Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
File:                     QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft (raw, json)
Hash identifier:          obgBluxluR3t+abGn3/I+XwM5ENF9bKoBELTX06WSNc=
Subject key identifier:   81:8D:58:2C:B6:98:1F:98:06:9C:F3:04:F6:31:CC:21:C8:94:9F:D0
Authority key identifier: 41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E
Certificate issuer:       /CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
Manifest number:          41
Signing time:             Sun 15 Sep 2024 09:52:06 +0000
Manifest this update:     Sun 15 Sep 2024 09:52:05 +0000
Manifest next update:     Sun 22 Sep 2024 09:52:05 +0000
Files and hashes:         1: QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl (hash: +wwmXEeivRN18CPz/3eqGc1RdMUwld6/u0JcKUzuowU=)
                          2: 3F9C6E6619B811EF8628ED1FC4F9AE02.roa (hash: 4/E6bIAWccbduiKBNMiuytAWBn9Dzd2Sjrg/gYO20a0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E
        Validity
            Not Before: Sep 15 09:52:05 2024 GMT
            Not After : Sep 22 09:52:05 2024 GMT
        Subject: CN=66e6ae46-dc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5a:76:79:f2:7e:a1:96:49:17:1b:10:29:38:
                    0a:36:1a:90:c7:58:af:43:b1:e5:39:69:25:7e:4a:
                    a9:7b:49:25:73:8a:f2:5b:79:03:7c:19:c3:c8:31:
                    7c:a4:60:88:e2:5a:fa:55:4e:fc:4e:5d:d7:23:c4:
                    5f:9a:9c:02:46:72:ae:4d:ea:5f:37:e5:6a:e0:63:
                    82:bf:01:cd:15:25:66:9a:b9:cb:34:79:99:e0:ee:
                    cf:7f:6f:0d:ac:83:00:f8:4d:c3:31:43:29:b3:3a:
                    7b:68:ac:16:73:76:31:65:47:77:10:a3:35:ef:d4:
                    c8:37:92:3f:ad:03:55:8a:31:7c:eb:3c:be:53:5d:
                    30:64:f5:96:6b:63:d5:ba:d0:f3:bf:03:ed:21:48:
                    9a:1e:04:af:42:28:e0:74:29:64:a1:4d:97:5a:6a:
                    10:c0:d4:89:02:0c:3a:c6:3f:08:9b:1a:2e:bf:6d:
                    b5:85:a8:2a:ab:97:d0:3a:a1:8e:29:7f:7b:83:53:
                    2a:06:9e:ec:fc:ff:46:71:5f:2c:58:be:04:3a:a8:
                    47:3d:ba:e8:4a:a2:3f:9c:de:d3:cf:81:4a:2c:80:
                    d6:f8:41:87:43:8a:62:15:ff:3b:52:1b:df:40:ca:
                    44:45:02:3b:0b:69:36:86:94:8e:e1:57:87:04:da:
                    f3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8D:58:2C:B6:98:1F:98:06:9C:F3:04:F6:31:CC:21:C8:94:9F:D0
            X509v3 Authority Key Identifier:
                keyid:41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e2:c2:12:f9:78:11:41:20:37:51:a8:0b:41:8e:7f:b3:88:
         35:a3:9e:cc:e0:b7:03:31:e5:6d:49:a6:e2:fe:27:82:84:de:
         a1:f2:56:3b:55:aa:df:78:19:ab:23:33:9f:df:39:37:51:24:
         e7:9c:7f:74:f3:ad:9f:8c:65:4b:43:22:52:29:b2:60:5a:d8:
         4e:94:07:2f:1e:b2:48:2f:02:56:03:d7:04:30:f6:ce:d3:54:
         1f:b1:34:ae:c7:d7:72:d5:a2:8b:90:ff:fb:b4:e3:67:c2:10:
         0d:7b:35:2f:3b:2c:41:21:90:d8:bd:a3:c0:a8:d8:af:05:80:
         39:c6:82:12:4a:e3:8c:ba:83:8f:e0:e1:2e:57:fd:c6:bf:f6:
         f6:03:26:25:7a:06:02:e0:35:5f:8e:d1:cf:05:ae:5f:36:79:
         95:46:24:71:18:de:ff:ec:41:69:1c:de:26:a8:36:91:cd:eb:
         61:b1:81:17:8b:7c:08:9c:48:e6:56:da:92:f3:7d:5e:68:52:
         8b:60:b6:89:b5:1d:08:a1:56:4c:de:40:df:d0:e1:ce:21:7f:
         d5:7c:c0:69:9a:2b:98:b9:f5:52:5d:47:8f:de:85:f8:15:1f:
         56:96:20:dc:51:a1:d7:a5:16:b3:07:e0:ed:25:de:be:a7:76:
         25:13:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 10:45:11 2024 by rpki-client on console-fra.rpki-client.org