Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
File:                     azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json)
Hash identifier:          0uI5DkqX7dLimhuY42Hz39ADWkxuiGChVF2ROb8psns=
Subject key identifier:   32:1A:44:6A:06:F7:33:B6:ED:8B:2C:9C:AB:FE:19:7F:98:67:A7:FF
Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4
Certificate issuer:       /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
Manifest number:          B2
Signing time:             Sat 23 Nov 2024 04:12:20 +0000
Manifest this update:     Sat 23 Nov 2024 04:12:19 +0000
Manifest next update:     Sat 30 Nov 2024 04:12:19 +0000
Files and hashes:         1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: XlzB1a930serxqEZopXAv3qMKVqtiZ5rYw4x71zLZNc=)
                          2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: oVwB/HHeiiU1VHu0Ysfw/slOtiqIYDBQ11p50HFdi6E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl
                          rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
        Validity
            Not Before: Nov 23 04:12:19 2024 GMT
            Not After : Nov 30 04:12:19 2024 GMT
        Subject: CN=67415624-7b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:28:95:79:fe:59:0d:0b:de:16:a6:68:e8:
                    b6:40:8b:e4:c1:ac:a5:81:0b:b1:d4:4a:5b:9a:dc:
                    3c:1e:3d:c5:c6:b8:53:9a:b0:ab:73:47:17:e3:7a:
                    f1:7e:f4:1e:b1:8a:33:7d:e6:9f:0b:03:fe:ec:25:
                    31:f8:42:40:dd:63:9b:22:90:c7:2b:b4:21:a3:42:
                    ec:64:93:fb:51:48:e0:12:ba:20:1e:e4:1f:1e:03:
                    0e:3b:8f:62:af:6b:8a:9a:bf:ea:da:a9:9f:f7:c1:
                    e8:ba:9d:62:6d:ae:8a:09:ae:17:c7:23:c2:d0:81:
                    32:d3:f1:00:8c:73:40:fa:f0:52:8d:aa:54:db:34:
                    66:fa:b8:87:49:79:69:8e:81:07:80:9f:0f:94:58:
                    6a:e7:63:82:20:80:a2:f6:6f:f9:f8:7e:fb:e1:c5:
                    fc:df:20:39:51:45:66:aa:11:7f:d6:8c:02:e2:46:
                    54:c1:96:71:3e:83:9f:b2:db:1e:a4:fb:55:73:13:
                    f5:1c:cd:a4:a0:4e:59:92:e5:d3:19:de:10:09:f6:
                    03:e9:e7:e7:df:43:46:22:74:a8:48:f2:09:7b:9c:
                    2c:ec:bd:4b:04:91:d2:00:b9:9f:9e:15:b7:6f:6d:
                    a5:16:1c:3e:99:d8:ba:c3:8a:bf:96:14:52:40:b8:
                    bd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1A:44:6A:06:F7:33:B6:ED:8B:2C:9C:AB:FE:19:7F:98:67:A7:FF
            X509v3 Authority Key Identifier:
                keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:db:f2:86:75:90:47:f4:eb:ee:e9:38:41:de:5d:da:64:a9:
         80:d0:a3:cc:3e:03:7b:70:55:40:d4:be:24:e7:97:66:1d:e1:
         8b:53:a2:b1:40:9d:4b:4d:0e:f1:86:e7:80:1c:3e:1d:be:8d:
         0f:73:4f:d5:71:2e:f6:91:28:88:fd:75:71:c5:40:42:57:07:
         10:0b:64:ec:1a:48:9a:f8:aa:7e:6d:a7:ff:18:ce:e6:ac:d9:
         92:3d:35:cf:aa:7a:a2:9c:3f:43:19:7b:5d:fe:0f:2e:cc:94:
         b9:9f:dd:8a:10:27:c0:e1:36:37:8a:d7:5b:d4:75:f9:b0:03:
         43:34:5f:9a:95:b7:b6:dc:4c:0f:34:05:06:6c:4c:c2:7d:d7:
         46:3e:14:2d:43:83:5f:05:59:ec:5c:e2:6b:a0:c6:47:39:3f:
         8a:4d:b0:61:e5:98:8e:ee:24:57:1d:ff:d6:9d:72:bf:2d:d3:
         dd:36:dc:6b:6a:d6:1d:42:6d:a9:d9:14:b8:d8:61:86:6d:c4:
         9b:e8:8f:4f:94:a2:62:bc:19:50:ee:01:e7:8c:d8:6f:e1:a3:
         fc:b7:74:50:b7:63:df:55:6d:6f:53:44:db:1b:9a:57:3e:79:
         45:ac:cb:aa:10:bc:97:cd:38:0c:1b:36:a9:58:da:1d:cd:0e:
         0d:52:4e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org