Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File:                     t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier:          QjLfa5NYLMhfRj84cdLjCKWMF/3UIJeiMvVToiQ+cv8=
Subject key identifier:   F8:C3:C4:1A:79:CA:C4:BB:AB:8A:1E:85:CB:66:3C:F6:4C:93:9D:75
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer:       /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial:       0746
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number:          0736
Signing time:             Wed 20 Nov 2024 21:14:17 +0000
Manifest this update:     Wed 20 Nov 2024 21:14:16 +0000
Manifest next update:     Wed 27 Nov 2024 21:14:16 +0000
Files and hashes:         1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: RJ8oeUMV8E7ZZnSFQgPWOP4W00rthRSQI8YQhNzxr3k=)
                          2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: Exd4hWo7RjQZYiSVZdpWrDDgrfmW84G9O8hG7MRZr3A=)
                          3: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: /1U9CvjJjnoR+Cc8eBTwWfrYGw1ed/NEOO7axvdE43I=)
                          4: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: ByhLwzpNP4nEx1e7cU+PcjpRDhLSsMQBSaYtj5jgQSQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
                          rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1862 (0x746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
        Validity
            Not Before: Nov 20 21:14:16 2024 GMT
            Not After : Nov 27 21:14:16 2024 GMT
        Subject: CN=673e5129-5fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:19:b1:e8:c8:91:1c:f9:d7:a7:6e:42:09:
                    88:54:41:e6:97:eb:fa:dc:99:1a:a9:1a:47:3e:e2:
                    25:57:8d:dc:96:e4:51:52:cb:26:96:ee:c0:06:2c:
                    2b:b5:25:de:19:08:2f:1d:b9:cc:23:66:5b:bb:59:
                    ef:76:84:4e:82:f9:a8:29:da:68:3d:0b:86:d6:07:
                    61:59:03:e8:f6:d5:16:ef:76:6e:0e:ea:45:f1:1c:
                    4d:e8:32:e9:a9:6e:3f:d1:67:02:26:08:68:1d:fb:
                    5c:36:09:5e:97:b8:2f:05:90:49:66:bf:b1:4a:40:
                    7b:8d:4d:cd:45:9b:2b:81:13:37:bc:28:ef:aa:e7:
                    02:d6:a2:8f:8f:df:80:9e:8b:29:09:4d:69:ca:58:
                    d8:a0:1e:e5:bc:f2:ea:47:74:da:31:5b:19:41:62:
                    7a:7e:6a:54:94:c2:17:93:86:b3:f4:56:98:85:5a:
                    ce:e5:c4:09:76:6d:83:9b:53:3c:ec:ed:dc:0c:42:
                    f5:9c:23:f4:d1:08:e8:ae:dd:1e:13:4c:8c:fa:08:
                    f7:9f:94:a7:16:09:9d:c3:26:85:38:9a:f2:09:56:
                    4d:19:45:76:77:65:5c:b9:53:7e:3d:b9:a3:d3:02:
                    5f:f9:cc:d5:76:92:86:e4:36:6e:b6:e8:0b:b3:51:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C3:C4:1A:79:CA:C4:BB:AB:8A:1E:85:CB:66:3C:F6:4C:93:9D:75
            X509v3 Authority Key Identifier:
                keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4b:0e:e0:c8:06:1c:76:19:f1:34:10:f2:53:09:f4:bb:aa:
         19:58:29:b7:a9:dc:8b:73:3e:d7:ac:a0:4d:e6:82:07:a8:80:
         3d:f3:35:12:ff:19:0e:7c:64:2d:e5:d9:1a:ff:27:56:32:3d:
         c8:7c:31:34:fd:52:1c:8a:13:c2:51:3d:3f:5c:fd:99:06:c1:
         6e:b0:b7:0f:90:36:1c:66:7e:6c:70:4c:37:65:48:6e:8b:93:
         8b:1d:07:2f:49:02:6e:4b:e8:3a:65:3b:30:32:98:63:61:3a:
         db:a2:cc:50:9c:ff:4a:af:a7:26:ee:1b:72:c4:30:41:43:28:
         09:b7:e3:9d:56:d8:ed:aa:15:2a:44:ef:35:50:ff:8f:78:d4:
         50:e8:79:cc:7b:c1:97:fc:72:11:c7:41:1f:13:0c:11:dc:f3:
         07:1c:d0:7d:89:4a:b2:77:1d:9b:80:8d:e3:27:55:08:d8:d6:
         0a:4c:77:7c:d0:bd:d1:26:93:5e:7c:c1:71:44:c2:8a:79:8a:
         f5:48:db:0f:2a:11:13:7b:bb:52:5b:fc:99:9c:d7:d6:b3:a1:
         86:7e:93:f4:8d:a2:ef:a2:aa:fa:9e:4d:09:e4:d9:29:d5:4f:
         45:15:58:42:a1:19:83:94:aa:4b:7a:76:78:01:f8:5b:c7:e8:
         cf:98:3f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:43 2024 by rpki-client on console-fra.rpki-client.org