Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
File:                     RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json)
Hash identifier:          lU32DJhReufBaTukaP2QvAWGKFVt8p232nJlUbW0YAk=
Subject key identifier:   99:30:17:66:27:DE:39:23:C4:4A:07:4B:01:B4:01:28:3F:A6:1D:34
Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
Certificate issuer:       /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
Manifest number:          54
Signing time:             Sat 23 Nov 2024 05:12:06 +0000
Manifest this update:     Sat 23 Nov 2024 05:12:05 +0000
Manifest next update:     Sat 30 Nov 2024 05:12:05 +0000
Files and hashes:         1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: j5XXcs4uE28UOh7jNpiZSz4LIjXd3Q/UzCSDIxCIgkA=)
                          2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: f4DCasN1alZ70tb2pHL9Cyk/z0rne/HgPP80BOvFb+o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
        Validity
            Not Before: Nov 23 05:12:05 2024 GMT
            Not After : Nov 30 05:12:05 2024 GMT
        Subject: CN=67416426-7072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:f8:db:cf:7c:05:c4:c9:5e:1c:7b:38:65:
                    5b:a0:9c:02:bb:38:92:8d:35:54:58:e3:48:9f:ae:
                    94:35:77:96:c6:f9:19:5b:55:79:aa:86:1c:80:d0:
                    db:21:db:b6:d7:f9:b7:05:92:20:14:b5:8a:1a:0e:
                    6a:dd:3d:66:ff:16:6d:16:6f:99:c4:7d:9e:4e:69:
                    67:46:ee:ba:b6:53:06:f9:e0:80:d3:2b:0a:66:d0:
                    13:83:db:90:99:f1:d2:e6:b8:69:3b:70:91:d4:f9:
                    2c:70:52:41:6f:78:1b:4d:26:c9:dc:0b:2e:49:3c:
                    f9:c5:48:c9:bd:97:f1:ee:56:fc:99:55:ff:a2:39:
                    46:10:a1:07:63:70:c4:0c:a2:e5:97:f9:26:4f:6a:
                    1f:35:48:1e:fd:df:a7:b0:d7:7f:c0:49:8b:2a:10:
                    2a:0e:03:22:10:6c:e7:06:43:75:a8:a8:82:5d:c9:
                    00:5e:de:bf:ba:e0:17:db:d0:d4:cd:ba:99:f7:0a:
                    5e:78:76:8c:ab:ad:18:2c:7d:5c:54:11:e3:35:c4:
                    14:3b:9f:fb:67:03:18:a0:b1:9f:d2:bc:6e:cd:d2:
                    d0:47:fb:28:16:e1:9b:52:94:ed:f7:ef:a8:b4:b0:
                    e9:20:2d:5d:11:38:19:bf:35:8d:d3:9a:4c:e3:20:
                    69:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:30:17:66:27:DE:39:23:C4:4A:07:4B:01:B4:01:28:3F:A6:1D:34
            X509v3 Authority Key Identifier:
                keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:94:8c:60:0f:4b:4b:d9:90:a2:a6:aa:8b:d5:71:aa:7d:
         47:f6:81:17:c9:f7:e6:2c:97:85:b7:91:7d:43:75:2d:ab:58:
         b9:75:32:21:ac:8d:46:31:26:21:25:c9:44:8a:ce:bc:98:94:
         2a:4a:a7:a3:72:29:94:90:75:d0:7e:ec:8b:d9:51:10:3f:21:
         9e:52:6c:53:88:57:8d:ec:8a:9c:e5:f4:ec:f7:d6:fa:00:b9:
         d2:02:bc:6b:b0:d9:22:22:a5:ba:61:fe:7c:f9:67:5d:73:82:
         ae:b4:c7:60:24:fa:a2:aa:5c:fd:93:8c:0b:4a:97:22:16:a6:
         e0:bf:3a:d6:3d:f4:6d:a0:88:91:5c:28:f3:94:ca:31:51:86:
         53:4f:5b:d2:c6:b1:8e:c2:27:e2:81:f5:48:32:b4:33:f6:9c:
         7a:aa:3d:b3:c0:bc:3d:ac:14:98:41:80:7c:79:59:86:73:43:
         4b:14:18:53:46:49:de:a1:30:e5:fe:87:df:6d:e6:a7:7f:50:
         16:91:bb:c1:11:29:ad:92:a3:80:97:51:3c:a2:99:5d:61:b1:
         ea:f8:a6:19:8e:20:bc:09:00:c8:e9:1b:1c:40:b2:b6:ed:30:
         07:ac:a0:97:bc:e5:6e:57:c6:94:4a:5f:41:6a:0f:e1:7f:ba:
         bf:7e:0d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:19 2024 by rpki-client on console-ams.rpki-client.org