Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File:                     eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier:          tRIDLUjB5bDDVddI2ZFj7c3Sr8Fc96Ym5QJpD7FbLug=
Subject key identifier:   72:B1:8B:B0:90:3C:8B:97:D0:C7:F6:DD:59:3B:90:0B:D3:DC:EE:D8
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       347F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number:          3454
Signing time:             Fri 22 Nov 2024 14:31:06 +0000
Manifest this update:     Fri 22 Nov 2024 14:31:05 +0000
Manifest next update:     Fri 29 Nov 2024 14:31:05 +0000
Files and hashes:         1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: P8SnLzzWLlTQGiO2/z8CPHxhxT6CnQE98SAlxcRvang=)
                          2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: LI2pTAtj2FrGkxTBu/kHsrcO7e2WbrdhGE8h6n7f+mA=)
                          3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: EtN9WHkYOoh1Toml+yZQvfO83/c6JcmYJR90QSo2UxE=)
                          4: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: JS1dP/Z3wRNVnOwepT6cYwjkzee8Wo5X7MrAc7I3mlg=)
                          5: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: oxQvbEvt1VKVOZrQR/1bF13JTfe0jqTt+sjD6nr8S1U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13439 (0x347f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Nov 22 14:31:05 2024 GMT
            Not After : Nov 29 14:31:05 2024 GMT
        Subject: CN=674095a9-f4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:02:e0:97:b9:6c:93:4d:8c:00:f0:5d:08:
                    cf:0a:e5:16:de:5e:20:c0:06:b3:3c:a9:42:56:7b:
                    d9:88:c3:6b:a3:94:58:f4:d4:e3:7e:a8:de:76:af:
                    74:12:da:1e:7e:e9:05:a4:fe:55:18:e6:55:80:cd:
                    0a:a8:9c:f1:fe:e5:c7:00:a6:ee:24:84:65:19:90:
                    b7:1e:7a:bf:9d:4b:39:65:0b:05:67:8c:cf:4e:3b:
                    c1:c0:b0:34:ac:0c:36:e4:a5:7d:07:c5:27:d2:27:
                    cd:03:f3:60:0e:f7:2c:2b:0f:42:7c:88:e8:45:b3:
                    1a:b2:1d:67:b0:a6:06:49:34:7c:e0:71:e5:94:a0:
                    70:d6:7c:dd:c3:d7:1c:9c:1d:dc:d2:cb:b0:7a:d6:
                    6f:4e:4c:d5:34:8f:d3:e4:9e:c2:d7:a6:7b:30:37:
                    7e:b5:bd:21:21:21:a2:d7:a6:c3:32:eb:e9:93:08:
                    a5:b4:90:3d:bd:b7:45:3c:dd:c1:1c:c9:58:85:8b:
                    01:4d:58:b0:77:2e:bb:c9:75:80:c3:67:97:6e:24:
                    9d:c6:0c:8d:43:0d:f4:b3:b3:9f:6a:86:6c:82:d8:
                    3a:9a:fb:4d:b6:40:af:3d:20:ce:a1:87:2e:c3:3d:
                    59:49:b4:69:a8:42:b1:37:a8:ac:dc:02:9f:f7:22:
                    4b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B1:8B:B0:90:3C:8B:97:D0:C7:F6:DD:59:3B:90:0B:D3:DC:EE:D8
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c0:28:3e:a6:30:9c:54:33:e6:97:4f:fe:91:b5:2a:6f:56:
         c4:ae:6c:c1:ac:70:24:4e:6d:73:2a:2f:ec:9a:28:82:7f:ce:
         32:0b:0b:61:8e:cd:c3:ff:5c:84:7c:55:e2:98:0e:20:48:e6:
         4f:29:21:9e:9f:a7:a2:c4:55:58:38:32:af:4a:0c:e8:8b:72:
         da:58:98:92:39:e0:23:ce:af:0f:d4:88:51:2c:13:a9:7e:a3:
         b5:f5:32:22:f4:5a:2d:0f:d5:6f:ef:95:b5:50:f2:c2:4e:c0:
         c9:0e:b2:ee:57:88:e7:61:80:39:16:fb:b1:28:46:d9:bf:66:
         af:6c:72:4b:fd:1f:80:06:14:00:79:a5:61:18:e6:bb:95:5a:
         23:d1:ca:dd:5c:41:4c:7c:39:75:64:47:44:66:bc:46:cb:8e:
         4e:af:07:38:fa:9b:aa:a2:bc:a6:84:89:3b:6e:c7:16:92:a8:
         c6:9d:d5:e2:f1:06:73:3c:a0:31:58:5b:c3:9b:c8:ea:41:9a:
         a0:1f:17:13:58:4b:cf:6f:e9:35:cd:49:f1:c4:18:d5:1b:b7:
         8e:24:7e:dd:41:0d:9c:2c:6f:a4:99:21:e0:7d:db:40:bf:81:
         af:f6:e8:01:d5:a7:79:e5:70:75:ba:66:be:37:e2:48:9d:e6:
         f2:fe:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:39 2024 by rpki-client on console-fra.rpki-client.org