Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
File:                     fysutbj095VolfExLY3MQiOcmmI.mft (raw, json)
Hash identifier:          gR3l5TKEnCDyLHBcPFEVtUiz4yPnhCNoptLhT8o4UMA=
Subject key identifier:   4A:4A:BD:C9:C5:E8:22:29:E0:42:E1:7D:00:93:0D:C4:CD:1E:62:12
Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62
Certificate issuer:       /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62
Certificate serial:       0DC6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
Manifest number:          0DB9
Signing time:             Fri 22 Nov 2024 17:50:30 +0000
Manifest this update:     Fri 22 Nov 2024 17:50:29 +0000
Manifest next update:     Fri 29 Nov 2024 17:50:29 +0000
Files and hashes:         1: fysutbj095VolfExLY3MQiOcmmI.crl (hash: 0juHkJqm1hu3c+E8M5c1lgeHAK6FtBpJOI1VZPzr+rg=)
                          2: A43B3718ABC111E9A200115CC4F9AE02.roa (hash: rc2HKldu1pWCNCmvoKIq756wtH7kDxYrdw5/oSGbQ3M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl
                          rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3526 (0xdc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62
        Validity
            Not Before: Nov 22 17:50:29 2024 GMT
            Not After : Nov 29 17:50:29 2024 GMT
        Subject: CN=6740c465-4702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:d4:3c:5f:9f:e5:3a:56:11:af:96:bb:e1:
                    28:f3:55:aa:40:4c:c5:42:f7:bc:30:1a:04:57:0a:
                    13:47:da:f6:6c:bd:a3:6b:18:54:73:88:82:4b:d4:
                    52:3f:27:30:f4:23:d4:d6:0d:9c:b9:36:17:8e:93:
                    0d:eb:cb:62:52:ff:24:78:23:b1:66:2c:4f:73:b1:
                    46:9b:7a:34:7e:30:14:37:d3:10:c4:ac:d3:4e:45:
                    4b:3c:11:c7:57:23:d1:eb:13:c4:fd:d1:85:4c:34:
                    e4:2d:da:61:b7:7b:af:6d:b6:16:b1:fd:d9:a4:1b:
                    fb:83:af:91:b3:34:e6:0a:41:06:35:3b:af:12:e7:
                    48:cf:2e:d9:c5:24:8e:26:69:23:9d:47:82:bd:d5:
                    19:9d:c2:9f:9e:2d:2d:86:50:be:14:33:25:7f:87:
                    13:95:2b:1a:fc:22:76:50:d5:4d:ee:19:25:18:fc:
                    2e:c3:31:17:9e:72:60:55:9e:ca:42:6c:c0:d0:15:
                    4f:49:d6:25:76:fa:f7:36:9f:62:6e:20:73:98:da:
                    a3:df:8d:17:e7:d7:02:98:2a:6a:66:2c:eb:bf:9c:
                    ac:88:f8:4e:56:03:bf:d4:30:81:65:8b:a7:93:fb:
                    6d:39:39:2b:c8:6c:71:20:a2:a7:e3:18:89:08:c9:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4A:BD:C9:C5:E8:22:29:E0:42:E1:7D:00:93:0D:C4:CD:1E:62:12
            X509v3 Authority Key Identifier:
                keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1b:b4:60:6d:a7:71:fe:e5:4c:62:6a:8f:cc:ba:cb:f8:5d:
         25:fb:e8:48:6a:dc:3d:79:a6:a1:89:74:6b:37:fb:ae:41:9b:
         1a:38:2a:38:14:7d:19:c1:95:b8:9c:4a:aa:f6:59:d4:8a:60:
         9d:f5:eb:6b:64:25:b3:76:5e:a7:72:4a:81:e8:86:3e:b5:72:
         b5:68:7e:96:28:ed:4d:9c:99:95:cb:26:9f:e6:07:77:f3:b7:
         19:47:75:ae:6b:36:7f:3f:0e:70:5d:98:bb:55:1b:11:e5:42:
         4e:2a:df:42:cc:ad:7f:66:09:b5:68:d0:9c:e2:0c:ba:05:9a:
         fd:82:8e:07:6d:42:c7:1c:39:44:7d:70:10:9e:fd:89:13:f7:
         f0:1b:23:8b:e2:ee:8e:fa:57:48:4e:50:c8:50:ad:c9:d5:d5:
         9a:7c:98:ac:64:6c:24:79:29:4e:e0:54:aa:c2:a4:98:22:fb:
         50:05:d9:de:52:a4:26:ae:6f:8a:4f:3c:54:0e:ed:99:89:cd:
         86:45:86:14:83:c8:b9:2d:3a:47:19:54:38:34:6d:64:ae:3d:
         92:34:79:c6:0a:fa:72:d0:4e:a2:dd:e2:b8:c5:69:48:c2:49:
         b9:6c:87:c4:67:61:00:e2:b6:15:a1:8b:ca:b0:dc:16:c3:95:
         0c:3c:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:14 2024 by rpki-client on console-ams.rpki-client.org