Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
File:                     dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json)
Hash identifier:          PADHaKWcJ3tmX281DQ66LBgtb6FP+ub8iB/0TMFx8k0=
Subject key identifier:   CC:62:3C:6B:44:CB:2E:B4:4F:39:86:FB:E4:CF:C8:FA:50:99:2C:93
Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64
Certificate issuer:       /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
Manifest number:          0141
Signing time:             Thu 21 Nov 2024 02:39:13 +0000
Manifest this update:     Thu 21 Nov 2024 02:39:12 +0000
Manifest next update:     Thu 28 Nov 2024 02:39:12 +0000
Files and hashes:         1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: 4paOkqrIK72fLrlVVwkRk87rJYYfJs+776fp7m/+4K8=)
                          2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: ewiUnrO7XAgjqsA1wG//P3KoAbNdOVY4KG59Y9E54Tk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864
        Validity
            Not Before: Nov 21 02:39:12 2024 GMT
            Not After : Nov 28 02:39:12 2024 GMT
        Subject: CN=673e9d50-48a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4a:43:74:95:dc:93:3a:66:52:56:82:3a:c4:
                    61:bb:8c:80:df:f6:84:00:d1:d9:16:4f:28:25:9c:
                    6f:f1:22:c5:be:46:cb:f7:b0:ce:dd:94:c8:c9:18:
                    b3:c8:d4:08:ac:f4:17:ea:92:40:18:b8:7d:9e:8f:
                    19:3b:31:d5:e2:de:06:81:67:89:77:fd:f3:94:14:
                    88:91:ab:cd:6d:db:d9:47:bc:62:34:30:56:61:6a:
                    7f:32:1b:86:4d:8d:1a:bc:66:2f:f1:77:53:13:22:
                    74:d1:d2:6b:4e:c1:ad:e2:9b:ce:b1:33:f2:b1:68:
                    58:42:e6:13:86:3f:d2:39:a7:13:1f:d4:0b:67:f4:
                    aa:2a:32:5e:03:f8:e0:06:b1:07:e2:30:1e:4e:64:
                    19:c9:b3:06:b9:7f:56:b9:d3:a4:5e:b4:dd:ed:35:
                    be:8c:bc:42:04:30:f0:39:5a:33:47:99:bc:13:7d:
                    7b:dc:a4:77:a4:da:4f:ad:62:f2:ab:b8:90:18:be:
                    35:35:b8:47:3c:2b:30:22:14:d6:f1:85:3a:ff:2b:
                    d7:e9:1f:18:a3:3d:75:97:4b:66:98:64:d2:76:25:
                    21:7c:9c:df:37:b5:f6:58:26:64:f5:1e:a2:b2:7f:
                    f1:7d:7d:94:6c:5a:0f:95:fb:99:31:14:29:f0:64:
                    8e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:62:3C:6B:44:CB:2E:B4:4F:39:86:FB:E4:CF:C8:FA:50:99:2C:93
            X509v3 Authority Key Identifier:
                keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b0:c9:c4:44:39:1e:f2:fb:d2:27:54:a1:0d:f2:f6:18:a7:
         74:95:75:f6:f6:65:b2:af:76:26:7b:de:0a:fa:02:e5:b2:13:
         f0:0c:4b:3b:50:f4:a7:eb:58:11:7d:79:9a:b8:60:bd:d2:1e:
         a9:47:15:90:10:9a:cd:2b:f7:e3:18:33:aa:34:26:47:12:58:
         27:97:d0:fe:76:aa:b3:4d:ad:39:cb:4a:fb:42:5e:00:b5:5d:
         30:79:2a:9c:c0:37:0c:3d:e1:ab:20:18:2d:9d:00:55:b9:ac:
         dc:8f:08:cc:5d:7e:81:10:7f:cc:fa:c3:c0:2f:7c:a9:e3:f0:
         3b:3f:a8:e3:2e:32:9b:94:42:e7:10:57:b3:3e:17:e8:f9:6c:
         c4:5a:54:2b:c1:6e:bc:e3:e4:ce:54:7b:65:bf:eb:96:fd:ac:
         c8:84:8d:bd:b4:6a:3a:95:d8:3a:97:63:1f:b8:47:06:6a:cd:
         4f:11:5b:48:a3:fd:ef:24:0f:31:66:4f:8d:61:50:90:11:b1:
         2e:70:ad:22:78:bb:bb:ca:89:c2:84:31:8d:36:dc:a2:9e:01:
         0c:1b:68:b6:a8:03:b7:2d:d8:6a:10:a6:f4:a1:88:78:71:9c:
         b8:ad:3c:7b:63:27:1a:48:ab:0a:71:6e:9f:4a:29:53:b8:1a:
         7e:a7:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:03 2024 by rpki-client on console-fra.rpki-client.org