Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
File:                     EouTW4ldrG6Xco__i9w1bokYU-8.mft (raw, json)
Hash identifier:          U204Ggfok1ph7U/qDtyoMjgGB62dyfNGPVcj2uNLoSY=
Subject key identifier:   5B:C5:47:3A:CE:EB:4B:CB:CE:BB:F4:EB:D3:F5:59:3A:93:73:E7:D7
Authority key identifier: 12:8B:93:5B:89:5D:AC:6E:97:72:8F:FF:8B:DC:35:6E:89:18:53:EF
Certificate issuer:       /CN=A91B7709/serialNumber=128B935B895DAC6E97728FFF8BDC356E891853EF
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
Manifest number:          15
Signing time:             Thu 21 Nov 2024 06:03:25 +0000
Manifest this update:     Thu 21 Nov 2024 06:03:25 +0000
Manifest next update:     Thu 28 Nov 2024 06:03:25 +0000
Files and hashes:         1: EouTW4ldrG6Xco__i9w1bokYU-8.crl (hash: i4avVrTAykFMSdLqPG8A0Eub9XRHGiT/P34nNYQlxbQ=)
                          2: 06F9E5368BB711EFB4630B30C4F9AE02.roa (hash: wAMyns8JAwyol9+kP2W1kb8SKSEmxeqxcrfUrnMoAjQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7709/serialNumber=128B935B895DAC6E97728FFF8BDC356E891853EF
        Validity
            Not Before: Nov 21 06:03:25 2024 GMT
            Not After : Nov 28 06:03:25 2024 GMT
        Subject: CN=673ecd2d-7d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:81:ff:24:7a:0f:91:ef:cf:2e:a2:92:53:
                    89:9d:76:fe:b3:c3:45:b1:14:cf:17:b4:0a:3a:01:
                    5b:ae:93:3a:98:59:a7:7b:91:fe:73:79:ce:e4:b8:
                    8d:f2:c2:d1:d3:f0:c6:b7:f6:2e:fe:9e:ae:e3:a8:
                    b3:18:62:12:a6:40:6a:73:bb:4c:da:c7:2a:be:99:
                    f4:f5:95:f5:e7:3b:11:44:6e:d9:2c:c0:f6:56:1c:
                    fa:a1:e9:8e:85:b1:3d:a4:91:04:46:16:73:8e:2d:
                    bc:36:f9:cf:11:18:39:29:03:ab:ec:7b:dc:a0:ac:
                    d6:5f:7b:2e:26:84:7b:84:fe:f2:be:80:fd:aa:ee:
                    8f:26:28:59:80:fa:2c:1b:5a:d7:18:51:fe:61:56:
                    de:2a:c6:ed:41:d8:e2:4a:80:ee:c9:d7:06:d9:a8:
                    ae:99:b5:11:44:55:2c:47:e3:63:6c:74:a6:bc:5d:
                    49:77:ca:78:af:9b:b8:d9:c6:74:35:48:45:06:e6:
                    96:31:5a:bd:51:23:9c:36:03:6e:88:b6:e1:24:b7:
                    14:94:1e:28:bd:cf:89:94:e4:b2:65:87:82:a7:8a:
                    d4:f4:3c:cf:15:f1:6e:88:1f:c7:27:4d:ac:60:fd:
                    6c:6a:97:1c:8b:21:02:13:c3:22:3c:26:e4:05:95:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C5:47:3A:CE:EB:4B:CB:CE:BB:F4:EB:D3:F5:59:3A:93:73:E7:D7
            X509v3 Authority Key Identifier:
                keyid:12:8B:93:5B:89:5D:AC:6E:97:72:8F:FF:8B:DC:35:6E:89:18:53:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5b:08:a1:ea:54:d2:18:26:2e:46:69:1a:ea:5e:54:66:55:
         29:40:f1:c5:a9:35:9a:4f:85:b5:a8:9b:30:fb:e8:d5:68:ef:
         0a:a7:2d:c5:0b:45:77:d6:96:27:06:12:27:13:65:9d:89:90:
         0e:d9:b7:ec:5d:e5:46:b1:22:5d:8c:c3:d5:05:60:d7:6d:f8:
         3d:8d:90:ec:5d:7f:5f:1b:60:4c:be:36:7a:3d:ec:58:33:53:
         7a:b2:9a:fc:97:eb:e8:57:30:e8:75:d2:f3:0d:b0:14:0c:37:
         80:01:30:60:f7:4b:68:0c:bf:79:06:88:59:14:b5:63:b5:21:
         a6:32:cf:33:88:a3:0c:92:b5:fc:7a:14:e4:2b:b8:f8:db:11:
         5e:f9:df:a1:7a:0c:6e:bd:4d:e2:fc:9a:2b:06:ab:b2:4c:39:
         d8:9e:b0:60:4f:b7:60:64:84:35:a3:73:af:cd:f3:7f:da:9a:
         59:7b:db:54:83:fd:39:e3:83:a9:41:9d:1d:a8:c2:d0:6b:c1:
         87:90:33:1c:5c:68:d7:19:43:63:2b:32:53:bd:9b:5a:62:19:
         0e:de:f9:8e:ac:cf:2d:80:1d:ef:3b:76:7d:b7:08:16:0c:c9:
         13:8c:f4:72:2d:cc:39:78:2b:be:6e:e4:b9:c7:2d:19:30:ce:
         16:64:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:49 2024 by rpki-client on console-fra.rpki-client.org