Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
File:                     XRhbcS2TBWvydLi3qJjGklTruYM.mft (raw, json)
Hash identifier:          6PqKsKDK55OFvGqFDxClCCL07BvOSkGUFVvSx+dccNE=
Subject key identifier:   38:8F:2B:57:77:55:AB:DF:F0:96:F3:C3:5F:40:F3:A0:05:AF:D8:5C
Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
Certificate issuer:       /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
Manifest number:          B5
Signing time:             Sat 23 Nov 2024 04:11:56 +0000
Manifest this update:     Sat 23 Nov 2024 04:11:56 +0000
Manifest next update:     Sat 30 Nov 2024 04:11:55 +0000
Files and hashes:         1: XRhbcS2TBWvydLi3qJjGklTruYM.crl (hash: kWbgHoaYOojWB//iEHbbshIxeWUmYfvZUuuuj4VBa38=)
                          2: 79124A64AD5F11EE8824985BC4F9AE02.roa (hash: B9BQyy3CDZZSMJBX+GCW4rWICLdCrlm/SrcOF/YLMFQ=)
                          3: DCCEA912A3EB11EE8049E335C4F9AE02.roa (hash: n/QHjH1nEODvbvzFyy3xLe3FzdFcDXtcGXLBP+1lw5E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
        Validity
            Not Before: Nov 23 04:11:56 2024 GMT
            Not After : Nov 30 04:11:55 2024 GMT
        Subject: CN=6741560c-1c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:13:fa:d6:d6:51:6b:c0:d8:a3:73:40:8d:
                    6b:8f:fa:61:ed:08:fc:dc:72:e7:77:95:9e:fc:8f:
                    e9:2f:e3:d4:48:79:94:bb:2e:aa:63:ba:5e:8b:34:
                    f2:3c:c6:eb:d3:3d:af:a3:c7:c7:e3:ab:de:37:e3:
                    83:c1:09:0b:9c:0f:53:e2:8f:59:9d:97:90:01:22:
                    08:29:a2:e4:c0:80:1d:ab:cc:c9:c8:41:15:38:28:
                    5c:b2:5c:6c:6f:ff:b1:79:88:ca:da:a6:f3:04:d9:
                    8c:70:13:b5:a7:c1:a0:a1:bc:0c:58:90:ed:be:76:
                    50:0f:c0:c7:f9:a4:58:b3:a0:32:6e:66:dd:2a:64:
                    5d:ab:a8:cb:8f:6a:44:ab:4d:65:48:6e:74:03:80:
                    4c:c2:57:7f:92:2b:2e:ba:5b:d4:aa:9e:70:8f:89:
                    6d:e8:bb:f6:a1:54:81:54:7f:27:53:f2:33:48:41:
                    9c:b7:62:c4:1f:4c:73:90:9c:d0:fc:4c:74:88:7a:
                    ea:0e:79:79:ba:12:90:15:b7:bd:91:87:25:bf:95:
                    b0:3b:2d:01:3c:62:2d:0a:bd:1c:0a:50:d1:0d:f2:
                    b2:4f:c6:57:55:72:95:02:55:63:ce:79:b1:0a:bd:
                    6c:c2:89:47:dd:d7:05:bb:cf:80:e8:56:83:3b:d9:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8F:2B:57:77:55:AB:DF:F0:96:F3:C3:5F:40:F3:A0:05:AF:D8:5C
            X509v3 Authority Key Identifier:
                keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:11:ce:84:15:43:1f:9e:74:0f:60:69:6e:c5:76:59:a7:94:
         c6:60:1d:49:48:51:68:93:49:6b:a7:3e:eb:06:95:f9:3b:1b:
         12:19:ab:1f:44:65:14:c4:4c:d4:2c:1a:93:77:4c:39:af:38:
         78:2d:39:73:e3:0f:67:c4:cf:84:35:91:72:69:86:a5:64:8d:
         10:ad:86:12:ad:23:b0:df:90:25:67:d1:14:6f:c4:06:2c:c6:
         44:fc:47:78:3e:a4:c6:73:ce:8a:55:98:51:b0:c5:39:9a:bc:
         ea:71:b7:10:f4:b9:b4:5b:8e:23:53:e8:f0:b9:16:99:ad:d5:
         cb:ee:a3:b8:34:9f:7b:06:61:41:f7:b2:f0:7c:1c:05:a9:ff:
         45:63:18:34:47:73:bc:64:bc:e6:ae:31:dc:9c:f8:a6:a5:d6:
         67:85:ac:c7:59:3f:a0:60:11:e8:37:88:0f:a4:30:a7:9e:60:
         8a:a4:6d:10:36:66:72:ba:aa:07:12:b2:de:06:50:3c:f8:4b:
         2a:c9:d7:19:b3:2b:cd:6e:ea:76:a0:31:38:f5:f2:e8:ab:d5:
         62:92:d1:02:ba:c9:f1:24:0e:8a:f9:c2:c0:55:8f:23:b8:68:
         c2:03:c4:09:6e:81:ce:9e:eb:b0:05:b2:8c:cb:c3:4d:ba:f6:
         58:b1:2e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org