Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
File:                     p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json)
Hash identifier:          +8KgWYeIEb1XF+KMS5/+LqbZtxg7dCP3+ZtN7LnuQME=
Subject key identifier:   BA:2F:D3:79:8F:68:F3:97:1B:69:31:59:82:7B:FD:B9:0D:0F:36:67
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Certificate issuer:       /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial:       096D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
Manifest number:          0962
Signing time:             Fri 22 Nov 2024 19:55:29 +0000
Manifest this update:     Fri 22 Nov 2024 19:55:28 +0000
Manifest next update:     Fri 29 Nov 2024 19:55:28 +0000
Files and hashes:         1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: 23uNICTkHQb4GRO+aj01u3xAb4v+wf22XjC1tzE2888=)
                          2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: /KN4Le3BcyLgzqHmFT/XiG9LlFk89B6INXp50IfH424=)
                          3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: dJLvj8H+OzZAi8s6DdJIU3wM9EnuCPBO5qhQ8TBHFMc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413 (0x96d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
        Validity
            Not Before: Nov 22 19:55:28 2024 GMT
            Not After : Nov 29 19:55:28 2024 GMT
        Subject: CN=6740e1b0-93e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ba:44:71:3d:39:c6:a8:e4:63:d1:69:57:f8:
                    d3:ce:b4:3c:1e:81:a0:d9:3d:b6:cc:07:24:5e:2f:
                    ec:a5:22:50:2e:7d:b2:5e:91:78:15:65:b2:ee:f9:
                    e6:a5:7d:c5:98:ad:a2:b4:6c:e4:b7:c9:56:52:83:
                    54:31:f8:53:bc:c6:86:73:fe:25:28:11:fa:68:d2:
                    8f:86:49:3a:e2:3d:15:e3:8c:3a:f3:6a:74:f3:82:
                    97:5d:0a:fd:40:b4:97:99:05:28:17:1a:4c:6f:6f:
                    81:4f:b3:d6:2f:a5:2d:33:9f:f4:f1:11:48:49:c6:
                    5c:71:c0:9f:a3:c3:3f:f3:66:5e:6f:32:0a:9f:04:
                    e4:d4:58:ba:99:71:fe:c0:f6:1f:bf:a5:60:dc:ed:
                    84:cb:63:54:75:ef:b9:b0:a5:e5:c7:38:b8:83:07:
                    a0:d2:19:0e:fe:a1:96:32:68:16:3b:a0:93:9b:4e:
                    9d:23:1a:58:29:c8:f5:6f:3c:3a:5c:e0:4c:44:d7:
                    ac:e3:21:c3:9f:d9:52:61:03:db:16:7a:4a:10:74:
                    1f:43:13:87:24:53:f0:2f:d7:63:c4:00:33:f3:92:
                    ed:16:ce:3f:2e:67:31:2d:0d:57:09:5c:c1:c3:c5:
                    d8:a2:c3:49:9e:dc:25:f5:3b:1c:4f:03:60:0c:33:
                    5a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:D3:79:8F:68:F3:97:1B:69:31:59:82:7B:FD:B9:0D:0F:36:67
            X509v3 Authority Key Identifier:
                keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:67:b8:80:bf:d1:b9:e9:2a:da:3a:0e:a0:ce:7f:72:ab:04:
         a4:49:fd:93:63:08:0b:59:2e:6f:d0:18:c9:83:0e:35:05:16:
         e2:54:7d:be:ce:1d:36:48:d7:96:30:c9:e3:f5:f4:8d:43:07:
         29:71:79:d4:1c:5c:4c:e4:97:cf:9b:cc:ba:13:b8:a1:f4:74:
         0d:f2:40:89:03:07:5d:3f:1d:ef:d5:26:a7:15:89:7f:90:84:
         7f:04:94:04:c7:53:ce:d7:40:23:97:d3:95:71:a6:52:a9:4f:
         79:3d:4e:c8:28:ed:a5:ae:fc:e9:b4:14:39:9f:f3:3f:52:6d:
         65:e5:04:25:53:9b:7e:37:7c:66:3c:5c:88:b3:62:a4:1c:2b:
         74:2a:41:2e:fc:53:51:2a:56:25:07:68:ef:b7:8a:8f:7b:7d:
         e9:52:50:9e:ad:d4:da:04:26:33:04:e0:41:f7:1f:92:48:f0:
         42:a3:10:a0:fe:47:39:8c:89:7a:35:91:72:cb:dd:e5:81:f3:
         74:81:18:57:cb:31:c3:d8:8d:a7:29:65:c4:f6:ce:ae:22:c5:
         6a:6b:9f:f1:ce:b9:8e:25:c3:62:fc:d4:06:91:e6:21:e9:84:
         2f:02:d6:ed:2b:dd:0a:9d:92:99:bc:b4:bd:05:e3:f6:e1:c1:
         da:b7:27:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org