Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
File:                     MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json)
Hash identifier:          y8QtHCNnGp/LTPZrQokpwR9x6kFgNCzp/g2OMwTz9t0=
Subject key identifier:   5B:1D:F4:27:35:01:75:0E:EC:DA:DD:4D:CA:5A:4B:63:65:C0:94:EC
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Certificate issuer:       /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial:       035D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
Manifest number:          0357
Signing time:             Thu 21 Nov 2024 00:31:43 +0000
Manifest this update:     Thu 21 Nov 2024 00:31:43 +0000
Manifest next update:     Thu 28 Nov 2024 00:31:43 +0000
Files and hashes:         1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: huEboifde0QpEudG/I0xD8ZpYjKq9K7V/44q51ADEfE=)
                          2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: iSf3pkGC+96IY56uEQF7L3VqZS/vgXaJcABFmCHB8cc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
                          rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861 (0x35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
        Validity
            Not Before: Nov 21 00:31:43 2024 GMT
            Not After : Nov 28 00:31:43 2024 GMT
        Subject: CN=673e7f6f-ac22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:fb:a1:cb:80:94:df:d0:f4:7b:cd:11:30:
                    16:49:71:8a:ac:07:81:d3:cf:f5:fd:72:72:af:c2:
                    08:dd:9b:38:81:50:c0:c3:eb:8d:14:04:ef:64:57:
                    b6:7e:6d:64:4d:09:36:8d:28:7b:ff:1d:bf:38:2e:
                    fc:a5:6d:c1:bd:0c:37:b6:4c:aa:75:19:34:ce:06:
                    ce:7b:08:07:4a:50:08:d7:de:f4:24:fd:b7:4c:13:
                    76:a7:f6:65:43:1c:79:16:98:06:0e:b2:52:2a:49:
                    c9:12:46:1d:7e:52:fa:71:68:fa:c7:d4:2e:a7:fc:
                    61:70:72:25:27:d4:43:62:32:fc:b6:8a:8f:03:9e:
                    04:1c:fd:21:a6:35:ee:85:76:9d:1a:ae:89:d2:9d:
                    d7:73:7e:a7:1f:34:d3:61:19:8b:50:f7:06:b2:5b:
                    b9:ad:81:91:24:c5:af:31:7c:8a:b6:09:ff:1e:7f:
                    43:55:4b:99:3b:a9:bb:c5:ed:47:a4:ce:bf:c4:ee:
                    5a:16:86:f9:4c:a8:c2:cc:bb:43:76:08:6c:ad:4c:
                    13:83:af:bb:df:ba:4d:72:c2:71:a2:89:f1:e7:03:
                    93:b8:5b:5e:09:ab:3b:f4:8c:06:30:13:af:3c:ee:
                    83:50:48:12:77:48:5f:c5:3a:7d:41:3f:86:d8:dd:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1D:F4:27:35:01:75:0E:EC:DA:DD:4D:CA:5A:4B:63:65:C0:94:EC
            X509v3 Authority Key Identifier:
                keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a5:a6:64:87:a8:9a:2a:fb:fb:cd:09:cd:10:fa:55:3a:7a:
         88:04:59:4b:2b:df:e7:ed:83:16:b9:73:82:68:a7:bb:dc:72:
         2c:c4:c5:75:6e:4d:de:10:fc:8b:11:4c:b1:4e:ff:91:f2:2c:
         4b:e7:80:e8:57:f8:a1:3f:c9:84:13:3a:5d:ec:16:7c:6d:6b:
         03:4b:03:b9:51:de:7a:25:e5:0f:b6:a9:61:dd:fa:5b:21:9a:
         fd:c8:df:b5:be:79:70:76:76:74:af:da:30:79:15:84:0d:38:
         c5:e9:97:60:fb:70:a6:1d:62:31:f5:ee:70:78:7e:37:e4:8c:
         6c:8b:f1:ae:ab:d7:69:7d:75:19:16:8a:b1:89:6d:62:19:97:
         ee:4e:34:f2:0a:73:33:49:26:08:13:05:20:fe:b1:1b:47:2a:
         42:8f:6e:0f:f7:d7:a5:e8:9d:35:e7:11:aa:a7:ff:6a:5b:25:
         f9:d4:fb:b7:11:61:a5:a6:2d:3a:83:bd:88:17:1d:86:35:f2:
         7d:c7:fa:0a:d4:28:f6:3f:6c:f9:51:0f:83:52:af:07:77:39:
         f6:c8:c2:da:b2:a9:65:05:d2:6b:f9:d5:dc:f3:d3:59:0c:b8:
         71:f2:2d:3c:a4:e0:42:de:2d:95:18:d8:b8:44:c6:9b:7c:c9:
         a4:c6:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:56 2024 by rpki-client on console-fra.rpki-client.org