Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
File:                     UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft (raw, json)
Hash identifier:          n+iIpe/b5gXETrR8ip+Q3/QE1QSN9VEHJYDqTWTQ6dE=
Subject key identifier:   2C:63:08:EB:17:A6:3B:22:4A:70:AD:9F:BE:47:F2:45:BA:26:63:97
Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
Certificate issuer:       /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
Manifest number:          53
Signing time:             Thu 17 Oct 2024 05:37:22 +0000
Manifest this update:     Thu 17 Oct 2024 05:37:21 +0000
Manifest next update:     Thu 24 Oct 2024 05:37:21 +0000
Files and hashes:         1: UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl (hash: spSUpCV+aptzORiaPdPnlI/ZntYm/mutgaT/znsfoQ8=)
                          2: 18141426114211EFA0FF3956C4F9AE02.roa (hash: wOKkXFecaGXCjByRcpDkGbc7Cdo2VuRpcxeBnTZ+uS0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Oct 2024 05:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
        Validity
            Not Before: Oct 17 05:37:21 2024 GMT
            Not After : Oct 24 05:37:21 2024 GMT
        Subject: CN=6710a292-67c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:23:2f:65:88:99:dd:aa:9b:32:0b:4f:60:
                    5a:65:89:ef:d7:a9:84:70:05:5c:35:18:e0:ef:14:
                    de:61:a8:0f:76:78:6a:e5:c4:d8:b8:0b:99:6c:4c:
                    05:40:dd:2b:f3:b0:60:1d:b0:6b:c9:35:42:0a:ff:
                    69:aa:35:e9:4e:40:a6:47:25:ae:ea:8b:71:b1:72:
                    13:e2:9a:31:74:3c:3c:e4:bd:bc:c9:8a:57:a3:95:
                    a3:5e:c2:1b:ae:96:35:8b:55:a9:cc:41:af:21:8e:
                    a2:56:3a:f7:f8:af:ab:48:da:07:2e:d3:e6:53:68:
                    54:7f:6d:9a:41:02:13:31:c7:99:c4:ec:39:73:12:
                    63:71:b7:7b:10:eb:fd:7f:2c:b5:1d:d9:77:64:90:
                    13:99:bf:c5:0a:eb:5c:e8:75:b3:6e:e4:81:ad:02:
                    4d:a3:da:f3:44:7e:ca:e9:88:f7:86:d5:e8:3d:07:
                    1f:49:a2:9e:96:fa:63:2a:26:43:44:d4:46:59:49:
                    17:c2:f6:0b:c0:3d:59:7d:7f:82:a5:fd:5b:61:06:
                    9d:1d:4f:9f:aa:8d:8a:c0:16:da:b9:70:02:c3:d2:
                    34:40:02:1a:36:84:21:70:5d:8f:00:d7:84:5d:c4:
                    70:99:42:ce:77:40:b3:34:16:ee:c6:9b:fc:1f:22:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:63:08:EB:17:A6:3B:22:4A:70:AD:9F:BE:47:F2:45:BA:26:63:97
            X509v3 Authority Key Identifier:
                keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:14:6b:d6:34:e4:66:29:07:da:06:76:b4:de:47:bc:76:1e:
         a0:03:5c:02:00:4a:2a:7f:e5:08:e1:56:3e:3a:44:bf:4c:fb:
         18:7b:21:1b:47:89:15:8b:2f:2a:fd:d7:60:c5:77:d7:b1:0c:
         5f:8e:b5:16:a2:9f:6a:fe:a0:fe:bd:68:a4:28:28:1b:85:3a:
         34:cd:03:1b:98:1b:7d:39:ed:24:18:9d:b6:b8:f9:36:d8:00:
         3b:32:d5:e7:6c:20:1c:43:3c:e9:c4:90:6f:89:d2:df:63:75:
         42:5d:62:76:81:d4:32:42:c7:99:f4:8b:b4:98:6c:57:73:5d:
         9d:38:10:1f:0c:34:69:99:08:cb:21:63:76:09:ff:db:d9:45:
         f3:0e:78:72:b9:1c:35:0e:13:05:d2:04:49:9e:6c:4d:47:d8:
         e1:8f:c5:d7:59:02:17:4f:3b:ea:2d:6f:f1:37:a7:1b:0d:10:
         e1:68:92:ef:44:3f:19:87:da:ce:28:64:68:9a:d8:3a:b5:38:
         72:f1:da:0b:ae:ab:20:29:d8:eb:3c:fd:8d:2e:9d:d7:09:b7:
         ad:75:1f:56:8d:73:95:c7:13:87:8a:96:48:a2:d1:39:b1:4a:
         94:89:6c:75:3d:31:9a:0d:94:18:6d:c3:e5:a7:61:db:a9:7a:
         29:80:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 08:06:24 2024 by rpki-client on console-ams.rpki-client.org