Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
File:                     RLu-zETJHgkDBfMc5g-37DrJU-c.mft (raw, json)
Hash identifier:          JRV6vlD7LJ9oW4HhPdHQ6w/IZ11ULO3DiARSNl84tLE=
Subject key identifier:   22:51:D6:83:7B:FB:1D:D2:63:84:9E:09:FE:67:BE:44:6E:6B:98:BD
Authority key identifier: 44:BB:BE:CC:44:C9:1E:09:03:05:F3:1C:E6:0F:B7:EC:3A:C9:53:E7
Certificate issuer:       /CN=A9177D93/serialNumber=44BBBECC44C91E090305F31CE60FB7EC3AC953E7
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
Manifest number:          CD
Signing time:             Thu 21 Nov 2024 03:55:40 +0000
Manifest this update:     Thu 21 Nov 2024 03:55:39 +0000
Manifest next update:     Thu 28 Nov 2024 03:55:39 +0000
Files and hashes:         1: RLu-zETJHgkDBfMc5g-37DrJU-c.crl (hash: zHQEaxMWM9ahZY4S+g9N8PH9osYjBonD/YnkAGWhXQw=)
                          2: 5E69790087C911EEBD25E611C4F9AE02.roa (hash: XPndWRM0IelfTrLI9n1JOvmkBoj2QC2GPvktNvP1YPE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.crl
                          rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177D93/serialNumber=44BBBECC44C91E090305F31CE60FB7EC3AC953E7
        Validity
            Not Before: Nov 21 03:55:39 2024 GMT
            Not After : Nov 28 03:55:39 2024 GMT
        Subject: CN=673eaf3b-a000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:8a:ac:48:0c:08:4b:c2:ca:0a:51:20:fe:
                    cc:0c:de:56:24:71:94:b9:96:14:ba:6b:7e:77:f3:
                    80:83:d6:47:f7:67:8d:d4:90:84:f9:97:97:d4:45:
                    cc:af:b1:bd:4e:8e:30:90:ab:19:64:6a:76:91:d3:
                    e9:76:98:e7:06:f1:e8:6a:c6:e6:e4:e1:4f:0a:7e:
                    af:7a:ea:73:e5:b2:f0:c3:a9:1b:d0:09:98:94:7b:
                    5b:ec:cb:94:df:de:0a:ce:9f:68:93:48:29:47:24:
                    4b:2c:fb:ba:cf:f1:9c:4e:98:b3:a9:85:a9:2f:ef:
                    cf:14:38:0a:fb:c8:e4:db:a0:21:ba:86:48:d1:02:
                    2a:33:b6:26:12:51:6a:a9:49:7b:ed:ac:38:b8:b2:
                    56:85:ad:83:db:aa:71:bc:b5:cd:eb:00:28:cb:86:
                    61:da:dc:2e:30:7d:20:d7:c7:83:a2:55:e4:5b:03:
                    51:e4:a2:d9:96:30:41:32:07:e5:5d:bf:ac:2c:3b:
                    95:d2:fa:0f:f1:3a:e3:04:6d:96:8e:98:92:23:10:
                    46:30:c3:3d:fc:e2:30:e3:f5:e8:18:d8:b5:a1:f5:
                    f5:ef:2f:23:64:00:b0:03:e8:75:e8:80:c6:b1:c9:
                    49:59:ff:44:c8:c3:e0:9c:b3:45:d0:a0:c6:56:c6:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:51:D6:83:7B:FB:1D:D2:63:84:9E:09:FE:67:BE:44:6E:6B:98:BD
            X509v3 Authority Key Identifier:
                keyid:44:BB:BE:CC:44:C9:1E:09:03:05:F3:1C:E6:0F:B7:EC:3A:C9:53:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c1:80:c9:29:68:d9:8c:0a:05:69:15:00:0c:5e:3e:1b:d4:
         b9:c2:77:9e:a4:bd:1f:ea:9b:1d:ce:8d:cc:5c:ef:d3:5b:61:
         c0:04:25:70:03:1c:52:17:be:0c:1a:be:0a:23:dd:dc:d3:db:
         72:5d:0a:2c:33:67:4d:aa:c1:45:98:11:c1:2c:12:55:8d:31:
         c3:ca:5a:db:18:ad:08:95:54:b0:d8:ab:07:56:38:64:ad:82:
         2e:9c:e5:f1:60:62:ac:00:91:12:2a:3f:55:83:84:01:56:4d:
         2c:e8:4b:53:11:bf:67:bd:13:b7:13:08:df:d5:ac:0a:3f:98:
         af:6a:8f:1d:0b:46:79:2a:4a:6f:8d:69:4e:bc:ef:20:93:20:
         3b:c4:71:90:2e:0d:98:18:01:36:a9:ce:db:b6:64:fb:e6:07:
         c8:a5:8c:0f:18:d3:bf:9a:56:9d:c4:a2:0f:5a:6b:3e:3d:a1:
         0c:5f:23:6a:55:e6:bc:d8:3c:09:9f:c3:fe:98:e2:08:7e:e1:
         ff:db:c8:a3:3b:67:d1:d2:41:b2:51:93:0b:4e:a1:df:96:24:
         c5:4c:28:f2:0d:61:01:01:5b:94:eb:26:db:63:07:61:53:c7:
         8d:32:13:54:82:db:f7:73:be:67:15:7f:47:57:40:f7:7c:64:
         68:4e:c7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:59 2024 by rpki-client on console-fra.rpki-client.org