Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
File:                     rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json)
Hash identifier:          LlfyHisOI70OAmXSAGfBQr59VvrK9twVFVucCImKZeY=
Subject key identifier:   50:4B:33:3B:BC:E3:DF:E9:80:90:CC:E4:33:A6:B9:A0:26:01:DC:BA
Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
Certificate issuer:       /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Certificate serial:       038C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
Manifest number:          0382
Signing time:             Thu 21 Nov 2024 00:26:10 +0000
Manifest this update:     Thu 21 Nov 2024 00:26:10 +0000
Manifest next update:     Thu 28 Nov 2024 00:26:10 +0000
Files and hashes:         1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: aOFv2g6F+tlPYMN5yQw2a8qI2LMRKFxYi3Horciiu7Y=)
                          2: A98BD3DE91F211ECA28ADD36C4F9AE02.roa (hash: E8V1sk0D8i4WfgIIWQOrfA2cQHivc9el6REKMjdr7Wo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
                          rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
        Validity
            Not Before: Nov 21 00:26:10 2024 GMT
            Not After : Nov 28 00:26:10 2024 GMT
        Subject: CN=673e7e22-eb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ae:f2:41:87:95:62:b9:28:d3:02:fd:f2:57:
                    4c:f8:2d:25:97:77:2f:4a:98:3a:39:07:29:36:f2:
                    39:e9:3a:a5:e0:f8:b3:73:6b:de:66:a9:63:0b:4e:
                    be:8d:80:11:35:00:5e:d9:b4:43:74:8f:2a:f5:77:
                    a6:63:0f:55:99:b3:b8:6a:8b:e3:75:95:07:51:7f:
                    16:4c:eb:0b:29:5e:28:e2:ca:ce:41:f3:1e:4b:e1:
                    32:a5:12:04:a0:ff:a9:18:69:c2:7a:59:60:50:16:
                    46:f7:fb:cd:85:6d:76:a3:98:4c:a3:e3:7a:36:33:
                    3e:87:f4:b7:bb:d0:8d:74:5d:1d:91:c0:02:02:5a:
                    b2:22:90:cf:c5:b6:44:cc:30:ad:aa:60:30:74:78:
                    1e:f7:59:df:92:da:21:70:f5:0f:a3:e6:bc:84:af:
                    dd:e3:ce:d0:3b:73:2d:e6:25:be:0e:0c:c6:7d:50:
                    86:05:32:03:57:ac:0b:3e:68:57:64:a7:8e:da:69:
                    62:72:88:70:5a:95:bf:fc:00:57:f0:44:e5:b1:fb:
                    14:66:dd:84:0e:fc:2c:41:d5:be:8e:db:fa:6c:52:
                    1f:9c:b3:a9:30:52:34:0d:fe:21:f7:fe:5e:e1:6d:
                    09:71:9c:84:d7:89:7c:70:93:76:85:d4:14:2d:2a:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4B:33:3B:BC:E3:DF:E9:80:90:CC:E4:33:A6:B9:A0:26:01:DC:BA
            X509v3 Authority Key Identifier:
                keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:34:2e:1b:d1:46:3a:0e:ec:90:48:bb:ef:66:49:2c:86:
         d1:67:da:51:63:01:0d:3e:cb:9d:f6:eb:df:86:93:4b:c7:9e:
         09:d5:07:1e:40:f9:c3:f2:e0:0c:3d:1a:46:1c:0c:49:a9:48:
         80:da:3c:f2:7f:34:14:6a:7b:08:95:30:b4:15:a4:40:7b:da:
         45:66:03:66:8f:d8:e7:a3:4c:e5:c2:e4:80:4e:ea:b7:2c:b3:
         b7:3c:b5:b6:39:03:ec:5e:56:7c:41:dc:ce:61:17:dd:39:20:
         45:3a:67:7a:0c:f3:78:c8:7e:0d:8e:c2:0b:6c:8d:f0:55:d5:
         85:75:83:f7:f5:5c:94:a5:3a:d9:bc:28:74:30:f1:f3:07:52:
         ec:22:18:b5:13:cc:fb:2a:71:3d:45:2c:71:5e:6a:ef:1d:c9:
         d3:4a:01:78:98:c5:59:63:94:bc:9e:5b:6b:96:f1:b4:66:7d:
         11:4a:ff:b5:f1:d5:1b:6c:82:7c:60:d0:59:08:a3:d2:20:28:
         97:e9:ce:24:27:05:22:e6:91:19:6b:82:be:15:3c:09:39:da:
         6d:06:8d:29:99:04:f1:13:5e:ee:38:f0:54:41:22:f6:47:b3:
         8e:b8:25:d3:33:8e:13:13:ed:bf:20:3c:18:12:2d:2a:fc:6b:
         d3:e7:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:57 2024 by rpki-client on console-fra.rpki-client.org