Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
File:                     qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft (raw, json)
Hash identifier:          J2uEyjDl0etwAPgOVnoJbzfvQzbM4sH245OH9bcB5vA=
Subject key identifier:   DC:1A:3F:B7:75:51:AE:2E:2C:0C:96:8F:7B:0F:1E:9F:57:BA:EC:E7
Authority key identifier: AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8
Certificate issuer:       /CN=A919FADC/serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
Certificate serial:       075C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
Manifest number:          0756
Signing time:             Fri 22 Nov 2024 21:03:20 +0000
Manifest this update:     Fri 22 Nov 2024 21:03:19 +0000
Manifest next update:     Fri 29 Nov 2024 21:03:19 +0000
Files and hashes:         1: qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl (hash: gIj2SMlkRPgj583kJdE1n5nP2jzEbRVxmZ6EgIjJudY=)
                          2: 773C48F6FCB511EAA35BDA0AC4F9AE02.roa (hash: KI7txZEx8AsuacpyFYc9h/5FHdJT+YSw2xg8bLancgI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl
                          rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884 (0x75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FADC/serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
        Validity
            Not Before: Nov 22 21:03:19 2024 GMT
            Not After : Nov 29 21:03:19 2024 GMT
        Subject: CN=6740f198-93c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:fd:68:33:99:c7:3c:62:ce:67:12:1b:e3:
                    8d:bf:53:5e:72:aa:33:67:61:4d:31:62:1e:11:39:
                    45:82:6f:13:fa:e2:f7:a2:46:e0:5c:6c:9d:90:41:
                    d3:b1:88:f6:35:d7:e2:78:65:12:8e:74:75:e3:37:
                    bd:3f:ba:0e:16:2b:9e:88:13:73:c1:17:62:2b:54:
                    36:50:0c:22:b3:b4:ff:da:65:be:7f:e8:76:f3:fd:
                    39:44:75:03:48:5d:6c:5b:a7:bf:30:ed:60:a4:52:
                    82:95:7f:a7:c3:c3:27:cd:2e:7e:f8:41:da:b4:bb:
                    77:fc:9a:1a:af:46:6c:31:c3:82:a1:73:c7:8b:52:
                    6e:12:71:80:bd:ab:36:18:70:64:82:86:3c:60:7a:
                    8c:cb:35:ff:b3:73:5a:bb:3c:e1:9d:5b:2e:61:d7:
                    cc:31:24:92:0d:45:b8:33:5f:6c:56:08:99:32:ea:
                    89:0b:03:cd:c6:f2:e8:79:21:18:2e:4a:7e:a2:ef:
                    0c:8e:1c:ba:41:13:76:44:55:f7:12:e7:9c:8f:8e:
                    64:9e:07:8a:76:33:8d:94:58:12:29:96:7d:62:3c:
                    29:b0:5a:c9:06:42:05:5d:d2:15:b6:c0:bc:75:55:
                    cd:81:12:38:31:f3:43:09:51:c1:c6:dc:f2:91:be:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1A:3F:B7:75:51:AE:2E:2C:0C:96:8F:7B:0F:1E:9F:57:BA:EC:E7
            X509v3 Authority Key Identifier:
                keyid:AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:94:ad:fd:d9:04:13:78:bc:0d:ef:6e:c5:fb:ea:47:37:a1:
         66:c9:4b:e4:71:51:99:1c:1a:8c:c6:fc:d7:3c:c0:83:36:8c:
         5f:76:f6:00:49:45:f7:c6:b3:a8:e8:10:83:82:70:26:48:26:
         d3:6e:ef:0c:d7:30:bc:ce:8d:c4:27:0f:10:00:ee:23:e8:95:
         d8:7b:88:1f:09:d7:5b:e2:c7:4c:02:7c:ac:14:b7:58:37:9c:
         50:8c:49:25:1c:29:12:dd:2d:d7:a6:34:9e:90:54:c0:cc:ab:
         35:a8:eb:b4:72:e9:3d:07:ba:62:20:16:75:cf:49:c8:19:fd:
         83:7f:36:06:04:7f:9c:bd:a7:e4:29:cb:dd:a1:98:24:47:78:
         44:fc:98:54:1a:96:de:3e:f2:1b:a2:e0:46:11:8a:9b:32:22:
         80:44:f2:0f:df:9c:a6:b9:41:6e:a5:a9:86:9f:9a:24:c7:27:
         30:8e:a4:ca:20:78:8e:b2:02:70:35:a8:d9:15:95:5e:b1:7e:
         67:e2:e0:a2:f2:c5:a3:d9:c5:11:83:be:08:c6:60:bc:7e:83:
         ef:a3:d3:18:13:c6:b7:08:72:7c:54:cd:d0:9f:75:4f:12:99:
         e3:a2:bc:bb:26:2a:e3:c9:6e:07:07:12:e7:a4:7b:1c:3f:a8:
         9c:32:2a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org