Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
File:                     GhottiJwSYYNHLb7OB0DX3zd_nk.mft (raw, json)
Hash identifier:          aLTnhwgvxYMg+3kK47k/jiF1jEx3Xh9EDVwJnCJEAUQ=
Subject key identifier:   FF:5A:E6:EA:30:1F:00:1D:AD:B3:E1:3C:1C:8F:B1:07:02:98:66:1F
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Certificate issuer:       /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial:       07C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
Manifest number:          07B6
Signing time:             Fri 22 Nov 2024 20:46:46 +0000
Manifest this update:     Fri 22 Nov 2024 20:46:46 +0000
Manifest next update:     Fri 29 Nov 2024 20:46:46 +0000
Files and hashes:         1: GhottiJwSYYNHLb7OB0DX3zd_nk.crl (hash: L1kfm6DLL1bEFVzY9dTKQheznrPc7fpWFxyWyHKDu9A=)
                          2: 9067F6746F3211EF8F5EFB20C4F9AE02.roa (hash: 4M65KGjZx3n4TcnEBrSY9PlP+MFh9MlbhpJEgtId4vg=)
                          3: 9F555EDC433611EB89B8BE60C4F9AE02.roa (hash: Ul+h5yFKxdc27JWdtAgjP/Idl7HvtMFjlARFh9uJLQs=)
                          4: B2E74042602811EF90548827C4F9AE02.roa (hash: 5CfU6Ey+EqR6j3v3qr6f+yrfJbdI9IE9e5KRkCXxOtY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
                          rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1992 (0x7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
        Validity
            Not Before: Nov 22 20:46:46 2024 GMT
            Not After : Nov 29 20:46:46 2024 GMT
        Subject: CN=6740edb6-9921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:0e:3f:fb:05:79:ba:06:02:11:3f:4c:b5:
                    35:6e:95:ad:63:ab:fb:3b:95:78:47:18:e4:75:d6:
                    96:f6:43:88:6f:2c:09:c1:46:00:c8:c5:a3:03:32:
                    aa:1d:5c:de:66:8d:0d:74:e7:08:52:f9:cf:ed:e4:
                    80:79:35:ca:38:3b:90:92:2d:97:a1:c6:6e:81:30:
                    b8:ec:a4:4b:1c:d1:37:93:1a:ba:a5:02:20:9b:1f:
                    b4:2f:13:6f:22:1e:2e:93:89:01:75:e7:7c:65:fe:
                    19:e2:9a:30:ee:66:21:87:87:c3:ae:87:2d:66:33:
                    2e:33:fc:c0:42:b0:c8:16:db:c4:6e:10:fc:5c:62:
                    32:82:59:a8:1a:80:3f:c0:99:01:60:33:51:86:b8:
                    f5:98:e6:f2:81:ff:8b:4c:01:4f:c5:d7:e9:98:87:
                    81:05:68:94:9c:a4:af:1c:ed:4b:2a:de:df:55:5e:
                    ab:a8:10:fe:55:f6:66:c9:d1:f0:4b:e4:11:45:96:
                    ad:8d:b4:2b:20:b2:fe:ec:a5:e3:34:0c:e6:6c:f5:
                    17:fc:e0:42:ae:c4:9b:d0:54:5d:56:bd:1c:a0:de:
                    d4:74:1a:20:4e:76:cf:2e:18:79:8e:d0:d1:4b:ca:
                    86:24:de:11:bf:4b:99:48:f0:fc:34:67:e2:75:d3:
                    f8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5A:E6:EA:30:1F:00:1D:AD:B3:E1:3C:1C:8F:B1:07:02:98:66:1F
            X509v3 Authority Key Identifier:
                keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c9:3a:67:25:5d:40:a8:0b:47:31:2e:51:de:18:dd:87:b9:
         3c:d9:7a:d3:5d:26:24:de:f8:07:e6:f8:f0:2b:e0:35:d0:c7:
         f2:a7:32:09:f8:18:8e:14:3e:0a:f7:be:8c:2a:c9:88:fe:1f:
         c0:2a:db:ba:f3:de:c2:35:a0:ef:b4:82:04:3d:f5:14:f8:8a:
         f6:6c:2d:c0:76:11:4a:f7:28:96:25:de:05:08:6a:57:2e:4f:
         9e:4b:b8:8e:0b:4f:1f:ab:2b:03:07:2c:fe:e5:90:da:30:06:
         3d:6b:eb:e6:ba:be:1c:76:bb:10:a3:29:d8:bf:12:c1:32:b3:
         7b:1d:1f:a7:89:70:57:b2:cc:6a:68:95:f0:19:f9:82:5b:90:
         31:33:eb:a6:96:9e:fa:7a:bc:07:d1:01:8d:50:db:a8:2b:0f:
         d6:19:da:79:63:49:cc:b5:9a:f1:c6:01:85:b0:d1:52:13:5e:
         ef:12:14:56:69:f6:f0:4e:a1:fd:b0:8f:89:7f:f2:75:e4:08:
         f7:c7:25:f9:30:bd:df:2f:70:ec:d8:7d:01:07:ad:7c:50:8b:
         41:a6:e1:17:04:8f:64:96:2f:9b:ab:59:bc:72:b0:b2:ef:0b:
         bc:ba:1a:08:4f:ff:0f:ba:c9:5b:8b:43:12:a1:5c:5e:47:0e:
         9d:6e:a0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org