Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
File:                     6DpZuIHOHlc10a3c2LrgXlO4U9A.mft (raw, json)
Hash identifier:          lIcYWiURn4oZumRTomkdIniDO5U6TWkD926Mr/ADn5g=
Subject key identifier:   A5:61:B8:BA:9D:61:FC:38:D7:A1:89:80:B3:90:0E:E9:ED:98:8F:C2
Authority key identifier: E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0
Certificate issuer:       /CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0
Certificate serial:       3464
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
Manifest number:          343F
Signing time:             Fri 22 Nov 2024 14:52:21 +0000
Manifest this update:     Fri 22 Nov 2024 14:52:21 +0000
Manifest next update:     Fri 29 Nov 2024 14:52:21 +0000
Files and hashes:         1: 6DpZuIHOHlc10a3c2LrgXlO4U9A.crl (hash: DRRWB7ffmDSrS5P9zElsUuH/KMFP8n0Ez6C30nHsbwk=)
                          2: 0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa (hash: JyqMsccIdMIwojnILIDKpIhGwL1vv0c257sVPtD7idA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl
                          rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:52:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13412 (0x3464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0
        Validity
            Not Before: Nov 22 14:52:21 2024 GMT
            Not After : Nov 29 14:52:21 2024 GMT
        Subject: CN=67409aa5-4c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:39:37:dc:65:8a:47:12:67:bd:13:79:a5:36:
                    70:da:8f:36:90:df:26:8a:73:22:9b:8f:6e:dc:5d:
                    70:9f:b8:13:80:e5:72:76:b5:5d:4c:88:e8:12:2f:
                    ed:69:c7:d8:cf:91:51:23:af:58:12:17:6d:8d:71:
                    18:d0:4a:65:68:2b:0d:fe:1e:02:b0:27:77:c3:5b:
                    74:6b:43:7b:80:da:f5:a5:b8:45:45:4b:89:1a:03:
                    67:50:a8:ec:2c:ca:37:db:44:f9:f3:60:d0:81:0c:
                    28:7e:8a:20:63:5b:8c:42:ea:95:1c:6e:29:de:ba:
                    9c:4d:9f:a7:bc:26:f0:20:2b:35:c4:cc:09:90:44:
                    fc:0e:f3:ec:64:86:51:07:b0:63:b1:63:03:8a:a0:
                    73:a2:09:fb:e1:61:82:26:68:a2:ea:79:e4:cf:9e:
                    48:a6:bc:69:d9:24:7c:03:b3:90:e2:17:5e:16:28:
                    e4:3a:42:a4:7d:b3:ee:33:85:e7:58:4d:f9:d9:ea:
                    8e:b7:8c:e1:e1:64:00:8d:b2:b7:ef:41:d4:ff:b0:
                    40:fb:d7:e2:d4:93:e4:57:07:ac:ad:bd:cf:71:01:
                    ac:73:6a:3d:ef:4c:95:07:c4:39:74:88:a5:97:44:
                    95:c6:b3:2a:01:84:95:13:de:bb:a9:2b:0d:49:c2:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:61:B8:BA:9D:61:FC:38:D7:A1:89:80:B3:90:0E:E9:ED:98:8F:C2
            X509v3 Authority Key Identifier:
                keyid:E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:45:0e:d6:9f:14:b0:65:0e:a1:8d:1d:9f:65:1a:a3:28:d6:
         89:da:0b:df:57:e2:8c:8a:c8:64:77:be:19:4b:72:f4:bd:72:
         ff:4e:a3:02:6b:08:b1:06:ed:72:cb:37:b0:e4:66:c2:4c:13:
         e3:a3:c3:7f:5f:77:b6:d4:9f:63:48:c2:02:b7:5d:c1:59:de:
         7f:93:ee:73:ef:14:6a:c7:44:36:75:d9:49:71:98:c9:d3:e4:
         bc:e7:53:9b:26:7a:38:f1:07:c0:dd:4f:1c:2c:72:4e:9e:76:
         68:86:ee:7e:59:b8:6f:68:7d:2c:a4:0d:5e:53:22:10:71:da:
         f8:85:7d:cd:6f:21:5b:fb:c0:60:6c:88:43:17:6a:8d:e1:c5:
         d2:d4:50:1b:85:c0:e3:2c:6d:8c:98:3d:30:1e:eb:b4:f2:d4:
         94:9b:b1:63:4f:03:1b:b3:1c:82:e8:f9:99:27:c1:6e:a7:5c:
         b1:74:9d:7b:07:84:18:e7:cf:92:a7:8c:cc:fb:4d:0a:00:93:
         f2:28:18:17:1a:ad:42:b5:8e:93:57:fd:87:9b:2d:a5:cd:17:
         87:2d:e7:1e:ce:08:4f:0d:20:4f:c5:76:42:0e:28:68:2c:05:
         57:05:f8:0c:8f:1d:f7:7c:c1:4a:eb:d3:9f:15:81:f1:ae:01:
         05:45:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:59 2024 by rpki-client on console-ams.rpki-client.org