Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
File:                     VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft (raw, json)
Hash identifier:          sOU1ekDa54l6JA2S5MAsaBSJWrJpskQ2xZhXHf/mX7Q=
Subject key identifier:   8E:24:E1:95:FC:4F:32:2B:C6:75:40:B9:26:42:AF:9D:11:1C:AF:83
Authority key identifier: 54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A
Certificate issuer:       /CN=A917295C/serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
Certificate serial:       05D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
Manifest number:          05D1
Signing time:             Wed 20 Nov 2024 22:33:32 +0000
Manifest this update:     Wed 20 Nov 2024 22:33:32 +0000
Manifest next update:     Wed 27 Nov 2024 22:33:32 +0000
Files and hashes:         1: VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl (hash: swNdu+JVND5q+6y70p1K6FgXdtLYDBjyV3pEl5P1Wxk=)
                          2: AE810C76CC8811EC85E73563C4F9AE02.roa (hash: KY/NWRg0nkZbgcah/UEEpqWN9t5PCkRr4Ny3AGbpHGs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl
                          rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917295C/serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
        Validity
            Not Before: Nov 20 22:33:32 2024 GMT
            Not After : Nov 27 22:33:32 2024 GMT
        Subject: CN=673e63bc-c227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:1b:83:41:d7:80:68:c7:66:b0:1a:09:df:
                    ba:55:a5:e7:2e:af:a7:f1:3a:8f:a3:7a:5f:40:80:
                    4e:6d:14:6f:49:81:68:29:2c:89:6a:ca:8d:4b:95:
                    b7:c3:d0:11:49:89:71:c9:0a:4f:24:fc:0a:35:c1:
                    df:fc:29:5a:a3:59:97:58:87:e3:64:a3:28:5e:bd:
                    46:dc:73:a9:a5:69:9a:bd:91:21:be:18:5d:19:6e:
                    38:39:1b:ba:fb:a5:4b:28:6f:33:bb:31:00:58:55:
                    9a:b8:c6:ac:6b:0c:7e:42:15:7d:24:c2:0e:12:be:
                    7c:ea:78:8f:af:76:8b:53:99:2d:3f:82:86:87:4c:
                    c9:05:54:06:7f:f5:1f:58:8e:83:cf:60:74:0d:c8:
                    cf:63:5a:7a:f0:c4:c6:f3:55:0f:dc:e3:34:ea:38:
                    cf:ca:42:6d:74:cc:f5:5b:a7:5c:9e:70:30:f8:1e:
                    c2:ce:8f:62:b4:63:c9:5d:62:c0:8d:f7:ce:34:36:
                    0a:d0:8f:b5:af:db:f3:f3:1f:66:37:00:6c:28:f6:
                    74:fb:10:76:f9:9e:69:16:99:7e:65:69:62:bd:76:
                    ce:e9:fe:a5:66:a9:f0:99:5f:74:c4:de:c6:44:c9:
                    36:5d:1f:49:a1:53:b9:0f:78:a1:68:cd:39:64:62:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:24:E1:95:FC:4F:32:2B:C6:75:40:B9:26:42:AF:9D:11:1C:AF:83
            X509v3 Authority Key Identifier:
                keyid:54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e7:27:0b:52:f7:2e:e5:cc:16:0e:ad:30:71:82:27:a5:32:
         a4:fb:1f:7a:45:c1:db:f6:70:ad:20:ba:5d:4e:41:35:b2:25:
         c5:28:25:ee:ad:44:c7:f3:f5:f1:41:9f:27:d7:0a:dc:6f:69:
         28:c4:3a:bd:ad:c7:1b:3e:45:5d:fe:2b:25:6c:5c:4e:53:bf:
         1c:e0:2a:69:d1:a7:68:58:76:78:c1:59:be:a9:e9:45:f1:97:
         cf:6b:ea:4a:82:ac:60:e0:39:26:61:ee:98:80:13:1b:ff:60:
         42:a3:85:ee:a7:a4:a4:f1:6d:35:9d:48:d0:4e:36:aa:f1:0f:
         82:58:ee:d8:6e:80:83:c4:2a:7a:94:3c:cb:93:1c:ad:6b:ec:
         ec:fd:21:66:ed:52:5f:14:7d:5c:f4:1d:a1:26:8b:a6:27:44:
         1d:34:81:25:ab:8b:4a:76:45:bd:a2:fb:c5:41:1c:f3:2a:c3:
         e4:be:c0:ba:36:a4:cf:38:57:74:96:72:43:a9:c8:ec:fb:fb:
         b2:ca:7c:36:4c:60:21:12:3a:68:09:66:65:b1:58:e4:5d:05:
         c3:75:d4:d5:d1:da:b9:16:49:a3:5b:0c:47:c2:93:75:11:30:
         46:6a:ca:09:91:eb:2f:05:a8:5f:71:9a:56:66:33:c3:1c:a6:
         be:97:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:45 2024 by rpki-client on console-fra.rpki-client.org