Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
File:                     EouTW4ldrG6Xco__i9w1bokYU-8.mft (raw, json)
Hash identifier:          +CpchqbfRLMvs2znxpQ7HggPdxsuNN6vaRPTZP1g6Bk=
Subject key identifier:   92:91:2E:03:50:D2:48:3E:91:E6:0F:E9:F3:37:C1:39:32:AE:25:82
Authority key identifier: 12:8B:93:5B:89:5D:AC:6E:97:72:8F:FF:8B:DC:35:6E:89:18:53:EF
Certificate issuer:       /CN=A91B7709/serialNumber=128B935B895DAC6E97728FFF8BDC356E891853EF
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
Manifest number:          06
Signing time:             Wed 23 Oct 2024 06:51:44 +0000
Manifest this update:     Wed 23 Oct 2024 06:51:44 +0000
Manifest next update:     Wed 30 Oct 2024 06:51:44 +0000
Files and hashes:         1: EouTW4ldrG6Xco__i9w1bokYU-8.crl (hash: ajqwYx4Mf/3/TS0Jd39PnFuzHy5HZ/jRkTaoV5DJ/IU=)
                          2: 06F9E5368BB711EFB4630B30C4F9AE02.roa (hash: wAMyns8JAwyol9+kP2W1kb8SKSEmxeqxcrfUrnMoAjQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7709/serialNumber=128B935B895DAC6E97728FFF8BDC356E891853EF
        Validity
            Not Before: Oct 23 06:51:44 2024 GMT
            Not After : Oct 30 06:51:44 2024 GMT
        Subject: CN=67189d00-cb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:a7:08:b1:8c:1d:70:c1:b5:07:0a:ef:cb:
                    a2:3d:d0:9c:40:d6:ba:0e:5b:b2:16:6a:a2:ae:ae:
                    78:d2:15:b1:56:0a:5c:03:64:84:82:df:d9:36:92:
                    68:46:bd:05:41:8e:af:c7:12:cd:9d:f3:0f:a5:ed:
                    e7:a8:5b:61:51:3e:5e:34:dc:a2:ac:37:b8:b9:8e:
                    84:7b:ce:4b:ff:2f:e3:f7:f1:56:11:cd:11:cc:17:
                    81:e4:cb:26:35:a9:6d:fd:92:4e:52:44:0d:dc:de:
                    46:f5:95:bd:3d:50:38:cc:b0:ad:fd:2f:77:2e:82:
                    f1:b9:92:40:09:a7:47:84:36:23:15:59:49:fa:a7:
                    b7:5a:b1:4d:1f:58:55:bc:0d:5e:bf:47:ec:0f:63:
                    60:47:b8:d1:3c:5f:fd:d2:49:1c:fe:a5:7c:4b:49:
                    9a:7f:4a:70:4e:77:9e:ba:3d:52:23:03:3d:d8:b0:
                    cd:73:76:83:b5:38:5d:e2:8c:fd:e6:88:4d:28:5e:
                    00:74:77:19:02:f2:1c:42:ad:3a:b1:8f:39:67:19:
                    00:64:89:2a:3f:97:74:8e:59:ab:5d:41:55:b9:c1:
                    0c:60:13:3c:dc:2e:2c:d9:33:11:b7:a3:ea:2d:ef:
                    0c:d7:36:ec:06:20:da:d1:79:25:57:37:89:cb:5c:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:91:2E:03:50:D2:48:3E:91:E6:0F:E9:F3:37:C1:39:32:AE:25:82
            X509v3 Authority Key Identifier:
                keyid:12:8B:93:5B:89:5D:AC:6E:97:72:8F:FF:8B:DC:35:6E:89:18:53:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:cf:6a:15:b9:7a:9c:9a:0e:49:13:2f:04:33:35:73:1a:3f:
         ec:61:cc:7d:b9:0a:dd:e9:96:b2:e6:7b:7e:05:f8:d0:c9:41:
         bc:9a:d9:aa:8d:ef:1c:e4:10:7c:da:37:62:51:17:85:ad:a7:
         3e:47:ef:b7:86:07:ac:97:96:0a:7d:0f:b2:2d:f8:c5:5a:91:
         14:e8:a4:d9:3a:8b:cf:c6:27:ac:8c:af:57:92:d5:cb:27:f2:
         18:6b:27:44:86:81:ef:78:3c:7a:d0:f9:1b:ad:57:6a:52:78:
         78:b0:47:a8:f8:e0:ed:7f:c8:ea:c5:c4:fc:bb:77:bd:09:f7:
         1e:69:76:3d:53:91:5c:9e:87:86:1a:b7:d9:eb:e7:4a:cc:94:
         6f:e9:33:2d:c0:60:b2:88:83:0e:d4:17:10:b4:16:e0:62:32:
         d7:e5:bb:75:07:ce:70:65:b5:7f:a9:29:bb:59:ac:fe:0a:fa:
         86:6c:1d:3f:95:f2:42:ef:05:82:ae:1a:ea:f4:39:3f:7b:fc:
         8b:75:80:e5:47:a6:2f:6d:b2:6c:8e:36:ca:c4:d0:77:57:8e:
         cf:94:b6:62:ee:b9:df:53:b0:b3:b2:0d:f3:48:c4:37:58:7d:
         05:26:00:a1:66:76:7b:4b:ca:56:a7:d3:74:24:65:c7:09:0f:
         23:ed:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:46:02 2024 by rpki-client on console-ams.rpki-client.org