Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
File:                     e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft (raw, json)
Hash identifier:          uUk19AKaLykfUG9oKM5XIvyF4m0Wrol4YKdkSHdSdS0=
Subject key identifier:   98:B3:88:EE:A7:C4:FD:18:2F:C4:BE:C7:B6:E5:5A:61:EE:08:E4:8E
Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
Certificate issuer:       /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Certificate serial:       05E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
Manifest number:          05D9
Signing time:             Fri 22 Nov 2024 22:31:50 +0000
Manifest this update:     Fri 22 Nov 2024 22:31:49 +0000
Manifest next update:     Fri 29 Nov 2024 22:31:49 +0000
Files and hashes:         1: e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl (hash: o9z2mQwtVlEf+AobtCjUun+9pBJjcBEhrOFmcCmNtcA=)
                          2: BC56EB8EA21811ED94424B59C4F9AE02.roa (hash: Soa0nTU2rA3J23+wJd6LU+z2VdnIjv2Qmra/e4mNti0=)
                          3: 3520A4C0DDA711EBA436967CC4F9AE02.roa (hash: LHhvzFN8jei3TpgCNYUV3r6ZavWd7Cg3TVQ8AX0DXvE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
        Validity
            Not Before: Nov 22 22:31:49 2024 GMT
            Not After : Nov 29 22:31:49 2024 GMT
        Subject: CN=67410655-b3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:58:54:72:06:b3:4d:22:9c:ba:8a:c8:96:
                    75:b0:b6:22:ec:d0:09:bc:ea:af:ef:8a:f2:f0:63:
                    e5:2f:49:31:6d:9a:26:dc:fc:7e:c7:7c:69:93:4e:
                    45:bc:a6:02:25:d1:8b:bf:f8:b4:0f:e4:4e:1c:2b:
                    fa:78:21:8e:c2:5b:df:79:77:aa:59:96:b9:62:dd:
                    a0:96:55:a3:cb:5f:78:a9:ae:b5:76:10:d0:57:a5:
                    ad:f5:ab:d5:a4:da:c9:a0:f1:3f:19:03:a9:df:5e:
                    ef:f0:04:f0:dc:ea:81:d1:bf:1e:ec:e6:e6:ec:7a:
                    94:8e:2b:de:25:2f:9f:e7:f9:7a:48:ae:76:c1:ea:
                    d9:b6:ed:68:ad:de:61:c5:0a:6f:85:0f:4f:ee:29:
                    e9:fe:3c:a6:96:08:ad:20:50:c7:90:b9:e6:62:e9:
                    01:7e:d1:dd:3a:8b:02:15:3c:06:89:61:26:79:ce:
                    9f:c1:e8:d2:f0:63:c4:00:fa:d1:8c:8d:d8:46:3b:
                    20:59:30:58:7f:ec:8a:53:0a:fc:ab:78:65:0d:a3:
                    8b:98:ee:34:27:f2:06:37:c5:c3:6b:b3:16:29:96:
                    f1:4a:01:d9:d9:e9:f1:72:1f:6f:75:6e:a4:23:4d:
                    b4:99:6e:26:23:a4:fd:96:b1:8c:be:ac:db:1c:af:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B3:88:EE:A7:C4:FD:18:2F:C4:BE:C7:B6:E5:5A:61:EE:08:E4:8E
            X509v3 Authority Key Identifier:
                keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6a:05:60:67:18:ce:af:4e:f2:05:d4:5f:5e:a7:27:b8:a6:
         0b:e2:4c:58:0c:3b:24:e8:a0:14:7d:d2:a9:c2:7a:65:a0:f9:
         20:ee:e4:3a:29:33:89:5d:38:86:a1:88:5c:15:24:4c:5d:f3:
         2a:0f:65:5d:97:e8:73:0c:64:83:f5:e0:d6:c6:cd:a1:cc:1a:
         13:2a:e7:a8:6d:c7:a4:e3:21:59:02:9f:93:77:c8:13:3d:a8:
         98:1e:bf:6b:f7:5c:56:bc:2e:b7:42:07:77:73:ee:da:5d:e6:
         66:eb:38:e8:2b:a9:b8:6b:0c:59:79:5c:69:e4:1f:20:90:b6:
         14:64:18:00:03:a6:10:8f:9e:7c:eb:9c:ca:39:36:85:8e:25:
         be:e8:13:f1:e4:50:cb:ce:4d:ff:bb:38:cd:d6:6f:b5:61:24:
         33:14:11:43:e5:96:75:eb:73:6e:77:d3:90:b7:da:1a:34:99:
         b5:f7:1e:9b:58:c3:40:7b:62:9c:92:df:38:f7:0f:ea:3f:d6:
         59:7d:37:7d:9a:c0:c0:7e:14:58:a3:ee:43:26:42:7c:d2:8b:
         91:a9:49:bd:d9:00:66:6a:eb:76:29:3d:f9:73:18:72:08:16:
         fc:2d:28:32:5b:92:9e:a6:a1:ea:c7:41:36:c0:c2:a8:3c:ba:
         32:a8:58:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org