Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
File:                     kuuO8sbiYWmIqY_VsT7io2siHEM.mft (raw, json)
Hash identifier:          Lp9n781qG9EbZ/arWwfDQR9cBb7zMG4O3nOA20cL4Bw=
Subject key identifier:   6A:37:14:C0:57:CC:96:02:3E:F7:5E:63:88:8E:20:48:97:3C:DC:9B
Authority key identifier: 92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
Certificate issuer:       /CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
Manifest number:          30
Signing time:             Sun 15 Sep 2024 10:04:44 +0000
Manifest this update:     Sun 15 Sep 2024 10:04:44 +0000
Manifest next update:     Sun 22 Sep 2024 10:04:44 +0000
Files and hashes:         1: kuuO8sbiYWmIqY_VsT7io2siHEM.crl (hash: 26N+AEOWnPemrmLA7xRJzpo/+O7BDSza7t9k9dCAK7g=)
                          2: E61BEE5C605711EF9150403FC4F9AE02.roa (hash: hRRyYKDQ+8Vd3l9feLqjU5QeeSMIphNRlrDBsDWQa3c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
        Validity
            Not Before: Sep 15 10:04:44 2024 GMT
            Not After : Sep 22 10:04:44 2024 GMT
        Subject: CN=66e6b13c-ea87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:44:7f:03:62:f6:78:47:52:db:74:3f:3e:3a:
                    02:eb:97:af:da:0b:2d:73:84:19:a4:1c:e9:42:9b:
                    92:98:7f:79:2f:bd:a7:2c:41:3e:7b:04:10:fe:d9:
                    a4:21:cb:52:70:62:07:02:8a:cf:2e:b5:f0:56:d4:
                    28:27:86:ab:50:6b:05:2f:23:38:cd:ba:d4:46:7e:
                    68:69:7e:85:d0:c6:f7:50:bb:c6:bf:07:eb:b0:59:
                    7c:21:54:8f:0f:60:46:5d:36:e8:e3:49:10:43:34:
                    e8:23:39:e3:2b:7b:56:6b:e1:85:51:52:32:0a:91:
                    e6:1b:e3:8e:64:b6:69:88:4e:4d:90:7c:4f:eb:bd:
                    1c:21:e3:e9:f8:c5:78:b4:d8:2e:56:62:c2:9b:e1:
                    c9:04:1b:40:bb:70:5d:dd:7e:3b:47:b4:ce:b0:6e:
                    77:b7:d4:88:51:8b:a6:f8:cd:d2:01:d4:8b:69:0d:
                    11:08:e7:17:f9:9e:ae:7e:95:49:a3:05:9c:97:59:
                    02:42:9f:91:2f:2c:37:cb:d2:ac:65:02:48:22:ad:
                    7c:ea:e5:a0:fc:10:c7:bf:fc:c0:dd:7e:80:c3:bf:
                    19:bb:21:f4:4c:58:06:47:db:a3:d5:41:ea:65:91:
                    17:e1:28:a6:b0:c0:b5:b4:bd:00:70:b5:87:f0:8e:
                    c8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:37:14:C0:57:CC:96:02:3E:F7:5E:63:88:8E:20:48:97:3C:DC:9B
            X509v3 Authority Key Identifier:
                keyid:92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b5:e0:77:7e:55:74:a6:67:4d:64:46:84:82:9c:5f:c0:ba:
         f1:cf:a9:52:4f:ae:1b:d1:7f:36:e2:cd:83:49:b4:3c:6a:a5:
         6d:b5:96:3c:0b:74:a4:13:ef:5f:e5:af:45:f4:88:80:b7:a8:
         73:8a:2d:b7:54:54:d0:37:c8:6c:a5:19:fc:ab:db:0e:2d:fc:
         76:2c:2d:79:83:99:e2:e9:83:b3:43:47:c8:b2:8d:00:ef:0c:
         ea:fe:7a:1f:ea:fe:6b:98:4d:53:0e:29:14:9e:49:1f:18:c6:
         2d:63:33:40:a5:f0:e9:fc:c6:d7:18:f9:a3:43:19:ec:a8:3b:
         8b:cb:e7:62:97:c5:5c:b5:e9:64:ad:d1:bd:7d:60:73:f2:30:
         32:79:33:fa:da:c6:cf:d2:a9:fe:e5:ec:08:50:cd:10:b2:3c:
         09:bf:03:44:78:aa:6a:c6:4d:fd:47:4f:79:fe:25:f7:ba:88:
         80:7d:bc:43:8d:77:aa:67:7a:2b:ab:75:67:95:3a:cf:13:d0:
         ae:6c:22:37:87:ba:18:d5:4b:6c:8f:99:e9:3d:19:ed:84:a3:
         97:4b:54:eb:81:a5:1e:9c:5e:ce:6c:6f:0a:30:76:41:43:cd:
         8e:28:ab:48:c0:70:d8:96:42:30:98:8c:4d:c8:24:f8:9d:c2:
         85:b0:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 10:45:11 2024 by rpki-client on console-fra.rpki-client.org