Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
File:                     o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json)
Hash identifier:          wmZjKRh8LWbC3XbW9AHFwOtBeJN/j3ygOLdYC2MnArE=
Subject key identifier:   2E:AC:C7:A2:FE:DE:9F:23:2E:5F:8E:E4:A8:FD:80:0E:F7:0B:8B:DF
Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
Certificate issuer:       /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
Manifest number:          60
Signing time:             Sat 23 Nov 2024 05:01:07 +0000
Manifest this update:     Sat 23 Nov 2024 05:01:06 +0000
Manifest next update:     Sat 30 Nov 2024 05:01:06 +0000
Files and hashes:         1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: ZxIMQLxVXRlTUpdZUXrNsA0Re2SvInHzNduGBwwH0Mw=)
                          2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: LydTto/QF734TxXbjD+YOeOmtAZVNFAjvOAnRG1pnYY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
                          rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
        Validity
            Not Before: Nov 23 05:01:06 2024 GMT
            Not After : Nov 30 05:01:06 2024 GMT
        Subject: CN=67416193-1fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:44:b0:98:e0:91:01:72:f0:a9:55:15:fc:
                    5f:a9:40:81:54:b9:f0:e9:d5:f4:45:3e:fd:55:e5:
                    c1:0d:c4:23:31:40:e5:15:de:13:7a:db:58:56:1f:
                    41:93:16:5d:de:1f:59:55:ca:c4:a9:94:65:19:24:
                    3f:2e:32:f3:23:1a:4b:c5:4e:70:3e:80:02:b4:6f:
                    a7:53:21:e7:6f:60:89:cd:b0:c2:a1:54:ce:2e:ed:
                    9a:fc:96:2f:70:e5:61:f2:02:59:b6:a0:19:0e:20:
                    de:24:34:df:5b:10:07:7e:d2:08:f5:59:a5:b0:7c:
                    01:27:da:8f:ee:61:ef:e2:c5:51:8d:69:78:fc:1b:
                    1f:48:49:1d:3c:2c:ed:73:6d:61:6c:dd:4c:1f:be:
                    d6:ce:f4:cb:89:8f:f4:51:d1:6d:62:02:15:08:8e:
                    2c:3d:cb:ce:12:41:c6:4b:f8:2a:f7:af:ef:45:2b:
                    ae:05:80:bf:0e:dc:c0:23:16:47:54:a7:f6:e6:52:
                    d8:32:18:c8:ae:60:14:e4:b8:fa:13:fe:ff:86:71:
                    e0:74:74:8e:4e:79:6f:e2:3a:5c:32:28:29:60:2e:
                    81:ae:27:61:7d:3e:ad:99:27:28:94:dc:ac:6b:f6:
                    55:10:4d:7f:30:ff:62:f4:e3:10:1f:6e:fa:9e:cf:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AC:C7:A2:FE:DE:9F:23:2E:5F:8E:E4:A8:FD:80:0E:F7:0B:8B:DF
            X509v3 Authority Key Identifier:
                keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6b:b0:8c:d2:d3:e9:39:a5:b9:52:aa:3c:80:dc:eb:10:05:
         af:5b:aa:01:fe:dd:22:06:a7:16:10:c3:71:93:22:4d:e6:df:
         bd:a1:14:b4:7b:70:ce:58:de:95:87:26:dc:2c:b9:0e:d9:e8:
         73:85:65:03:51:de:fa:d1:3a:4a:4e:85:3a:8b:58:63:cd:01:
         23:de:9b:79:38:b6:b9:4f:94:99:92:6c:0c:b9:a1:1f:9c:35:
         13:ee:e6:02:b0:dd:a7:b6:5c:67:1c:0b:67:ee:9e:1e:4a:17:
         ed:aa:5d:a4:02:48:4e:72:58:33:14:85:28:b7:33:e3:ca:6e:
         ed:f8:a8:72:b3:27:f7:f6:ae:1b:75:aa:bf:98:a6:11:4c:80:
         40:95:52:c9:57:4d:8f:03:d3:62:85:f8:74:74:17:1a:55:90:
         29:81:77:a6:06:fa:3d:17:55:68:0a:39:10:df:21:ce:f9:f6:
         75:8a:93:92:39:6a:29:0f:41:c6:ce:54:26:c4:ed:34:f2:92:
         c3:10:f4:6b:a7:81:0a:1d:80:e6:89:15:4d:10:69:90:d0:1d:
         6b:d6:54:b4:de:49:81:7b:97:6f:de:2e:d9:db:c3:50:22:2a:
         bd:ec:8d:ef:46:ec:08:a0:c6:62:3f:b0:82:17:1b:b5:ed:6d:
         4d:b7:52:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:13 2024 by rpki-client on console-ams.rpki-client.org