Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
File:                     vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json)
Hash identifier:          gNpZV8Xm1+NnfrvFJsZ0JGOweCgvERL3vKlcjaadRVc=
Subject key identifier:   5B:7B:BA:5D:37:23:80:EE:CB:EF:F9:50:9B:90:89:F0:6D:A9:C1:69
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Certificate issuer:       /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial:       073E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
Manifest number:          0739
Signing time:             Fri 22 Nov 2024 21:11:28 +0000
Manifest this update:     Fri 22 Nov 2024 21:11:28 +0000
Manifest next update:     Fri 29 Nov 2024 21:11:28 +0000
Files and hashes:         1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: +jdkh3NTNCN5mT1DzKQq/s1xOe2RE+pYn7di7uk7vJE=)
                          2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 1LIqaLcLd8sIbPgwe6w2+ZfDiBIad4OGJXBnSw3QIfc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1854 (0x73e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
        Validity
            Not Before: Nov 22 21:11:28 2024 GMT
            Not After : Nov 29 21:11:28 2024 GMT
        Subject: CN=6740f380-8b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:96:48:3e:73:ae:f6:5b:5b:f3:da:54:76:
                    6a:c0:34:58:a3:3c:34:3f:2b:95:80:6d:0b:61:ef:
                    cd:d0:15:76:9f:83:64:df:fe:32:e9:b2:67:a5:54:
                    77:bd:aa:e2:4e:50:aa:ba:bd:d5:33:7b:9d:b1:5f:
                    2a:50:e2:1e:89:1e:4d:2c:3b:29:2d:f9:0e:84:1d:
                    29:52:a4:4b:e1:93:86:86:be:e7:62:8d:19:0f:d6:
                    26:f0:4b:24:6f:17:34:0a:4c:56:d8:33:f0:c6:43:
                    c2:f8:0e:0a:4a:2b:48:40:f0:db:ae:32:63:e6:da:
                    a7:de:6a:dd:96:96:a6:9b:4b:cd:cd:5e:7a:b6:a5:
                    1b:b7:89:67:e9:c8:38:63:00:ea:ad:cb:dc:a9:fc:
                    a1:84:19:eb:e6:9c:a0:17:b7:62:80:41:1c:63:7d:
                    8d:6d:db:86:c6:92:ae:03:4a:70:69:93:35:d2:fa:
                    a2:ae:67:3a:41:a7:61:f2:7c:ea:5b:e0:c0:e9:3c:
                    06:6f:66:de:ff:43:5b:39:4d:4e:fd:b6:08:12:98:
                    17:12:7b:1a:86:7c:7b:55:bd:01:93:07:ba:8e:5f:
                    7e:7a:3a:23:dc:2f:3e:33:2a:62:e9:2a:18:09:ca:
                    14:73:d1:ad:9d:15:50:a8:2c:f5:01:30:9c:d4:dc:
                    1e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7B:BA:5D:37:23:80:EE:CB:EF:F9:50:9B:90:89:F0:6D:A9:C1:69
            X509v3 Authority Key Identifier:
                keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:76:38:9c:5f:b9:2d:1f:20:95:12:73:da:0a:43:53:86:6a:
         db:80:84:64:6c:35:ca:e3:f2:3c:f3:6e:f9:7c:ff:19:81:d7:
         6e:df:8a:3e:fb:e5:71:74:dc:03:33:c6:bd:3a:21:c9:49:c0:
         2a:8f:45:3f:55:b6:cd:c2:13:4f:01:eb:5a:c5:8c:c3:be:5b:
         6d:ed:fc:a1:95:0d:1d:8a:e8:5e:a5:a3:b3:a3:0d:6c:ad:65:
         2a:8e:73:54:9e:d0:fd:85:7c:f5:b9:d6:17:f4:e7:1a:bc:fe:
         cd:6f:20:1d:1d:97:e1:5a:2d:20:b8:1a:9f:ed:4f:05:f8:43:
         00:41:9a:cf:f6:49:9d:b1:88:0d:17:d4:71:74:79:11:0b:6b:
         15:d9:14:29:10:27:d8:90:e6:70:6d:a7:74:fe:af:54:af:0a:
         f2:64:40:56:a6:fd:59:27:63:2c:21:a0:fb:b9:df:6a:6c:40:
         72:8f:2c:78:28:ee:16:e2:54:da:df:8f:aa:12:69:6a:ff:93:
         4a:a9:c3:0c:7f:10:a3:63:04:27:2b:75:3b:de:b5:51:01:df:
         61:7f:b7:8c:1e:f6:1b:cd:8a:c8:ae:22:34:a6:c5:a7:83:04:
         04:88:e9:e3:e4:53:96:ed:60:15:a1:eb:55:a6:84:65:58:20:
         d4:67:41:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org