Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File:                     Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier:          fgzwQyrvajw4qom8KUNJ/rDHKW0Berble6HbE85qEQY=
Subject key identifier:   6D:02:F3:EE:20:BD:12:3F:6B:CA:6E:9C:7B:4B:5F:15:54:C9:60:58
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       3439
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number:          342C
Signing time:             Fri 22 Nov 2024 15:10:45 +0000
Manifest this update:     Fri 22 Nov 2024 15:10:45 +0000
Manifest next update:     Fri 29 Nov 2024 15:10:45 +0000
Files and hashes:         1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: VNJK+5KNsbtOP1+rLC3sW2JpWFgagDgK5Z9n8Mwl0uQ=)
                          2: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: u3o7AHzkAWjpm//p/0D10Rom5wmEBlx/qRmPwbhLS5Y=)
                          3: E73006AA682811EB8D635520C4F9AE02.roa (hash: /iYEOgQAhfI0KK0K51Ux9lFp8lKBTgd9K9F6YiH5y0o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13369 (0x3439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: Nov 22 15:10:45 2024 GMT
            Not After : Nov 29 15:10:45 2024 GMT
        Subject: CN=67409ef5-a1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:89:2b:dc:cb:e1:03:35:40:3d:49:d4:c8:8a:
                    3d:3d:97:47:97:ec:03:61:ca:85:6f:1f:85:2d:d5:
                    30:14:25:bf:e2:8a:c4:50:aa:57:eb:03:fe:18:f4:
                    14:18:95:ac:57:d1:6b:18:23:0b:0a:a6:12:1f:31:
                    d6:e5:11:7a:d1:c1:e4:ac:f7:e3:81:10:4c:a4:e8:
                    50:07:7e:05:90:db:e5:73:cd:b2:22:f8:58:fd:b7:
                    ea:3c:42:12:ea:58:32:86:93:4d:7b:8f:21:8f:f7:
                    7b:5b:97:da:36:0d:d6:57:27:59:f5:20:84:d6:b9:
                    29:1a:57:57:fd:0b:4d:a9:f4:38:37:b2:db:7d:af:
                    ab:1b:c5:af:a3:cc:ab:9b:f7:5c:76:49:3f:2d:ed:
                    7e:18:67:95:3e:ac:94:92:b0:6b:2e:26:7d:88:b2:
                    6a:5a:77:44:d7:66:e7:90:fe:91:f7:da:c5:7e:3c:
                    f7:2b:b7:18:86:2c:5d:73:88:e1:ce:dc:01:63:56:
                    0e:99:05:cb:67:83:cd:13:e6:41:88:52:26:4c:d3:
                    d5:77:c1:da:be:1d:57:7f:a3:a4:53:2e:5e:a4:ed:
                    23:23:a8:31:58:52:8b:a4:fc:bc:19:82:48:de:18:
                    b3:57:02:64:a0:de:b8:48:15:ae:9b:64:7d:5e:c0:
                    b8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:F3:EE:20:BD:12:3F:6B:CA:6E:9C:7B:4B:5F:15:54:C9:60:58
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:11:f1:15:fe:58:6d:87:0f:32:44:7e:a9:f6:bd:c9:b2:15:
         9e:4e:c1:86:89:51:02:d0:bc:e8:3d:77:d9:36:43:08:a8:b8:
         3c:0a:96:bc:3a:86:b7:d4:43:45:8a:e2:0d:3c:0d:74:5d:be:
         e7:07:44:18:65:a0:d6:7c:d2:9e:6b:a9:b4:5c:79:6e:36:4b:
         ce:fa:c2:0b:1d:41:c7:30:0a:89:6f:b6:26:d8:5c:b9:70:aa:
         e7:56:f7:7f:32:2e:d4:dc:ca:0a:ea:8c:55:02:62:86:ed:72:
         0b:bb:fe:f1:54:59:83:f7:ec:56:09:e4:18:25:15:50:16:7f:
         28:17:0c:41:b8:e6:c1:e2:c8:e9:75:15:ee:c5:f4:66:83:ca:
         7a:15:bc:42:64:61:e9:75:81:ef:66:c8:e0:5d:3f:13:a3:58:
         54:05:ad:0a:82:f7:13:43:02:6d:8e:10:ab:5e:28:e5:68:70:
         a8:af:0f:74:97:d2:01:d4:cb:a8:1e:af:ba:25:c4:28:61:8d:
         0c:09:98:d5:f4:ea:e9:15:90:53:47:9f:02:23:3d:6b:71:29:
         06:54:21:52:5d:a9:e9:0c:db:ce:69:84:8e:34:ff:45:d6:f3:
         51:9f:fb:cc:07:9d:10:be:24:5d:07:ce:ef:48:a5:88:db:b1:
         4d:e3:8e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:18 2024 by rpki-client on console-fra.rpki-client.org