Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft
File:                     2udQjRHkcijaH-ADJZe70p91iQw.mft (raw, json)
Hash identifier:          qhnZQUlU8x8YfgQcDkyuURROEguqylxEB7K92AJZ+WQ=
Subject key identifier:   DF:F7:F7:5E:8C:48:07:FE:EC:97:BB:B3:22:C4:1B:0E:E6:48:DB:D9
Authority key identifier: DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C
Certificate issuer:       /CN=A91912DD/serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C
Certificate serial:       1649
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft
Manifest number:          1636
Signing time:             Fri 22 Nov 2024 16:43:50 +0000
Manifest this update:     Fri 22 Nov 2024 16:43:49 +0000
Manifest next update:     Fri 29 Nov 2024 16:43:49 +0000
Files and hashes:         1: 2udQjRHkcijaH-ADJZe70p91iQw.crl (hash: 6g8gAbrzdIAf4HYqj3ZUhGFtz8euUS4xT2AtXkT+V7A=)
                          2: 2EBE8D30AC5A11EDA8C03215C4F9AE02.roa (hash: VLRI5Q6koiUlpFmE6bZdGiK6WNSWJ7hnfpsh5Ejab9c=)
                          3: 2FFD1298AC5A11EDA8C03215C4F9AE02.roa (hash: zdM5AfitEYXmvcgAQ04ZFJNwCqPb/lRWlcehVslAcEk=)
                          4: 2F459208AC5A11EDA8C03215C4F9AE02.roa (hash: rRYy1j2hI/cyQw9+l/Sq55dFhOUQV6tcRyGGsBwQzYE=)
                          5: DCF1073E26B211E9B0DD0155C4F9AE02.roa (hash: pze8ykCzwgWyPndsuyc5dehDobUHPHfIIaK0XcRUG1Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl
                          rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5705 (0x1649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91912DD/serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C
        Validity
            Not Before: Nov 22 16:43:49 2024 GMT
            Not After : Nov 29 16:43:49 2024 GMT
        Subject: CN=6740b4c6-0f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:ba:82:9a:49:8e:c2:d5:83:ea:6e:2e:e6:
                    c9:d7:45:02:86:58:46:f7:75:6e:da:52:cc:ce:fb:
                    c4:18:21:f3:c1:28:97:79:e6:1e:25:85:fc:10:98:
                    ba:8e:33:0e:24:aa:5f:5c:74:b3:3f:d3:5a:d0:df:
                    4f:94:8e:1c:2b:df:6b:e8:c0:31:20:3c:34:de:56:
                    8e:f1:97:96:3f:9e:87:e6:d3:dc:83:6d:36:bc:c5:
                    27:4b:14:e4:8d:03:f4:d5:58:c8:00:7d:6f:7c:fc:
                    01:0d:b3:63:31:a9:0b:37:a5:15:86:e6:b2:6f:78:
                    d4:16:95:be:25:61:65:76:43:58:b1:62:3d:97:25:
                    3c:58:ae:b8:8c:45:b0:b9:3d:a5:ea:61:bf:ad:90:
                    22:71:5a:1c:b0:94:48:7d:fa:5f:f9:d9:c0:9a:5c:
                    b7:90:db:69:32:6b:88:a7:3d:9b:f7:4b:cc:5a:2c:
                    4c:27:6c:2b:0d:c1:c3:23:6a:c5:16:2b:c4:d6:a9:
                    c3:62:20:1e:9e:92:01:98:55:97:9b:e5:49:5c:60:
                    f0:cb:b8:c6:40:ac:1c:fa:8e:bc:60:db:37:cf:a2:
                    84:fd:c7:c1:75:b3:4a:d2:fa:31:9f:19:bf:40:48:
                    29:fe:00:5d:e3:62:b4:0e:c3:70:fc:f3:71:ff:a0:
                    b3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F7:F7:5E:8C:48:07:FE:EC:97:BB:B3:22:C4:1B:0E:E6:48:DB:D9
            X509v3 Authority Key Identifier:
                keyid:DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5e:5d:28:08:c8:80:7b:6c:4d:fa:e0:32:60:3e:1e:f4:30:
         fd:4d:ce:d4:0f:0a:ee:72:e1:09:6e:2c:f1:e5:90:87:1f:0b:
         26:f7:67:04:da:b6:9d:34:db:48:6e:66:ee:91:7a:26:e8:71:
         dd:d9:c6:d0:5b:16:c3:b4:63:6e:55:4c:82:c1:bd:3e:43:c4:
         6c:a6:46:18:65:4c:cb:09:3d:23:0a:bf:fb:d6:43:59:ca:9e:
         cd:49:a5:20:ba:67:b6:62:e2:c1:b4:35:06:18:d1:97:da:20:
         5f:63:9e:09:a1:ea:8a:fb:a2:eb:c6:6c:b8:5e:31:73:bc:50:
         a9:47:7d:16:5b:c4:e8:9d:c7:dd:b0:89:4e:5b:cf:d9:10:11:
         44:09:e1:bf:87:4c:7e:61:b3:87:6c:52:d3:df:e1:04:1a:30:
         1f:f4:1f:44:50:82:32:c6:10:f2:31:4b:ca:42:c1:9c:35:78:
         89:f4:6b:9c:bb:67:d0:57:ab:1e:27:a2:e0:51:89:ad:5e:b2:
         47:4b:8a:6c:3b:3e:77:8a:b4:17:dc:4c:17:c5:6d:98:08:50:
         41:41:fd:64:1c:13:99:56:68:7c:88:cf:38:58:59:ab:12:c2:
         56:4b:6b:fe:fe:67:b0:33:d8:3f:ea:cb:d8:f6:0b:c8:cb:58:
         42:29:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org