Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft
File:                     -w-UodMQX3ZmLb2ELp0rA7ulkXE.mft (raw, json)
Hash identifier:          Q/kgbcq41cTj8n2jV2tlNWKr9S5JlR2NETjL6dqhwJw=
Subject key identifier:   58:1A:9F:DD:A6:D7:79:91:33:0D:7A:7A:1B:08:BD:48:1F:11:B3:DE
Authority key identifier: FB:0F:94:A1:D3:10:5F:76:66:2D:BD:84:2E:9D:2B:03:BB:A5:91:71
Certificate issuer:       /CN=A91A9427/serialNumber=FB0F94A1D3105F76662DBD842E9D2B03BBA59171
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w-UodMQX3ZmLb2ELp0rA7ulkXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft
Manifest number:          82
Signing time:             Sat 23 Nov 2024 04:42:25 +0000
Manifest this update:     Sat 23 Nov 2024 04:42:25 +0000
Manifest next update:     Sat 30 Nov 2024 04:42:24 +0000
Files and hashes:         1: -w-UodMQX3ZmLb2ELp0rA7ulkXE.crl (hash: 41eM6pXS2ssSvZTovkO+GoiQxoDWsmrS9IhUeMNJABg=)
                          2: 61B828C0E80611EE9F467C0CC4F9AE02.roa (hash: Cui6TKAxi7fUCUqZi8Kq+DmfYoM/tyU53ANlrNmzMJA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.crl
                          rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w-UodMQX3ZmLb2ELp0rA7ulkXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9427/serialNumber=FB0F94A1D3105F76662DBD842E9D2B03BBA59171
        Validity
            Not Before: Nov 23 04:42:25 2024 GMT
            Not After : Nov 30 04:42:24 2024 GMT
        Subject: CN=67415d31-8f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:f5:08:ae:1d:4b:9b:87:9c:6e:98:8f:f6:02:
                    40:79:68:6e:00:3f:bf:46:f7:2b:98:10:95:f1:3f:
                    3d:a1:4a:c8:3c:ee:7b:d1:77:34:4b:0d:8d:d7:13:
                    22:48:31:77:e8:09:aa:03:05:8d:24:71:f5:d8:92:
                    8a:16:02:67:a5:3b:83:55:da:92:58:3d:f1:dd:b2:
                    2e:a6:88:93:05:eb:93:a5:92:6a:c0:20:c0:7d:5a:
                    06:be:2c:92:a9:13:2d:03:20:d4:5c:26:4e:36:a5:
                    a0:87:0d:af:26:23:a9:88:17:61:53:4d:c8:7c:16:
                    e6:e1:94:78:04:d1:ca:4f:04:78:3b:de:de:c9:eb:
                    bc:d5:cf:e6:47:d3:d6:d3:56:e1:48:4e:90:aa:3d:
                    f8:bd:88:2f:a1:21:14:dc:2f:e5:65:07:e9:58:56:
                    85:f1:60:58:05:ae:58:3b:65:06:5f:77:42:9a:31:
                    f7:ff:2c:b9:05:77:88:ec:7f:72:bd:43:a5:36:d9:
                    82:11:ce:ae:cb:eb:16:78:91:3f:16:ef:fe:15:96:
                    f8:31:07:14:1f:e1:56:67:0d:41:51:6e:a6:1e:56:
                    c6:e2:c6:ad:81:29:08:ca:12:35:31:e3:3f:d5:db:
                    44:05:b9:b1:44:b7:62:c8:31:73:2e:20:76:94:c2:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1A:9F:DD:A6:D7:79:91:33:0D:7A:7A:1B:08:BD:48:1F:11:B3:DE
            X509v3 Authority Key Identifier:
                keyid:FB:0F:94:A1:D3:10:5F:76:66:2D:BD:84:2E:9D:2B:03:BB:A5:91:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w-UodMQX3ZmLb2ELp0rA7ulkXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:21:7c:66:5e:1e:c7:1d:80:a5:1b:e7:3a:d8:55:67:ab:42:
         c6:a5:82:db:4c:60:f5:d6:27:cb:2c:37:87:a7:bd:4c:66:62:
         81:4a:f8:ce:a8:38:85:b2:a2:d3:99:e2:0b:ee:fc:00:57:c6:
         ad:22:d8:b5:ab:e5:f4:35:31:36:61:08:44:f5:4f:19:a6:23:
         4f:42:34:59:82:49:26:3f:9c:24:27:36:e6:a7:ed:62:30:d8:
         9a:e3:2a:57:d7:8e:e3:be:fd:cd:f2:94:5d:fc:b1:cb:60:94:
         79:d1:43:c3:43:6f:15:75:af:90:17:93:11:9b:86:36:c7:6c:
         c7:87:5b:b5:d3:1c:fe:5b:0c:b1:7f:6e:f4:81:e1:1a:46:67:
         79:79:6b:99:f1:38:02:e4:06:6b:e7:ae:b9:b1:5d:dc:79:94:
         bf:61:34:94:76:06:82:73:0d:2d:6b:31:2f:d6:77:0b:f8:69:
         5c:62:1d:c8:53:89:fa:e5:e9:32:0f:de:cd:15:a0:b2:c8:10:
         74:c9:e1:37:d3:d0:67:28:b2:a1:47:60:d8:40:0b:a7:8a:77:
         f8:3a:73:3c:50:fc:95:e8:52:ce:c0:32:75:04:51:1d:ae:3b:
         cc:99:20:6a:2b:e3:51:42:16:da:f8:f1:c9:66:2d:02:0f:32:
         c3:1a:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org