Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
File:                     kuuO8sbiYWmIqY_VsT7io2siHEM.mft (raw, json)
Hash identifier:          PIb9MQguOPt8yNqLLtm5Liwd9eJZi2puNULbhA57hUg=
Subject key identifier:   AD:CD:42:AC:3C:5C:A5:D5:F8:A0:04:A8:C9:41:AB:A8:79:34:37:F8
Authority key identifier: 92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
Certificate issuer:       /CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
Manifest number:          52
Signing time:             Thu 21 Nov 2024 05:17:06 +0000
Manifest this update:     Thu 21 Nov 2024 05:17:06 +0000
Manifest next update:     Thu 28 Nov 2024 05:17:06 +0000
Files and hashes:         1: kuuO8sbiYWmIqY_VsT7io2siHEM.crl (hash: f3ZUaTqJhj/wewNnBiMQERXavJoP95XijCZZrA9mQuE=)
                          2: E61BEE5C605711EF9150403FC4F9AE02.roa (hash: hRRyYKDQ+8Vd3l9feLqjU5QeeSMIphNRlrDBsDWQa3c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
        Validity
            Not Before: Nov 21 05:17:06 2024 GMT
            Not After : Nov 28 05:17:06 2024 GMT
        Subject: CN=673ec252-fa24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:0d:fc:54:42:13:7c:b6:e4:ac:14:72:de:
                    b0:db:ac:55:c0:4b:84:de:28:d9:12:3f:4d:57:5b:
                    b7:79:7e:3c:c8:90:cf:55:20:04:d6:ff:0c:43:0b:
                    20:3d:88:31:ce:aa:c0:34:1c:b6:7f:3b:eb:0d:2e:
                    74:1f:d9:ce:96:7e:19:46:9f:08:8a:ad:d8:d5:0a:
                    cc:d9:b3:92:97:4e:1d:31:2e:d8:bb:de:9b:d5:f1:
                    90:5f:1c:db:e5:5e:02:87:a7:c7:9f:7c:f8:a7:ef:
                    10:d9:07:8f:10:96:f5:5f:f3:80:e7:fc:ca:01:4d:
                    cd:c3:5b:54:1e:35:ee:a9:ff:e9:fd:e8:6d:15:81:
                    87:22:c7:4f:16:71:52:32:b2:5c:38:fd:61:97:8a:
                    73:7f:ae:75:41:28:93:22:ec:d4:6f:a5:a6:27:ce:
                    73:b7:51:87:1b:b3:43:64:73:75:72:ee:6e:f1:f4:
                    87:0b:99:f2:d2:36:ab:e7:15:d4:89:f1:bc:bd:36:
                    4a:58:e7:e5:8f:04:06:a9:e8:9d:c0:72:76:30:9c:
                    ed:87:f4:85:a9:71:65:f1:37:60:60:ca:1d:20:31:
                    15:c5:2f:6d:41:25:84:61:68:79:fd:3d:87:b8:ee:
                    08:db:5c:43:54:0b:9e:99:a0:00:0a:79:74:7c:08:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CD:42:AC:3C:5C:A5:D5:F8:A0:04:A8:C9:41:AB:A8:79:34:37:F8
            X509v3 Authority Key Identifier:
                keyid:92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:80:9b:26:e4:0f:8d:c7:9f:9a:56:a4:d3:b3:f0:8a:d1:0a:
         3b:16:c5:3d:75:d8:d8:97:07:d1:a4:10:fd:b0:c6:30:30:1f:
         d4:7f:8f:88:1a:33:7f:97:02:7a:73:3b:01:f0:8e:be:34:a3:
         53:4c:03:8c:07:e5:a2:fe:01:9a:96:e8:b9:bf:9f:d6:f2:4b:
         77:78:81:08:3e:d9:33:cb:77:f0:fc:60:28:83:c6:80:c1:19:
         5d:c7:cc:23:b6:84:49:bc:c9:9a:53:56:7d:ea:19:e0:90:8a:
         a5:76:88:a5:e9:de:fd:d7:e8:4a:9e:31:17:90:bb:f4:65:bd:
         b2:a2:8f:80:5a:80:8b:e7:72:58:5d:d9:f2:f1:a5:e8:8e:c8:
         ce:6f:27:c9:6c:83:ee:3d:b2:29:fd:b6:aa:7b:f4:03:3f:b8:
         0b:15:52:13:68:ef:d0:96:99:6d:05:28:c7:8c:a4:9a:62:57:
         e7:36:cf:7c:58:ba:93:9d:fb:45:f0:af:81:59:f4:08:21:54:
         06:f1:c9:15:82:01:da:a4:c8:9d:1f:3b:fb:3c:bb:be:16:0e:
         b5:c3:d8:40:9e:b7:38:ae:5d:bc:e4:2c:b1:a6:ea:6d:bb:60:
         4e:a9:0f:b9:c3:c9:20:86:65:6c:18:8a:a8:9f:a1:81:d5:25:
         39:b3:eb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:47 2024 by rpki-client on console-fra.rpki-client.org