Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
File:                     rM6Cte30ohwyAbjitAAMgyRRNQs.mft (raw, json)
Hash identifier:          M+2FMqlRNm2653ZaJi3wHh6b1NNI0qfB0ma8Mw5t9xw=
Subject key identifier:   32:4B:5E:59:93:BD:06:61:D8:BB:66:DC:55:E1:64:D4:D1:20:03:09
Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B
Certificate issuer:       /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
Manifest number:          0220
Signing time:             Sat 23 Nov 2024 01:29:27 +0000
Manifest this update:     Sat 23 Nov 2024 01:29:26 +0000
Manifest next update:     Sat 30 Nov 2024 01:29:26 +0000
Files and hashes:         1: rM6Cte30ohwyAbjitAAMgyRRNQs.crl (hash: pAF/QwSrEaGO/D/Wapw7so1Wm+4KjvWePs7X8qorh3U=)
                          2: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (hash: tjanCdEnU91WZWuNneW5uPLOhcdnMX5ORciFEmcFL7c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl
                          rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B
        Validity
            Not Before: Nov 23 01:29:26 2024 GMT
            Not After : Nov 30 01:29:26 2024 GMT
        Subject: CN=67412ff6-87b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:80:6d:b0:6a:9b:10:4f:5e:c9:f8:96:38:
                    24:2f:cc:ff:ee:d8:01:40:54:77:b5:e9:c2:e8:9d:
                    4d:8b:22:16:14:06:4f:e5:a9:d0:d0:89:75:a3:ce:
                    58:0e:90:7f:77:71:42:15:30:2f:64:01:0b:c1:80:
                    d2:29:b8:44:ae:69:f8:b1:d0:f7:8b:75:49:d7:bc:
                    d3:b6:1b:36:97:72:69:37:d7:ce:18:b3:e4:69:c3:
                    b2:59:64:48:85:07:75:bb:5f:f2:ec:a6:53:2c:bf:
                    aa:4c:fd:de:8f:79:3d:ee:66:68:42:39:22:3e:22:
                    9c:7c:f2:e6:d1:00:58:8d:a5:54:29:16:c8:60:dc:
                    da:3a:59:2c:db:af:87:cc:04:98:e8:a2:dd:3f:25:
                    b9:21:2d:a6:54:fc:73:63:60:19:b6:bc:77:c1:b9:
                    b7:68:ae:c2:2c:9c:f7:81:7b:bd:e6:1e:31:fa:95:
                    70:26:58:c1:3b:82:93:64:54:89:16:f8:25:c4:0b:
                    91:ee:ce:e4:8b:f6:47:85:55:63:99:95:9d:64:e4:
                    db:fc:fb:b6:db:29:ac:4c:d1:91:9e:a9:3b:e4:a1:
                    ae:d4:a1:86:4e:4f:a8:42:95:f9:f5:fd:bf:e7:04:
                    71:85:c0:9d:c3:38:88:8b:29:63:7f:de:23:d0:26:
                    7b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4B:5E:59:93:BD:06:61:D8:BB:66:DC:55:E1:64:D4:D1:20:03:09
            X509v3 Authority Key Identifier:
                keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8f:e2:d9:a2:91:65:26:da:07:74:ca:fb:5c:b1:04:63:46:
         83:fe:01:65:ed:03:c0:2d:2d:fc:12:bc:3f:27:8f:be:14:13:
         dc:1a:2c:08:55:1a:34:b0:15:37:6d:53:d9:1f:64:08:84:9d:
         fa:08:d4:a6:bb:ca:de:70:46:13:76:0f:a4:93:6e:8e:15:fb:
         d1:da:6f:ec:e3:61:e3:4d:53:57:b4:1c:7f:9e:14:db:98:60:
         4e:5f:97:c4:ed:97:2e:3b:1e:c2:ef:4c:e7:44:b6:11:19:e7:
         d5:24:cc:48:9a:58:b6:4d:96:a6:be:e7:30:4d:f2:cf:62:46:
         b6:3b:45:fa:86:09:69:c8:9e:3b:9a:9f:b1:65:8b:9c:15:5f:
         68:fd:46:e6:fb:19:68:7a:d2:76:8f:b7:6f:77:d5:fb:92:3d:
         09:d0:ad:42:c3:2d:1d:a2:8f:eb:43:73:48:40:91:f1:cc:d4:
         68:54:24:a6:00:e8:32:46:21:3a:b1:34:18:79:3e:e0:c8:06:
         5d:22:60:9b:91:dc:df:64:d2:9a:55:b1:8c:28:e0:9b:c9:49:
         cc:61:dc:50:90:bb:af:f1:36:1a:01:6e:c3:e9:84:cf:f9:bb:
         43:40:4e:d8:2d:4e:4d:53:12:15:88:bb:9e:83:8a:46:2b:36:
         2a:2c:23:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org