Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
File:                     psue-0_owcTgwvGwDoTH8aL0nG8.mft (raw, json)
Hash identifier:          ZsQ8O79txZyZJwNVl1KSgkOUjOdP/0nOmTcY4jNe/Ps=
Subject key identifier:   3E:7B:64:B0:78:D2:E7:21:A9:3D:8B:A2:94:3D:C0:32:8D:9F:4A:15
Authority key identifier: A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F
Certificate issuer:       /CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F
Certificate serial:       1355
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
Manifest number:          134D
Signing time:             Fri 22 Nov 2024 17:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:13 +0000
Manifest next update:     Fri 29 Nov 2024 17:00:13 +0000
Files and hashes:         1: psue-0_owcTgwvGwDoTH8aL0nG8.crl (hash: 3bGYPpx9bdN5uuTbIeTz2ZTlNN5m5EdkQalv7W+8c9s=)
                          2: 7BD0C11E8C3311EAB2E95132C4F9AE02.roa (hash: g/afL00ILJ3mHttnmB7PPDH/HYvyeBN7IhanA0d/L30=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4949 (0x1355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F
        Validity
            Not Before: Nov 22 17:00:13 2024 GMT
            Not After : Nov 29 17:00:13 2024 GMT
        Subject: CN=6740b89e-06cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:40:08:19:8f:61:72:e6:3d:51:4f:f5:e0:
                    73:6c:c5:b9:68:21:e3:97:02:26:0e:df:f8:b0:ef:
                    47:07:4d:4f:5e:fa:e2:a1:75:09:1d:14:d5:1b:4a:
                    e2:8d:14:9c:87:29:99:d4:c6:ea:b3:8e:b6:70:fd:
                    72:80:58:53:ee:25:fb:23:ad:57:0d:d9:bf:69:a1:
                    7f:8e:2f:83:df:5f:07:b8:29:79:53:5b:88:fd:56:
                    f8:2b:ce:3e:b3:21:14:90:76:52:a3:77:ff:98:33:
                    e1:83:d5:24:71:2b:d5:20:8f:81:36:9d:ed:3e:6e:
                    5e:43:34:47:b0:30:d4:85:42:95:f4:ad:f7:a2:a3:
                    95:1c:cf:66:95:77:e9:44:f9:80:b3:03:84:f8:1c:
                    fb:1b:b9:e3:d5:e1:07:99:26:15:d0:7b:54:74:bb:
                    68:1a:b5:bd:67:fa:03:76:42:06:54:31:19:da:89:
                    12:de:31:34:1d:c6:8e:11:69:54:e0:45:e3:39:ba:
                    e8:b7:52:9d:8a:2a:49:51:4b:87:20:25:57:83:f2:
                    7b:18:30:6a:98:c7:74:71:b8:1d:a8:2b:52:e2:a6:
                    6b:63:d0:b4:6a:68:e3:38:15:82:8a:22:85:07:5f:
                    b8:5f:b9:45:32:b6:75:af:a7:d5:8a:f5:1c:dd:9d:
                    b9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7B:64:B0:78:D2:E7:21:A9:3D:8B:A2:94:3D:C0:32:8D:9F:4A:15
            X509v3 Authority Key Identifier:
                keyid:A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:72:1e:9c:25:c7:92:2e:5a:3f:5e:15:51:84:21:8d:c2:e0:
         54:e5:a7:92:50:6a:e4:7e:fb:8e:c9:42:d1:8c:f6:98:3b:52:
         5d:9d:04:13:2b:0e:d1:15:d9:c5:74:a6:f6:83:66:78:fe:73:
         da:35:2c:d0:76:62:3a:32:49:14:52:e4:bb:a1:7b:48:a1:41:
         e2:4b:82:d9:75:b1:bf:08:e5:23:95:3a:f8:df:d9:c6:55:1c:
         c8:13:43:cc:7f:e8:8e:2a:cd:16:b7:f8:ea:93:70:1e:b8:c2:
         d9:0d:25:86:b9:b9:bf:af:8f:f7:a7:31:08:65:69:46:51:a0:
         3b:35:c0:65:5d:42:00:fc:58:35:ba:2e:e0:d6:c1:f7:5d:fc:
         d5:6d:59:f3:c8:c6:76:5a:ac:89:34:c8:b6:1e:6a:60:30:01:
         21:00:d0:b8:06:7d:40:fc:3b:41:83:bf:96:fe:04:ec:41:10:
         5d:4f:db:1e:fc:84:4d:40:a6:73:ba:d0:be:3f:b5:90:2b:c1:
         b6:da:10:84:31:19:a3:da:1f:59:b5:b5:21:36:21:2c:b1:b0:
         c7:0c:ed:b7:d8:53:ae:3c:2b:53:18:34:4f:66:59:70:76:80:
         94:33:e4:96:f6:d7:3a:20:59:90:ed:3a:30:c9:51:92:29:27:
         aa:cf:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org