Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File:                     gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier:          1shkLb3k3fHG8gv3Ib989ypZemoJrje1phWbJy4hi0o=
Subject key identifier:   FF:33:E8:0A:84:62:A8:3D:00:41:91:00:8A:62:AF:E5:CA:BB:2C:D9
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer:       /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial:       0B88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number:          0B7A
Signing time:             Wed 20 Nov 2024 18:46:04 +0000
Manifest this update:     Wed 20 Nov 2024 18:46:04 +0000
Manifest next update:     Wed 27 Nov 2024 18:46:04 +0000
Files and hashes:         1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: cDK8tfQiiZu2iCDuTxZ1MxHMoK3FlsA7ZtUSHbr4Fgo=)
                          2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: pEgeurjKgD+LBkwAXCa5tpUoPlkRhmuMkO4xGWXbHpg=)
                          3: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: In6ErrBnjy0CE2Vjs8yez9ejdYbRZOOM4RlEkgAjLQM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
                          rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 18:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2952 (0xb88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
        Validity
            Not Before: Nov 20 18:46:04 2024 GMT
            Not After : Nov 27 18:46:04 2024 GMT
        Subject: CN=673e2e6c-c4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:b2:ce:c8:8a:b6:da:a8:5c:a4:2f:80:e8:
                    09:b1:37:e8:cc:95:d0:39:50:31:00:a8:06:be:b1:
                    06:ec:33:f4:a3:e3:17:4e:53:1f:4a:54:aa:cd:50:
                    07:99:07:49:c7:4a:a1:bf:e0:33:30:95:57:7f:e3:
                    02:67:90:83:27:e2:f6:33:e4:84:38:62:8d:bf:6e:
                    3b:9a:e8:79:25:23:c8:9c:7d:53:fd:61:10:21:84:
                    7e:88:fe:54:4b:5d:74:b6:94:f1:da:5a:75:70:31:
                    cb:82:60:9d:88:87:ba:d2:67:48:bd:e8:6d:3f:d0:
                    d6:2b:07:2e:12:0e:f3:6b:2e:f1:54:12:b6:75:f1:
                    47:bd:cb:92:85:76:e5:df:9b:73:8f:8d:0a:02:c3:
                    92:f5:c2:72:8b:07:da:03:15:7f:69:b1:78:88:2a:
                    ce:8f:2c:58:06:c2:72:2a:e0:56:6c:b1:fc:40:e5:
                    5f:17:3f:63:c9:ed:c4:90:c4:b2:24:16:45:18:df:
                    32:6d:28:ed:e9:55:11:af:c3:61:dc:96:da:2a:92:
                    d9:fb:9f:2b:2e:15:25:5d:5a:17:0f:bb:d5:07:d5:
                    41:35:f7:da:bc:11:8a:18:10:8c:1c:bc:85:a1:64:
                    10:a0:82:bb:ee:23:44:64:7a:d0:24:83:95:42:85:
                    bf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:33:E8:0A:84:62:A8:3D:00:41:91:00:8A:62:AF:E5:CA:BB:2C:D9
            X509v3 Authority Key Identifier:
                keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:aa:8d:5a:35:9f:46:31:bc:0f:25:7d:07:35:aa:b7:75:06:
         63:c2:e3:87:7c:93:d7:c1:49:12:1c:c6:89:23:ad:21:9f:51:
         dd:00:fa:b1:ac:fa:a2:20:1e:fe:9d:e1:53:c8:c8:d8:e8:d0:
         60:fc:8c:42:62:92:97:9e:bb:f8:c8:0d:4c:4e:31:87:e6:5c:
         5c:96:31:c4:bb:39:07:7c:82:31:72:91:17:a2:a4:2c:e5:00:
         e7:a6:e8:4a:ec:40:57:56:9a:78:83:a7:9f:e4:0b:28:7f:57:
         92:1b:59:57:11:c7:91:2a:8b:86:16:4e:63:f3:1f:54:a4:12:
         fc:21:44:eb:bb:79:46:e4:44:df:48:13:ec:92:28:eb:5d:19:
         1c:03:a0:85:72:1e:2c:fb:46:0a:b5:5d:a9:a3:64:02:36:e0:
         c8:94:67:af:3e:63:c7:c3:e8:7a:c1:4d:05:e2:9d:b4:a3:d1:
         d7:d9:e7:36:a1:59:3c:ec:25:c0:b3:79:99:72:f0:62:f6:96:
         1d:66:c9:6a:2e:81:32:be:30:40:45:c4:84:29:f6:5f:4e:1f:
         4e:02:63:d9:32:b0:02:21:fc:d2:44:a1:cb:b5:a8:87:d6:a9:
         78:31:5d:5f:06:d9:8a:99:39:5a:dc:91:16:0b:87:ba:12:6d:
         a7:c8:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:07:26 2024 by rpki-client on console-fra.rpki-client.org