Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
File:                     H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json)
Hash identifier:          XeHHJK/wPtKfubh2k/IsBfXcWgrCC6tyCKyvuLATyGY=
Subject key identifier:   C2:76:71:00:C1:A7:02:15:D2:CE:C4:27:EE:EE:F1:3C:3F:78:2A:C6
Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5
Certificate issuer:       /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
Manifest number:          92
Signing time:             Thu 21 Nov 2024 04:34:10 +0000
Manifest this update:     Thu 21 Nov 2024 04:34:09 +0000
Manifest next update:     Thu 28 Nov 2024 04:34:09 +0000
Files and hashes:         1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: fQsSqZ3MlFAzQBMLW8C/kwzeNsJx+1yMG/kPZXA0hr0=)
                          2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: Y33xkPd/NcEVAXjbSrIl1ngKcwYgoXKhM/ZonEg3diE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl
                          rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5
        Validity
            Not Before: Nov 21 04:34:09 2024 GMT
            Not After : Nov 28 04:34:09 2024 GMT
        Subject: CN=673eb842-1fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:be:a9:89:7c:6f:14:a0:f0:f8:2b:8c:85:
                    3f:b0:8e:63:a6:b7:dc:97:ac:cd:d3:01:b5:8b:ef:
                    88:9a:02:66:fd:c9:ca:52:67:df:a8:20:11:ab:60:
                    37:f4:8f:b1:48:e0:83:f9:28:0f:b5:59:fa:5f:38:
                    95:05:05:b5:80:13:1d:c2:aa:33:69:2e:c5:d3:13:
                    48:6d:77:4b:92:69:22:9e:66:13:84:f8:d0:6c:b8:
                    a8:6b:ff:fd:c9:6e:9f:a7:1c:b7:5c:1e:3b:5e:a8:
                    79:00:56:60:1a:20:01:5f:50:8c:91:d0:bf:2a:27:
                    c1:dd:b4:e3:fb:f1:55:d4:e3:69:75:35:cc:47:3c:
                    e3:a6:d9:fc:05:f3:37:98:f7:51:fd:3f:3a:eb:2b:
                    d1:0a:91:90:ac:b2:2d:56:82:8d:77:a0:3a:4c:8e:
                    8f:34:8f:b5:92:9c:ea:d8:74:c7:fa:c8:b3:a5:db:
                    5b:e4:43:30:44:6d:38:b3:cb:09:8a:7e:7e:59:9b:
                    d8:ed:b5:17:ee:cb:f4:c4:e1:1b:92:36:0f:ca:5c:
                    69:18:47:6c:2a:eb:ed:c1:4f:fd:b7:5f:fd:04:7d:
                    6e:96:d5:a0:61:36:a1:c4:52:44:49:2b:18:1c:9d:
                    cf:3a:43:04:9e:38:04:34:74:e9:2a:fa:55:5c:72:
                    7d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:76:71:00:C1:A7:02:15:D2:CE:C4:27:EE:EE:F1:3C:3F:78:2A:C6
            X509v3 Authority Key Identifier:
                keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:11:bc:41:57:bd:18:fc:85:95:b7:8c:7e:52:45:e7:67:b5:
         02:72:ce:41:69:16:f1:45:68:92:b5:76:08:7b:0b:9f:b3:7c:
         c3:c0:71:c5:51:d5:db:99:70:1c:17:20:2a:e9:25:01:0f:ab:
         50:63:27:b4:1b:c9:07:80:40:9a:a3:a2:78:88:c1:65:00:61:
         5b:b0:0a:ea:60:ad:a3:b7:5a:8d:a2:eb:71:af:e4:35:c7:34:
         af:d6:dd:e3:17:e2:ee:4d:65:da:9a:39:6e:b8:56:b8:95:06:
         3b:9f:a9:48:66:3e:2f:fb:23:25:31:ad:cd:65:3f:9c:61:25:
         b7:c0:86:af:9b:96:39:87:e5:89:82:bb:db:c6:78:ab:41:dd:
         68:98:53:64:44:09:32:63:75:58:8a:e4:57:07:10:6a:d0:4a:
         7a:da:50:07:fe:ae:8f:e5:e7:34:ba:1b:bc:91:bd:46:91:3c:
         a5:aa:66:33:21:b2:8f:11:e0:b4:c4:97:38:66:44:c7:7e:f9:
         a5:24:a9:83:f5:d2:66:b4:e8:5a:65:d9:46:c0:d3:1e:33:fd:
         8b:aa:74:02:0d:77:5c:6e:77:ca:bb:af:8c:21:84:a6:a6:6a:
         bb:5b:d9:e0:a8:ca:91:19:41:5a:20:8c:f3:16:f3:46:42:bc:
         ac:a2:60:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org