Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
File:                     446z9aUQfjDwynHd6nWxcNCwMlY.mft (raw, json)
Hash identifier:          FydIajtLEqriMRQYmDa0xexGxSbb33lJ7f5HSUTCub4=
Subject key identifier:   C1:64:0F:30:B7:F9:FC:31:F4:52:E3:99:E1:F1:AC:22:1F:B8:37:9B
Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56
Certificate issuer:       /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
Manifest number:          5E
Signing time:             Thu 21 Nov 2024 05:11:55 +0000
Manifest this update:     Thu 21 Nov 2024 05:11:55 +0000
Manifest next update:     Thu 28 Nov 2024 05:11:55 +0000
Files and hashes:         1: 446z9aUQfjDwynHd6nWxcNCwMlY.crl (hash: SMiuALr8hQbIAXhk3/UZP+dh6SlfyMNCXpkyMkBWqQw=)
                          2: F9ECF4A0295A11EFBECFCA7EC4F9AE02.roa (hash: NdbphxCCW/0QaYFIIuCoc2s3U5MsSxFLdZGoiC7E3Ew=)
                          3: 96A24FE4976E11EF94474159C4F9AE02.roa (hash: /Y2QyH5LbzXt0NvQ8F/AW8OWJcEkm/Yc3HCSB3VUdZ4=)
                          4: 95DEC1BE976E11EF94474159C4F9AE02.roa (hash: kDtt1Hwh/gf8jarcPIC4cfMmNWkbkfVgRHtHrPEgAsc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
        Validity
            Not Before: Nov 21 05:11:55 2024 GMT
            Not After : Nov 28 05:11:55 2024 GMT
        Subject: CN=673ec11b-bcbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:79:27:e6:57:d9:9a:b9:74:7b:82:22:f9:
                    a9:40:f6:61:75:32:4d:1c:c6:eb:38:9e:5c:08:14:
                    f9:75:73:76:ec:08:af:22:8b:3e:54:e2:38:6a:07:
                    8e:93:21:a6:28:27:61:8a:7d:9c:42:67:2b:d0:54:
                    c3:3e:f8:98:91:be:af:dc:c7:1e:63:85:82:0b:31:
                    61:86:34:ed:fb:8e:f4:15:6c:2e:5e:63:05:cf:c4:
                    5e:06:14:08:6f:9c:f4:df:e3:7b:cd:b1:99:89:85:
                    10:42:89:76:65:3b:9f:2c:8d:0d:c2:c0:50:a7:dd:
                    91:b2:b8:f6:73:fe:09:6e:50:53:56:4d:1d:b4:a7:
                    9b:07:3d:37:08:15:56:0b:cb:fd:eb:97:d8:2e:ab:
                    a4:23:3b:16:2f:5b:3c:2d:81:80:b2:a8:95:f1:f3:
                    ab:0f:65:3c:5c:c8:ff:de:7a:d6:05:93:89:e6:58:
                    43:63:9b:1c:6d:bd:b1:24:63:c7:7c:3b:61:f1:f4:
                    e7:c9:22:30:65:3b:be:a4:c7:bc:cf:a6:66:b6:29:
                    e8:bf:9c:db:26:e7:fe:7d:e0:39:74:0e:de:26:eb:
                    7a:32:3d:1c:de:19:d2:1a:cb:39:a4:9c:a6:67:89:
                    67:0d:b6:f8:e1:30:d9:05:36:a2:29:ec:32:bd:ed:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:64:0F:30:B7:F9:FC:31:F4:52:E3:99:E1:F1:AC:22:1F:B8:37:9B
            X509v3 Authority Key Identifier:
                keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d5:f0:30:09:3e:40:72:74:a2:01:7e:0f:53:8f:27:80:8b:
         a8:6b:8c:f9:01:1a:c6:58:21:f2:92:a6:5c:08:43:91:b4:8b:
         cd:b7:18:ea:4f:36:61:30:01:de:0c:97:6f:29:44:4e:37:1f:
         cc:96:9c:cc:68:b6:f4:4a:70:ac:d6:5e:55:d0:5d:97:af:78:
         e1:c5:5a:9a:5b:c0:61:f6:e7:38:a1:34:c4:80:dd:16:76:c1:
         e7:f4:4f:db:1a:e8:1b:6f:69:de:95:8a:ed:3c:62:d4:e6:77:
         10:67:f8:06:74:ec:bb:87:7d:05:9c:42:19:3a:1d:5b:b8:9b:
         7b:30:92:3c:bd:03:f3:53:33:9a:22:33:97:bd:0d:51:42:6d:
         67:24:3b:63:5b:fa:ea:a5:eb:72:e8:b4:bd:ec:fe:eb:8a:42:
         d0:46:d6:e3:0a:c2:47:3e:2f:62:ac:8b:aa:f6:e0:5b:ff:1c:
         f5:06:80:13:18:8b:2a:76:6b:8a:43:78:32:86:d0:a3:12:11:
         eb:9d:d1:27:1d:55:5c:91:6c:7b:93:db:5e:4e:f6:a5:b5:68:
         8c:df:a3:0f:49:c0:f6:97:a3:26:fb:0e:bc:e2:a8:db:70:a6:
         fe:2b:f9:4c:b5:cb:b2:ce:58:33:4c:fb:d0:60:65:a9:b2:3c:
         e5:b1:2e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:37 2024 by rpki-client on console-ams.rpki-client.org