Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
File:                     CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json)
Hash identifier:          HiumKcuX9v+wyvVAZA1fpneRghQbLW2b6CJqv295VJU=
Subject key identifier:   3D:C6:E4:0D:9B:0E:16:12:35:2B:D3:98:C4:44:6F:61:11:53:81:34
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Certificate issuer:       /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial:       0781
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
Manifest number:          5F3C
Signing time:             Sun 24 Nov 2024 14:15:22 +0000
Manifest this update:     Sun 24 Nov 2024 14:15:21 +0000
Manifest next update:     Sun 01 Dec 2024 14:15:21 +0000
Files and hashes:         1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: KsHNgvT+qZsTOV3WKiA9QAwKTM0wCzGjYvZiFFtBCAw=)
                          2: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: FqFiDIcegnSEYf0rjDFvLA1E5hLrfJwjUSudPY/6PhE=)
                          3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: SCnihDYbmc4GiaIEvX2j7M8vuw8f64Zz9GgFXob0XUI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921 (0x781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
        Validity
            Not Before: Nov 24 14:15:21 2024 GMT
            Not After : Dec  1 14:15:21 2024 GMT
        Subject: CN=674334fa-93a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:6d:8c:10:94:33:a7:9c:48:90:79:0c:9c:
                    d5:f7:9f:03:25:5c:1a:c2:ed:c6:06:23:c0:8d:6b:
                    34:ea:96:06:26:32:94:07:fd:9d:be:da:23:fd:3e:
                    9a:53:99:8f:03:e4:c2:9c:fa:3c:21:a6:6e:67:d5:
                    6c:1d:60:bd:f0:8e:e5:b9:11:36:6e:b9:27:4a:b2:
                    0a:3d:4b:83:57:35:ce:80:81:c0:6a:d9:b4:0c:22:
                    04:de:d0:6a:b8:86:9c:a6:84:63:82:f0:16:4f:23:
                    7a:45:7a:fc:06:5c:97:06:48:c2:13:e6:5c:d3:95:
                    45:9b:e0:1a:ca:ce:31:42:8d:3c:63:f2:d8:6d:a3:
                    da:c2:d0:38:74:c2:ed:95:b1:54:6f:14:9e:c3:03:
                    25:af:76:43:28:ce:6b:dc:e6:8f:3d:21:56:bb:b6:
                    6d:d8:db:78:54:10:c3:1c:c4:43:3a:13:ae:c5:51:
                    86:23:95:25:30:83:69:bf:35:0f:05:da:40:23:dc:
                    34:00:ad:3d:67:56:28:ed:2b:98:e3:55:64:d6:4a:
                    48:0e:f6:0e:98:9a:3b:81:f9:79:d2:6b:b0:e0:33:
                    a5:0a:75:cd:12:cf:e3:a4:1b:a0:16:5d:68:59:ae:
                    65:92:fb:47:18:2e:96:7c:31:fd:09:fb:30:23:05:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C6:E4:0D:9B:0E:16:12:35:2B:D3:98:C4:44:6F:61:11:53:81:34
            X509v3 Authority Key Identifier:
                keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:ff:4c:d8:e6:1b:72:f8:f7:82:35:c5:6a:34:6d:1b:2b:
         fd:ea:d8:15:05:68:5b:22:57:11:e1:89:01:39:7e:f6:5b:69:
         6b:c1:98:f4:46:1d:d4:63:bf:24:83:12:31:be:52:af:7c:2b:
         ff:15:ef:81:be:7d:30:0e:49:27:b7:28:e6:76:c5:84:f2:2d:
         61:7b:c8:3c:fe:11:e8:3b:af:67:5a:df:29:93:10:fb:77:3a:
         48:85:a6:63:2c:6e:4f:da:20:de:d5:e9:b8:5c:cc:c9:47:b6:
         a7:8d:2f:b3:31:fd:7e:f7:fd:a3:63:fa:c6:c6:e7:da:da:02:
         7f:c6:e9:fa:de:c1:c8:ac:1e:7a:29:a1:1f:4e:a2:1d:71:4c:
         a6:9e:72:22:02:65:6d:c4:8a:5b:30:bb:81:60:35:73:97:a7:
         ee:a3:8e:2c:00:1b:89:23:95:bd:c5:e9:d5:3b:19:6a:05:99:
         45:88:f1:4a:28:9e:7b:ed:ff:29:d8:3f:21:28:c6:22:a8:c3:
         4f:69:43:ae:d3:c5:c9:97:66:73:a8:ad:db:f8:ac:e9:0c:d4:
         bf:99:8c:dd:73:77:39:3f:d0:b0:9e:ec:44:bc:67:20:46:dd:
         c5:58:5c:61:cc:b6:e1:c5:52:3b:a3:2a:67:35:0e:ed:9a:be:
         2b:61:9e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:18 2024 by rpki-client on console-ams.rpki-client.org