Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
File:                     jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json)
Hash identifier:          GO8m1y63ArhLiitqJDvY65+3Eie2mjIZOinRB9r38QY=
Subject key identifier:   43:93:78:7E:DD:50:29:17:33:D9:4C:FD:56:00:89:FF:A3:37:E9:8F
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Certificate issuer:       /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
Manifest number:          60
Signing time:             Thu 21 Nov 2024 05:11:01 +0000
Manifest this update:     Thu 21 Nov 2024 05:11:00 +0000
Manifest next update:     Thu 28 Nov 2024 05:11:00 +0000
Files and hashes:         1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: srGjB4LCS/5SzpEj9bWt84IrMLypocFDdo6s0H4NA0I=)
                          2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: fXMxp55GhgjiLTAtD9inNemzkpyTVSNb7IqL37YYltM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
                          rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
        Validity
            Not Before: Nov 21 05:11:00 2024 GMT
            Not After : Nov 28 05:11:00 2024 GMT
        Subject: CN=673ec0e4-3930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1f:07:c0:eb:ab:09:f2:67:73:a2:f6:ad:7a:
                    e6:0b:9f:47:3c:34:fb:c0:9b:38:7d:29:cd:31:6b:
                    92:a4:2b:9c:e0:b3:d8:c4:8c:b2:ed:b6:81:a3:8f:
                    52:79:58:03:3f:d0:d7:a7:f1:37:90:14:45:aa:a2:
                    d4:5a:37:30:bd:0c:c8:99:1c:0b:6f:40:5a:af:52:
                    95:a5:61:60:16:32:a7:31:a6:c9:b9:3d:3c:ca:e8:
                    f1:74:70:75:73:2f:03:5c:6f:e1:78:7c:38:76:80:
                    d2:bd:46:ff:47:cf:8c:d6:68:5a:45:e0:73:17:20:
                    16:b5:ee:c9:58:c0:f0:84:11:aa:09:4a:8c:52:da:
                    e7:31:51:64:83:47:28:5b:2c:74:a1:e8:dd:84:6d:
                    17:dc:54:9c:5e:7d:d6:dc:28:7d:7b:01:69:4c:4c:
                    2e:d3:ff:ee:cf:c9:9f:ab:4e:67:ac:50:aa:fa:7f:
                    b0:2c:8c:71:c3:cb:ee:56:22:57:de:fa:c8:df:64:
                    9c:a7:ab:93:57:af:99:02:49:fc:5d:d7:a5:b5:0f:
                    5e:7c:48:fd:9c:23:81:f3:8f:10:6a:10:74:8a:ac:
                    24:81:f4:93:bc:73:73:13:a9:eb:ca:af:1e:95:4c:
                    fe:d0:64:d5:22:69:6b:04:9a:11:a0:99:a9:94:0c:
                    fb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:93:78:7E:DD:50:29:17:33:D9:4C:FD:56:00:89:FF:A3:37:E9:8F
            X509v3 Authority Key Identifier:
                keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c8:49:6c:1c:76:4f:d6:ac:01:64:21:dc:41:7b:18:32:b3:
         4e:b4:f1:e3:66:4a:1e:20:16:95:90:d9:0d:4e:ce:2d:23:ea:
         ae:80:6b:a8:43:4f:5c:4a:cc:48:5b:9e:2d:ba:a1:1a:4e:55:
         71:2d:50:a8:cc:69:f3:48:20:98:2a:3a:2e:81:88:0f:26:99:
         86:a1:c8:08:a1:61:2f:b7:0e:0c:65:a5:80:d7:ec:8c:e9:6b:
         86:af:de:9d:7b:a2:98:6e:b8:9f:9d:b4:ca:3c:93:bc:9b:c8:
         8a:00:3f:ce:9d:2d:dd:97:1a:f3:42:4f:c7:bf:e8:47:84:41:
         e3:3c:94:9a:87:5c:d0:a1:72:f0:ea:19:a7:68:59:12:a6:8e:
         4a:a7:2e:e9:e2:52:e6:11:fd:3b:6c:46:c0:a7:9c:45:2c:1a:
         0a:7e:7a:23:ff:87:5b:ed:da:4f:c0:c3:99:78:2a:4f:e4:1d:
         dc:7d:b0:00:92:f0:69:ce:00:56:6e:28:1d:4f:ae:c6:12:15:
         aa:5c:2b:bf:eb:ae:cc:3f:5d:ed:86:d1:aa:2c:c5:a2:fc:38:
         7a:55:bd:7e:be:7a:09:2e:dc:97:e4:69:40:04:57:f5:4b:f3:
         77:10:c7:f1:26:dc:19:44:67:69:c9:40:f9:f7:6e:42:72:7e:
         fa:ea:7f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:06 2024 by rpki-client on console-ams.rpki-client.org