Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File:                     kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier:          Of8ImUE6hmbvjEBpOPxrDM5Rkl7AUvuT1kVPKujkbZY=
Subject key identifier:   54:F6:EC:98:B9:78:DC:7D:85:42:73:6D:68:46:1B:21:2E:C1:6F:07
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer:       /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial:       0F98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number:          0F7C
Signing time:             Sun 24 Nov 2024 17:22:42 +0000
Manifest this update:     Sun 24 Nov 2024 17:22:41 +0000
Manifest next update:     Sun 01 Dec 2024 17:22:41 +0000
Files and hashes:         1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: +4jZenXr7sew1QTpelaMLwSr76oO7ke/ZcdGaOJuj6k=)
                          2: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 91GhAMmVYDOKIaPlZtLbS9DCeqxqN11XLz4AvQ01ZCY=)
                          3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: aCjyEapN5RNEdBx43BF8hSE5Js6g7kyTOXpzPyF+n3k=)
                          4: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fOkeLT2T9sGexymAbtOvzE9kd8mH2xk9Q29zH8sz1Bw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
                          rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3992 (0xf98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
        Validity
            Not Before: Nov 24 17:22:41 2024 GMT
            Not After : Dec  1 17:22:41 2024 GMT
        Subject: CN=674360e2-a9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:24:20:8a:96:8e:c4:6d:6b:ad:6c:3b:90:
                    cf:27:76:ac:a9:9e:f6:4a:0a:e8:0c:3d:78:d1:da:
                    f6:25:74:2e:b6:c4:e7:a3:f3:a0:47:25:44:87:0f:
                    24:06:04:41:7e:50:14:0e:21:20:85:ed:d8:77:fa:
                    fc:d0:23:20:b2:ca:65:8d:6a:c5:7f:0b:8b:50:c4:
                    06:d5:e1:de:c3:15:4a:a7:bf:39:2a:da:8a:cd:94:
                    76:3d:96:52:8b:03:1f:15:f8:8e:20:8b:88:fb:f5:
                    d1:5e:58:10:b6:c8:f1:d2:a4:8e:15:25:36:62:95:
                    82:ec:7d:8d:19:7f:81:91:1f:20:72:3e:9b:47:22:
                    15:1e:46:76:50:46:77:c9:2a:b5:05:ad:1a:48:20:
                    ae:bf:2d:2d:ef:36:21:1c:b6:27:01:ec:89:33:13:
                    6b:4a:bd:54:69:6a:98:37:0e:10:58:4b:ee:36:9a:
                    c8:b6:3e:12:b7:7a:88:2d:03:bd:21:c8:d6:cb:a3:
                    d4:a6:ca:98:09:d1:e8:4d:a0:74:0e:70:d4:65:5b:
                    dd:83:9e:af:07:48:58:4e:69:79:29:ef:58:f9:51:
                    b1:9b:37:44:c8:e9:19:9e:c6:6d:a9:6c:96:be:de:
                    85:2b:f7:ee:50:da:7f:c7:00:02:f8:63:33:c8:5b:
                    fe:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F6:EC:98:B9:78:DC:7D:85:42:73:6D:68:46:1B:21:2E:C1:6F:07
            X509v3 Authority Key Identifier:
                keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4e:87:f2:e8:95:e6:01:39:d2:a0:ec:2b:8e:0b:b4:c5:c4:
         6c:c3:65:ce:06:30:a1:b0:b0:80:28:73:43:a4:69:12:c4:4d:
         2a:35:99:19:5a:12:99:3e:cc:df:d4:bc:95:b7:aa:3f:e0:27:
         3d:b4:38:07:66:2b:2e:f1:bf:b1:e8:4f:e1:a9:a4:57:87:dd:
         cf:c1:40:e5:19:4f:7d:71:0d:d3:ba:bf:fb:24:85:8a:e1:4a:
         c1:84:4f:17:e2:f3:3c:fb:c3:39:84:1d:bf:43:86:3d:c3:ef:
         9f:b0:6f:dd:a7:d9:ff:ec:93:c8:7f:f6:c6:96:45:ee:ec:ad:
         62:dd:e0:7b:00:8a:80:11:fd:cb:07:b1:4f:07:1f:86:72:29:
         af:0d:c0:88:10:33:bc:9a:54:ed:3a:f3:be:e7:68:61:00:2c:
         69:eb:3a:a3:17:24:ed:e7:6e:d5:e7:0e:7e:51:ad:ba:17:27:
         b7:ca:ac:89:8f:85:85:89:cd:39:de:6b:0e:ee:8c:54:80:e4:
         33:19:5a:58:d4:90:ac:42:78:5f:20:59:cd:91:5a:44:59:67:
         84:49:08:21:b5:16:46:dc:2a:70:7c:ce:d8:48:04:1d:2a:47:
         65:40:d5:8d:f1:03:3b:dd:75:3e:96:54:66:86:cd:ce:5d:a6:
         09:c2:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:36:23 2024 by rpki-client on console-fra.rpki-client.org