Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
File:                     Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft (raw, json)
Hash identifier:          zV/gYm4jpkkjjsla7/gkf9tKYL0yd8zkIrL7SmIXU3o=
Subject key identifier:   0F:32:3E:D6:08:39:9D:1D:EF:64:09:26:4F:9C:93:BA:42:77:17:8D
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Certificate issuer:       /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
Manifest number:          3F
Signing time:             Thu 21 Nov 2024 05:32:12 +0000
Manifest this update:     Thu 21 Nov 2024 05:32:11 +0000
Manifest next update:     Thu 28 Nov 2024 05:32:11 +0000
Files and hashes:         1: Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl (hash: g5+RTsLaMKL6qVs7fxW2aHGr/8LZRYisFTjoijvtNf4=)
                          2: 627CDAE66FE011EF937A9931C4F9AE02.roa (hash: 0dZCq3mcoe7yTjElCP6apZ/TBsiHHQlqjfreRDLi3PQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
        Validity
            Not Before: Nov 21 05:32:11 2024 GMT
            Not After : Nov 28 05:32:11 2024 GMT
        Subject: CN=673ec5dc-0246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e5:c2:b6:75:cb:30:e2:91:1a:1d:19:66:7f:
                    b5:20:cc:d3:a3:e6:2e:8f:96:2d:37:2f:e5:50:a2:
                    59:c5:86:7b:f8:3a:17:6d:e9:44:04:2e:44:cf:a8:
                    54:d0:a3:df:f9:40:6c:7b:5f:24:3c:e6:6a:fa:19:
                    04:94:3a:22:e7:c8:b6:4b:78:d9:24:92:b0:cb:dc:
                    97:dd:5d:3c:83:78:3e:90:50:62:9e:96:81:ad:e7:
                    ed:21:8b:0f:cf:23:91:bb:51:7e:1c:a1:8b:57:ea:
                    81:b4:80:09:20:bd:13:8d:0b:c2:1d:53:de:20:7d:
                    f2:e1:d9:e3:00:1d:d4:d1:a4:92:df:47:f4:d9:96:
                    91:ca:7d:ad:86:08:4a:85:75:a4:b4:90:ab:13:74:
                    6d:b0:1d:63:d3:2a:32:00:c3:30:73:da:d7:11:7c:
                    27:c0:e7:a0:c7:f1:b7:5a:ac:b3:3c:ea:ec:70:df:
                    c9:10:f6:11:d5:5d:1e:18:60:e3:97:b8:e2:01:f3:
                    eb:c0:0a:e9:7b:f1:52:46:0b:d2:d6:54:9d:22:68:
                    1e:11:90:c9:b6:3b:d9:af:27:53:0b:b1:3b:4d:42:
                    dc:c9:31:31:ee:81:b6:27:80:0d:c3:f0:04:fb:ea:
                    fe:85:8f:31:ab:f0:55:69:cb:ea:22:2e:bb:09:1a:
                    46:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:32:3E:D6:08:39:9D:1D:EF:64:09:26:4F:9C:93:BA:42:77:17:8D
            X509v3 Authority Key Identifier:
                keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:00:2b:6d:c9:22:d3:de:a0:66:84:1b:f6:5d:cc:02:45:16:
         93:ae:eb:98:00:f1:f6:d4:a6:b6:07:e8:5d:7f:6e:18:e8:9c:
         e3:7d:95:ff:cf:d5:13:70:95:51:8d:d4:65:f5:de:e0:fe:ff:
         a3:d6:cc:32:50:76:d7:55:a1:7a:85:f7:7a:8d:4e:77:3e:6c:
         5e:8f:fe:d3:7f:f5:3a:75:2f:b6:b2:72:73:78:fe:cf:71:70:
         a1:0f:5c:a1:4d:6a:a6:53:03:3b:c3:a0:de:d0:cb:14:ef:31:
         85:cf:9f:a6:cb:46:ea:e2:e3:78:f3:85:82:73:c9:90:6f:ee:
         b9:13:ec:6d:67:a4:e3:1f:ee:be:1a:a4:e7:e6:b4:a8:3f:d9:
         80:61:2a:87:66:06:97:7e:ea:7e:8f:2a:7f:7e:e1:dc:99:cf:
         50:17:01:61:98:ab:28:44:48:0b:d2:3c:65:f5:c9:ec:ff:9e:
         8e:ad:41:fe:7b:96:00:59:47:1d:6e:8f:03:4b:90:da:d5:86:
         ac:0c:bc:89:4e:70:e5:26:36:a2:0f:d6:55:39:41:3b:aa:10:
         17:35:4d:25:0f:d3:cc:ca:8d:bb:85:32:55:23:e3:d1:8b:68:
         b6:0f:b1:b1:4a:4c:6f:c5:7b:a8:66:40:25:d0:9b:14:6e:e0:
         92:57:79:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:18 2024 by rpki-client on console-fra.rpki-client.org