Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
File:                     pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json)
Hash identifier:          9lrQiMrpjBNAw9qmz7DqSYtKyZmS1+EEJJoH8Trj/z0=
Subject key identifier:   40:49:A7:92:C7:08:B3:1C:C4:DF:84:EA:9C:7C:10:53:6E:31:19:D5
Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
Certificate issuer:       /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
Manifest number:          04
Signing time:             Wed 23 Oct 2024 06:54:41 +0000
Manifest this update:     Wed 23 Oct 2024 06:54:40 +0000
Manifest next update:     Wed 30 Oct 2024 06:54:40 +0000
Files and hashes:         1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: xQmNlYVOLmn/QVosWCAwJ1JoojAsSqMlAnel1Zqz0Zc=)
                          2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: bRFbzj6pr/OF3ESUy9ky5waEguFBGACn3nS0+utKTXI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl
                          rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
        Validity
            Not Before: Oct 23 06:54:40 2024 GMT
            Not After : Oct 30 06:54:40 2024 GMT
        Subject: CN=67189db1-e4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:92:7d:1b:73:1d:4a:91:19:b3:29:56:bb:
                    7d:00:70:d8:5c:70:25:1d:a8:11:3b:62:2b:da:29:
                    97:56:36:93:78:05:91:6e:33:27:5f:99:ec:0b:ab:
                    43:7e:02:a1:4b:1e:f8:8b:2c:3c:55:9b:a8:03:ef:
                    fe:a3:27:66:90:58:ac:04:e3:2e:da:14:c3:de:30:
                    19:19:28:ac:98:ab:55:c0:07:33:a8:74:15:b1:23:
                    c7:d3:01:d5:1c:f4:96:c0:63:b3:a0:c7:3d:87:f3:
                    cc:6d:2f:48:48:f0:94:5f:17:ad:4c:10:db:ab:18:
                    58:df:ff:a7:e9:86:b4:fd:ed:34:0e:e9:b0:77:cf:
                    49:bf:83:4f:96:90:7e:f0:f7:ba:0e:f6:b7:63:31:
                    4d:73:7f:d9:99:81:4f:e8:b8:42:f4:05:27:11:7c:
                    9c:49:d6:2b:e1:60:ff:4c:fc:2f:05:f1:fe:d4:09:
                    80:23:35:d9:6b:40:6b:17:29:76:d7:3b:0b:49:2d:
                    a0:dd:b7:f7:5c:38:2d:6c:14:fa:f0:0c:e4:92:74:
                    0c:2c:25:8e:02:3e:02:70:64:63:91:10:28:4f:df:
                    37:96:2f:d8:17:a2:ff:23:41:17:d3:b1:26:f0:e1:
                    97:4a:ac:3a:69:84:70:03:7a:b2:bd:9b:6d:c4:8f:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:49:A7:92:C7:08:B3:1C:C4:DF:84:EA:9C:7C:10:53:6E:31:19:D5
            X509v3 Authority Key Identifier:
                keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e3:0d:3e:e8:94:a9:d8:ba:84:c0:55:27:00:fc:29:04:c1:
         56:56:ae:18:ac:5c:35:d0:48:58:6f:15:71:2a:9f:02:fb:8b:
         da:fa:fe:a7:f9:ee:c4:c4:86:2c:87:8c:c8:bb:e0:53:19:81:
         d0:dd:0d:34:d9:96:55:5e:34:63:d9:6c:2c:ec:b9:27:bb:2c:
         91:ee:e4:7b:c0:1e:93:26:05:96:9b:80:e5:16:f1:1e:df:89:
         0b:af:6d:78:97:bb:80:99:eb:89:3a:47:5a:25:f6:d7:6b:c0:
         39:32:b2:9f:88:6e:2a:11:1c:17:a8:33:f3:05:79:ee:cd:68:
         75:03:20:88:75:fc:a9:99:56:7e:76:fd:11:06:c1:af:49:a0:
         4f:b9:7e:bc:68:2a:29:4f:77:54:85:9c:a2:c3:c3:f9:c2:d4:
         13:d6:b5:2c:f5:9f:19:d7:51:71:80:bd:6c:54:92:a8:8c:86:
         5c:32:31:c7:05:6d:7e:ab:49:09:fd:f1:61:3b:83:50:7b:45:
         01:46:f3:de:db:a8:7d:3c:43:23:ee:21:d6:f4:f1:1c:cd:be:
         42:b9:04:2c:97:56:28:16:f0:53:f9:ad:a8:20:2f:8e:34:3f:
         fe:6e:98:60:30:75:be:53:8e:bb:2e:94:fa:03:9a:b2:ab:4f:
         36:c5:1c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:23 2024 by rpki-client on console-fra.rpki-client.org