Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
File:                     qzsSgRukXmOSsAXTQfk6DQfyqxw.mft (raw, json)
Hash identifier:          gozzDV6CirYVcQyjVjDhN8uVUQz4SsimBUUhGsL0UH8=
Subject key identifier:   70:41:B2:49:53:3B:A2:F4:F1:C4:95:BB:81:F5:37:F4:95:EB:1F:9C
Authority key identifier: AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
Certificate issuer:       /CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
Manifest number:          0139
Signing time:             Sat 23 Nov 2024 02:42:22 +0000
Manifest this update:     Sat 23 Nov 2024 02:42:21 +0000
Manifest next update:     Sat 30 Nov 2024 02:42:21 +0000
Files and hashes:         1: qzsSgRukXmOSsAXTQfk6DQfyqxw.crl (hash: MF/8w7BHchxmu9jS2NbLRTeu4RHrlmZTkW7H2+AG5z0=)
                          2: 8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa (hash: JSIERUiirVbPFJ8aqP2AfVoC0pzJHMwyydsQwNTDNkQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl
                          rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
        Validity
            Not Before: Nov 23 02:42:21 2024 GMT
            Not After : Nov 30 02:42:21 2024 GMT
        Subject: CN=6741410e-04ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:53:64:dd:ae:2b:b0:88:b4:a2:9e:63:a5:
                    bd:0b:41:e2:9e:d9:bd:65:d7:e3:0a:d2:e6:7a:ae:
                    4f:f1:b0:cd:e6:1e:61:2c:55:91:2e:98:92:6d:a6:
                    ec:92:bd:21:59:52:ca:41:60:bf:2a:6c:5d:34:6a:
                    6a:39:c6:ed:48:b6:28:e0:b6:81:bd:b3:8d:f7:24:
                    9f:83:3d:01:90:6f:8d:6f:10:57:35:1b:48:2a:6a:
                    e8:ee:ce:ec:e4:80:33:71:f7:a5:03:0f:b7:0c:ce:
                    70:ab:51:ad:9c:96:86:fe:2f:79:8c:c3:38:2c:2f:
                    14:ed:79:dc:7e:d0:7d:bf:e2:45:b3:50:81:54:99:
                    8a:38:90:69:4a:2c:26:cc:99:73:e0:02:85:5d:c2:
                    3b:2a:11:b5:1a:7c:7d:9f:27:98:c5:f4:1f:ae:d6:
                    4d:2a:e4:aa:a1:02:8e:ef:1e:37:64:fa:16:e5:88:
                    f2:1c:f4:33:17:9e:ed:b8:e7:ba:7c:7f:cb:8e:4b:
                    8c:33:7c:44:6a:54:8c:d0:68:09:2f:5e:bd:fa:3a:
                    1c:23:9d:9a:f8:f2:0c:4f:49:6a:6b:33:7c:bd:46:
                    fd:ff:f3:9b:48:b8:d0:ce:9b:75:ad:ac:a8:df:2a:
                    31:6c:fc:ed:40:fa:88:b5:a8:57:6f:7e:d6:69:cc:
                    e2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:41:B2:49:53:3B:A2:F4:F1:C4:95:BB:81:F5:37:F4:95:EB:1F:9C
            X509v3 Authority Key Identifier:
                keyid:AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:a1:e0:32:90:e0:d3:a9:67:87:46:39:e5:c7:8b:e9:30:
         f6:12:98:26:73:54:49:e6:f3:c3:08:ff:fa:fa:a6:7e:09:85:
         7f:6d:39:3c:e2:f1:d5:16:4c:93:2c:85:98:ee:5b:94:62:e2:
         85:1f:d4:35:42:9e:fe:f2:30:e0:39:4c:fa:f1:51:84:8b:f2:
         94:79:bc:73:7a:2f:9b:0a:da:a3:b0:10:98:3a:5d:be:29:72:
         81:73:2d:04:aa:7e:a7:88:52:00:d6:bc:a7:ca:fd:33:7b:47:
         10:3b:e7:42:7a:8a:85:1e:dc:d8:11:c1:48:99:2e:c6:a9:f7:
         ee:84:12:80:8d:ac:ae:17:89:81:d2:ee:a6:e5:f3:45:92:9b:
         41:af:ac:f3:6e:5b:b3:49:55:2f:51:70:e8:8d:4b:17:6f:13:
         2b:c6:60:d7:d9:a7:66:2a:01:5e:fe:38:3b:a2:21:c3:46:20:
         71:ea:61:ec:bd:f9:7d:80:a9:a7:09:96:34:2b:fd:4d:0f:ea:
         82:75:79:85:c7:b8:42:d2:1e:bf:64:dc:9c:af:a6:22:b7:03:
         57:f9:aa:de:b0:cd:58:02:90:83:da:10:88:02:ac:c9:88:fc:
         bd:51:1d:1b:44:ce:ee:17:94:ff:55:26:2c:9e:97:da:9b:95:
         f3:3c:92:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org