Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
File:                     XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json)
Hash identifier:          4tiR3jNrMhT4r1J4F3Ec2/wzrhiZmaG0pFzQzqN0qt0=
Subject key identifier:   65:39:BC:15:24:0C:E3:EE:8C:3B:0F:87:95:53:1D:D7:7E:3D:0D:E2
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Certificate issuer:       /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial:       0244
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
Manifest number:          0237
Signing time:             Thu 21 Nov 2024 01:24:11 +0000
Manifest this update:     Thu 21 Nov 2024 01:24:11 +0000
Manifest next update:     Thu 28 Nov 2024 01:24:11 +0000
Files and hashes:         1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: 4AH89ycCNBB8O8Vb4vHGQSWXmrqxXegmp1U/bOOckpo=)
                          2: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: Vaf/2IuP6hiZHVP/Zzaz4dOsvcYmitwX0HNjNxuvpnM=)
                          3: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: TagIMdFi8Wzn09/Ge5pL8woV36T21sjYNdiET9ad6yQ=)
                          4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: OYepGimgXK3MUKlDDQh6/2vOomTeihklKTqr9GGXQtI=)
                          5: 94584738031A11ED934E3D58C4F9AE02.roa (hash: isQopsFQh2QLJz7fDjuOZ5S4zYi6+htYHq2GDQnVE+A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
        Validity
            Not Before: Nov 21 01:24:11 2024 GMT
            Not After : Nov 28 01:24:11 2024 GMT
        Subject: CN=673e8bbb-445b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:82:19:ac:34:ae:a7:b5:f2:71:4e:6e:cc:42:
                    39:8e:78:51:85:be:e2:4a:5b:45:b2:37:d5:fd:0f:
                    13:07:17:f0:20:6b:a4:bd:c5:5a:ee:18:37:08:11:
                    bf:03:fe:8e:1d:49:86:9e:a4:6b:16:cc:93:29:15:
                    e8:9f:15:cf:1a:27:33:73:c4:29:15:19:8e:f5:ac:
                    0c:6f:5e:d1:8f:1d:35:ee:64:c0:77:bf:14:09:f6:
                    5d:33:a6:96:ba:e8:f6:6d:fa:43:6a:99:45:05:18:
                    90:8b:a9:2d:91:41:2b:bf:48:1a:e6:68:b8:8c:bf:
                    66:70:74:f0:25:56:74:86:10:1d:d2:5f:2b:02:f2:
                    37:08:f8:a6:f3:06:8e:2c:7d:16:5b:e1:da:58:62:
                    25:28:00:37:2f:4e:cc:77:5a:62:1a:fe:d0:7b:46:
                    fe:a9:2b:97:1f:30:41:7c:55:b2:a5:9b:6a:4b:c5:
                    57:6b:bf:4e:f2:75:fa:aa:e1:8e:3b:38:a6:76:2c:
                    53:2f:5e:4e:be:5c:a8:4f:ca:43:e6:2c:3f:50:03:
                    e2:fc:af:83:91:35:9a:47:46:19:69:43:3e:76:80:
                    d0:d4:6a:3a:ae:19:ca:b3:f2:ad:d0:51:5a:52:f9:
                    0e:43:be:0a:54:14:ba:f9:3f:fd:f5:3a:21:8e:83:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:39:BC:15:24:0C:E3:EE:8C:3B:0F:87:95:53:1D:D7:7E:3D:0D:E2
            X509v3 Authority Key Identifier:
                keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:92:cb:97:a8:33:13:ca:6c:f8:ff:c0:93:c5:16:62:2d:f1:
         4c:cf:dd:75:49:34:30:04:71:e8:3b:e9:ad:f0:f2:8f:6a:ef:
         b3:40:71:88:7a:77:bc:e4:ef:81:fb:11:34:52:aa:85:36:c2:
         88:24:6f:90:03:08:24:d1:c6:22:c6:24:12:b9:54:38:a7:7f:
         9b:dd:9e:28:b0:bb:0d:1c:56:f2:55:ed:2d:9c:ea:57:ac:79:
         a1:ca:9b:20:6b:e9:73:c2:b9:a6:2c:b7:dd:43:37:e8:6c:65:
         37:fe:92:7c:32:a5:8b:dd:af:89:68:04:45:54:4e:9f:0c:26:
         f3:b1:16:aa:c6:fd:3d:ae:34:8c:c2:cb:ba:1f:dc:30:56:1b:
         21:1c:9f:7a:02:32:17:22:1a:88:e1:4e:c5:b4:75:4e:24:53:
         00:e4:96:f0:a3:d8:c0:99:64:a6:c6:10:2d:99:4f:1f:5c:db:
         4b:d4:2d:71:d2:d3:98:e8:38:a9:27:37:b6:8a:e3:ec:37:f8:
         7f:3d:14:fc:d9:c0:8e:b5:0b:24:31:32:5d:8d:28:a6:c3:ee:
         76:70:ad:22:c0:93:f3:4a:62:70:63:1f:5c:94:29:d8:28:2e:
         47:ae:02:e4:83:d2:f3:1b:55:54:54:ed:b9:27:5f:94:66:58:
         b4:b1:cf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:49 2024 by rpki-client on console-ams.rpki-client.org