Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
File:                     QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json)
Hash identifier:          z2kff5L1xV8Iq8fzkCTcopEOBeJQuegshSOOSGDVJB0=
Subject key identifier:   9E:C5:98:50:8B:14:0E:F7:E5:61:59:FE:81:17:BE:F8:8D:DF:D4:4E
Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
Certificate issuer:       /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
Manifest number:          86
Signing time:             Sat 23 Nov 2024 04:43:37 +0000
Manifest this update:     Sat 23 Nov 2024 04:43:36 +0000
Manifest next update:     Sat 30 Nov 2024 04:43:36 +0000
Files and hashes:         1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: iDf+HBs5unXdi1DZ5gaMmDg9pdUnkPLMYRcp3vVhGQg=)
                          2: FCF99042301011EFBC350682C4F9AE02.roa (hash: jBAmYh9ksJUIXjl6D8GUTZmcd/9XnW0epRK5w3L/De8=)
                          3: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: 4IAC/jSQTXj2MYLQMkt3TE5hsCOe0XFD7gTvlHGKKzs=)
                          4: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: eYzLLwqXSEETTXrW2+hB6aRYqoSuQiyl6DUCdQfwtGE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
        Validity
            Not Before: Nov 23 04:43:36 2024 GMT
            Not After : Nov 30 04:43:36 2024 GMT
        Subject: CN=67415d79-ceec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2b:03:2c:b0:e7:5c:42:8a:7b:9c:21:32:66:
                    e4:a9:91:55:e0:ac:42:08:ec:21:80:49:4f:0d:62:
                    34:7e:06:5b:66:55:6b:d0:99:23:26:da:7b:4a:fc:
                    3c:6d:e4:e0:2e:04:f0:15:85:04:f4:81:99:e6:d7:
                    07:78:03:b3:84:57:b8:c7:0d:f8:23:49:50:24:32:
                    4b:f1:f7:bb:70:70:c7:97:62:e9:aa:74:b5:c3:fe:
                    8a:a8:af:dd:be:bd:2a:81:13:2e:85:e8:b3:e8:b8:
                    4e:d0:f9:68:53:8f:7c:25:6e:31:61:1a:ea:cc:dd:
                    87:4c:8c:1e:65:91:b6:36:fb:d1:a9:ab:d2:58:62:
                    2a:a9:41:74:7f:d2:08:f4:57:c1:d5:9c:26:da:56:
                    31:7a:5f:7e:65:6a:4a:c9:29:8f:90:08:19:4c:e2:
                    9e:fe:d0:8c:f3:de:f6:97:7d:8e:9e:5a:d6:20:e7:
                    fb:4b:78:2f:e0:60:7c:be:7a:db:99:79:1d:fa:c6:
                    64:6d:18:02:bf:2e:8a:07:da:37:b9:c1:c3:af:c9:
                    90:67:cf:36:68:09:58:69:35:89:f9:7e:83:e6:f6:
                    11:1b:9b:1f:9f:1f:89:73:be:69:fd:a2:90:f4:fd:
                    4d:e2:25:0c:e0:37:bb:ef:70:37:f9:20:8f:6a:a1:
                    0a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:98:50:8B:14:0E:F7:E5:61:59:FE:81:17:BE:F8:8D:DF:D4:4E
            X509v3 Authority Key Identifier:
                keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:db:fe:58:2d:1b:14:dc:e4:cc:9c:fd:49:8b:20:3a:ee:1b:
         8d:ba:65:fd:4d:99:d5:53:3a:f1:93:13:48:36:41:0a:36:a9:
         52:d5:4d:f4:54:90:5d:40:80:a8:32:d4:d0:88:87:c3:e2:9b:
         4d:38:f3:e9:cb:1e:ce:46:ae:fb:75:94:c5:ca:97:a2:a6:3b:
         c8:07:e3:cb:50:df:4f:6b:9a:2c:1c:2a:08:36:06:74:19:42:
         ee:f7:60:b8:15:2f:d3:92:a7:97:3d:95:1d:e9:3f:04:96:53:
         92:89:42:a0:de:da:eb:ea:f5:2e:08:c1:cf:b9:a2:18:73:44:
         9f:d6:a3:d6:f4:1f:b1:f0:76:f6:6f:61:52:9b:9d:6c:e4:74:
         d1:34:92:15:16:1b:36:ad:aa:98:67:e4:06:9c:0b:13:e8:de:
         af:71:7f:e3:c2:02:62:e7:90:ce:72:ca:cb:ef:7c:47:46:10:
         81:dd:8f:4f:7b:78:ba:18:fd:0d:c9:04:3a:5f:9f:3e:d7:65:
         d4:2e:7e:1d:4f:bc:29:d6:05:a2:38:48:fd:5a:2e:70:f0:af:
         2b:d0:24:36:9b:fb:1f:0e:06:bb:74:35:48:13:14:60:5b:d2:
         42:27:90:66:48:01:03:cd:ef:b2:99:56:4b:ba:9b:1b:9e:c4:
         c8:70:5d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:19 2024 by rpki-client on console-ams.rpki-client.org