Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
File:                     nN-M6Qv3n4wUjR92H5lNghsknHE.mft (raw, json)
Hash identifier:          cUbfOYac8UD2Qq3N9yjn9Cd/YDxgTXsMaKIeit8E1fQ=
Subject key identifier:   4E:03:B1:B6:2C:C6:05:14:76:80:A1:27:AA:D0:02:80:3A:53:A5:E3
Authority key identifier: 9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71
Certificate issuer:       /CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
Certificate serial:       03FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
Manifest number:          03F5
Signing time:             Sat 23 Nov 2024 00:04:21 +0000
Manifest this update:     Sat 23 Nov 2024 00:04:21 +0000
Manifest next update:     Sat 30 Nov 2024 00:04:21 +0000
Files and hashes:         1: nN-M6Qv3n4wUjR92H5lNghsknHE.crl (hash: 6Dkh6pkMpJX22EeDWtWv32Wf86uuwnpKqgecQOMuq7E=)
                          2: DDE2BB7C534811EC8FFBDB7CC4F9AE02.roa (hash: 9BjSNtNI0t5KFZOPEwLsrwtwuYFD1A/cyJU1JZKxEKU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl
                          rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
        Validity
            Not Before: Nov 23 00:04:21 2024 GMT
            Not After : Nov 30 00:04:21 2024 GMT
        Subject: CN=67411c05-b196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:26:0c:eb:92:56:a3:8a:eb:25:18:3d:5f:
                    30:24:b8:ec:93:7e:a0:3d:91:ef:c8:d0:2e:94:7b:
                    a2:bd:7d:18:0f:6c:62:d1:2e:59:2c:aa:cb:fc:80:
                    b6:9e:8f:6d:fb:07:ad:0c:61:82:b1:cd:3f:00:76:
                    f4:f6:27:45:9f:1a:a9:f6:cd:ab:1b:a0:af:62:14:
                    e6:b2:2e:10:df:78:a4:f4:f3:72:83:78:e5:29:69:
                    e4:81:b4:0a:3e:dd:58:71:b0:06:ca:26:d1:e9:be:
                    20:46:22:b5:a6:d1:51:cb:89:cb:01:6a:8a:39:b8:
                    dd:41:68:84:d2:c5:1d:41:9d:c5:91:2c:22:56:2a:
                    77:89:85:5d:45:d5:93:10:14:1d:2d:75:d2:92:4b:
                    bb:be:ee:23:63:ae:23:16:10:2a:1a:7f:12:28:f7:
                    90:72:64:05:05:11:1f:01:44:11:5b:a0:d4:a3:fe:
                    1f:8a:7a:ad:3e:77:20:07:eb:01:c6:f9:b9:fa:69:
                    96:d9:0e:ed:7e:96:2b:1b:9b:dd:78:32:72:04:6a:
                    30:38:d2:b7:9d:30:e4:e4:01:5c:cf:3d:3c:70:df:
                    ef:bc:8b:7e:6a:b1:b7:c8:d0:33:56:4d:06:f3:07:
                    f1:80:54:3b:04:b1:97:a0:96:17:d0:26:6b:b3:e4:
                    83:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:03:B1:B6:2C:C6:05:14:76:80:A1:27:AA:D0:02:80:3A:53:A5:E3
            X509v3 Authority Key Identifier:
                keyid:9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ce:88:bc:bd:d4:ca:91:d8:42:f9:12:18:cb:18:44:ad:6f:
         85:78:97:88:f5:90:9f:75:f4:ff:5b:68:5b:90:6d:78:6c:65:
         d1:89:26:31:e6:07:93:13:bb:46:f6:95:50:aa:9b:8c:70:2a:
         fb:01:2c:e5:e8:7a:11:90:c7:d3:f0:ff:1b:56:84:d7:d8:b5:
         3a:07:75:7d:22:7e:be:13:01:47:c5:1e:26:be:8a:a5:c7:32:
         20:f7:59:f7:0d:ef:d1:00:f8:03:da:61:ea:76:c6:1a:d8:cd:
         52:9c:04:45:d0:67:aa:7d:fa:6d:4c:4f:87:dd:f2:60:89:36:
         aa:91:03:4b:33:b1:25:cb:0b:7b:6d:a3:88:53:0c:90:96:f7:
         ab:79:1f:7c:ec:d2:8d:c0:c6:da:fb:19:47:5f:e2:fc:13:39:
         ac:5a:df:18:fa:bd:b3:b2:f3:fa:1b:85:3d:85:e3:1c:76:e8:
         f5:39:31:80:51:f3:19:11:d6:cf:9b:ca:f1:93:36:3b:2a:2c:
         cb:f9:c3:a3:94:8b:18:91:c7:19:fa:6c:7c:69:eb:16:93:26:
         0e:2a:c2:64:b0:16:01:4d:30:53:9d:de:6b:85:54:db:06:e9:
         3b:53:a7:e8:ed:e7:cc:7e:ad:b2:aa:82:45:6d:43:dc:74:95:
         0b:1a:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org