Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
File:                     _vE6uFK4kquii39LJSVwiZZNdms.mft (raw, json)
Hash identifier:          YgqjfDYknS3gOV1NX4sDO4fNp64JnOc6UY/vFLnRtNg=
Subject key identifier:   BC:05:0E:9E:23:1C:81:90:67:05:CD:A3:1B:D5:15:91:6C:1E:AA:85
Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B
Certificate issuer:       /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
Certificate serial:       09A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
Manifest number:          099D
Signing time:             Fri 22 Nov 2024 19:48:39 +0000
Manifest this update:     Fri 22 Nov 2024 19:48:39 +0000
Manifest next update:     Fri 29 Nov 2024 19:48:39 +0000
Files and hashes:         1: _vE6uFK4kquii39LJSVwiZZNdms.crl (hash: 5ghILRQnCGyBZwyd/LHWrQlgcJNDJaoNhL2otGRPJC8=)
                          2: 503D2222018111EBB0502527C4F9AE02.roa (hash: 3enXPqnFzMHU9dBHb+GMjG4Ixqaeyokw5ixU8F4DMjc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl
                          rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470 (0x9a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
        Validity
            Not Before: Nov 22 19:48:39 2024 GMT
            Not After : Nov 29 19:48:39 2024 GMT
        Subject: CN=6740e017-0d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:34:71:31:36:9f:61:4f:08:61:89:a9:b1:
                    ac:60:23:cc:24:38:88:6d:a5:7c:af:87:19:57:40:
                    89:04:2a:4f:e7:fc:5c:f2:41:0c:02:01:4e:06:52:
                    39:f4:fc:8c:e1:1f:02:b5:9a:97:a0:14:c1:48:9d:
                    dc:ed:87:58:be:85:21:e1:e4:07:37:68:83:e4:86:
                    ab:17:d1:2d:95:32:53:7e:03:f4:58:55:73:2f:74:
                    78:96:0d:3a:b5:5a:d9:a9:e2:8c:b2:97:5e:89:24:
                    8e:2d:af:12:d3:3f:a5:a0:f4:bf:2e:0f:00:2d:93:
                    0e:18:33:a8:cc:fa:ba:dd:1a:3a:c4:ed:8c:73:1a:
                    d2:c7:b2:f1:7d:4e:51:fc:da:fb:3b:fc:69:6e:1e:
                    57:a0:7c:83:c3:90:82:78:8f:e6:cf:99:bf:85:05:
                    cf:92:f6:78:83:5b:14:d8:71:f4:f9:f1:fc:61:b6:
                    7b:bf:3b:ea:0c:49:e1:60:a9:f2:03:1b:b1:f3:89:
                    f4:8e:02:2c:b9:c6:69:82:54:f6:40:cd:9f:7e:9e:
                    b6:bf:30:88:ee:bb:c5:1f:24:e8:19:34:f2:99:14:
                    9d:a3:87:d2:68:6d:5b:51:71:d9:72:95:0b:39:04:
                    29:13:15:04:cd:c4:3f:53:91:7b:f5:5e:e8:aa:be:
                    ea:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:05:0E:9E:23:1C:81:90:67:05:CD:A3:1B:D5:15:91:6C:1E:AA:85
            X509v3 Authority Key Identifier:
                keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:44:ad:cd:ab:c8:9f:8e:e0:a1:d7:e9:46:cf:f9:d3:eb:e5:
         b8:31:dc:12:8b:a7:f8:ea:88:86:63:e9:2d:88:72:98:8b:23:
         e9:0d:e0:67:19:16:a1:2e:b7:6a:7c:94:8e:46:8e:5c:73:6b:
         8a:be:18:ca:9d:b7:ca:e3:bb:1c:7e:c6:b1:19:b0:ed:6a:40:
         80:c6:71:f2:f2:84:fe:12:b0:83:ff:54:2e:4c:f1:0f:24:00:
         d9:e2:fc:9e:d5:20:fc:0a:01:6e:b6:62:93:82:4b:be:21:37:
         0b:5e:58:f4:5c:41:a8:de:12:1e:92:96:fc:a5:a2:28:81:40:
         50:85:b5:1e:b4:e1:f5:6f:dc:95:78:a2:d1:5f:7a:98:d6:8a:
         9d:43:1d:e9:4a:af:75:5d:32:9d:2b:29:16:f2:f0:1f:27:00:
         77:ae:cc:20:f3:de:b8:8f:c1:c7:6d:a7:d2:d5:6c:15:67:40:
         eb:b6:26:41:b3:59:52:08:99:87:ca:52:54:7b:45:0b:f7:a2:
         1a:32:68:ba:a8:dc:0f:43:90:73:f6:1d:05:91:c0:41:3a:58:
         7f:01:58:00:0a:c0:81:eb:32:84:c5:f3:3e:2c:96:96:17:56:
         fb:27:59:14:0a:24:ef:2e:55:3c:74:08:30:62:27:ca:8b:68:
         f3:31:9e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org