Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
File:                     1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json)
Hash identifier:          1NHLYlL5Q2hQF/+PihzREpdMMs20v0kGes2ZAaztvsY=
Subject key identifier:   4C:25:65:1E:6D:CF:78:4D:E1:20:6E:44:89:1C:1A:29:04:D7:36:99
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Certificate issuer:       /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial:       1EBC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
Manifest number:          1E97
Signing time:             Fri 22 Nov 2024 16:03:41 +0000
Manifest this update:     Fri 22 Nov 2024 16:03:41 +0000
Manifest next update:     Fri 29 Nov 2024 16:03:41 +0000
Files and hashes:         1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: XD6x02TDGm6c/76+hat0+cUOTaH9vCvBdbNcvKj9ZBA=)
                          2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: Uo0DI8uu4MaKQTtSGimWFCEZqnoAxk8F8R7u5G4FQ3c=)
                          3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 1vTwS6NmMwWfh2eOEtEYiCFnJVIHS5ywk/KgkT3QCd4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
                          rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7868 (0x1ebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
        Validity
            Not Before: Nov 22 16:03:41 2024 GMT
            Not After : Nov 29 16:03:41 2024 GMT
        Subject: CN=6740ab5d-53e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:08:02:d0:79:61:3d:4a:c2:a9:6e:5e:f6:
                    e6:0b:ce:80:92:9b:40:00:b5:e9:cb:d7:02:43:3d:
                    99:d0:12:98:a4:d7:28:75:a3:1f:38:e2:3f:cf:06:
                    92:fc:f6:a4:e0:56:e3:cc:d6:a5:08:67:7e:be:23:
                    bd:e1:91:16:92:0a:d3:23:ac:9a:69:29:80:c5:86:
                    3c:42:56:60:df:e0:74:ce:2b:1f:59:e6:38:6f:8e:
                    ea:71:0e:97:93:00:b5:1f:89:81:5a:1a:b9:0d:cd:
                    c6:ec:3a:d9:e2:1c:7a:1d:8e:b4:d0:18:87:36:1b:
                    3a:10:72:a6:9f:5b:b3:0e:73:bd:ea:12:5a:e3:5f:
                    f2:04:81:3b:35:d6:40:fc:21:11:80:74:1f:6c:86:
                    bf:f8:40:30:be:89:41:c2:eb:63:af:d4:b8:71:d0:
                    59:51:09:b0:8d:b3:33:34:ce:a5:73:72:89:bd:27:
                    ec:9f:01:9a:be:39:f1:7e:ca:1c:65:d6:5f:a7:44:
                    39:e9:69:e7:75:be:df:9c:a4:96:17:f4:ae:31:6a:
                    a8:07:1a:8c:70:60:06:d0:07:73:da:1c:49:c5:f5:
                    94:9d:d1:a7:22:ac:0a:a2:53:56:7c:76:ce:ed:25:
                    52:09:4d:2b:cd:62:85:f4:4f:98:fa:e7:a7:02:21:
                    5e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:25:65:1E:6D:CF:78:4D:E1:20:6E:44:89:1C:1A:29:04:D7:36:99
            X509v3 Authority Key Identifier:
                keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4e:c4:5c:fc:e9:ce:ac:ff:05:c9:18:44:36:c9:1e:24:5b:
         b6:15:1c:b5:fb:7a:74:2d:5a:fd:b7:20:21:f1:e4:3a:db:19:
         ff:9a:aa:c5:4a:c4:46:09:a8:78:1a:83:c9:b9:48:09:e4:26:
         a3:c7:72:41:cd:29:50:a3:c0:3a:80:bd:1d:6d:ef:bd:81:90:
         8d:ba:87:c8:00:c1:ef:99:a6:ad:45:3d:ec:b2:e0:3f:94:5a:
         4a:be:e7:2e:dc:dc:82:75:98:db:ea:57:bc:c2:88:14:ff:fb:
         5d:e2:4f:f2:19:24:10:f0:17:b7:ac:3d:e7:82:45:75:13:cf:
         f6:f4:96:da:ac:8e:38:b9:db:1a:2f:96:fa:0b:2c:ef:05:74:
         e0:80:22:e3:7b:87:64:52:22:66:5f:f4:a2:10:37:ef:c9:50:
         b0:4b:be:e0:a4:90:e9:41:89:cd:35:68:2a:fa:ff:a8:4f:ba:
         c1:0b:01:2d:79:5b:36:e8:c0:4f:78:7e:4e:96:1c:5e:2d:6b:
         ed:f7:41:70:06:36:09:ef:98:b8:0c:ae:c5:eb:81:a9:5f:0c:
         06:c8:c9:73:f5:ed:da:b2:11:08:27:b1:48:2a:a5:54:c8:2f:
         65:16:34:54:8f:18:9e:c1:42:42:e6:ce:c6:f4:84:67:a7:49:
         91:06:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org