7f:23:11:11:18:eb:
         b2:ea:98:4c:02:2e:6e:2d:99:b9:83:89:93:a1:47:5d:79:af:
         84:8a:4d:ac:7d:ac:6a:9d:99:69:ae:ed:ff:57:18:3a:4c:fb:
         4c:bd:0d:ee:33:e7:d4:ee:f9:cb:23:80:4d:a8:61:87:66:73:
         d6:43:7a:95:9b:6a:55:b8:09:4c:fc:7f:9b:3f:9c:b5:f0:ef:
         f9:51:8c:2d:61:70:a4:b3:5b:e2:da:87:7e:2c:34:d8:96:9b:
         db:e1:eb:46:0f:60:4a:59:b9:6c:f2:35:db:d7:24:81:0f:94:
         42:be:dc:e6:73:b5:aa:28:f1:39:04:87:90:8e:b4:8f:af:0a:
         fd:88:18:4d:b2:14:dc:83:4e:77:ca:e9:c1:91:90:18:6b:42:
         6d:60:e3:14:66:95:53:52:24:6e:96:00:90:d0:3f:18:72:01:
         06:8d:55:98:83:8e:80:35:dc:c6:00:4f:35:15:42:d5:7f:2e:
         cb:f8:20:bc:1f:93:61:d8:db:ba:d0:5a:d5:86:06:7c:f1:25:
         12:b1:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org