Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
File:                     tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json)
Hash identifier:          6OijZ30WFEev2W0Omq9GSbrI9kFrbKIwPb5AqVANDr4=
Subject key identifier:   03:CA:38:EB:F4:6D:85:52:21:E7:E0:E8:B1:C6:2C:3A:1B:53:2E:08
Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
Certificate issuer:       /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
Manifest number:          0972
Signing time:             Fri 22 Nov 2024 20:37:58 +0000
Manifest this update:     Fri 22 Nov 2024 20:37:58 +0000
Manifest next update:     Fri 29 Nov 2024 20:37:58 +0000
Files and hashes:         1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: NgysVC7ffskjpqvtrrnNLCUYKCXHv7NqbwjJe6xknoc=)
                          2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: iM1WPBGRU8kyt2wtZ44xuEtw5kiXcIfrSzUOCPpEqtg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
        Validity
            Not Before: Nov 22 20:37:58 2024 GMT
            Not After : Nov 29 20:37:58 2024 GMT
        Subject: CN=6740eba6-7929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:a3:26:2a:0d:64:0d:59:05:73:0e:64:a9:
                    3d:0e:5f:73:74:6b:81:32:3c:11:40:b5:7d:5a:fc:
                    4a:8a:f5:61:2f:f0:b0:9d:b7:63:f0:99:35:6f:35:
                    f6:5a:dd:76:bf:73:e1:38:51:02:c8:8b:bd:40:89:
                    47:26:fa:d5:29:03:67:ac:29:f9:f4:ce:66:82:a9:
                    53:58:cb:04:9e:ff:e8:37:2a:df:e9:aa:5c:ce:1e:
                    6a:b8:8e:4a:e0:25:27:17:8e:11:57:b0:eb:19:b7:
                    d6:15:b3:94:66:2d:a7:b2:15:6a:9a:91:3a:bc:dd:
                    6a:b1:30:31:fe:ce:9b:63:f9:34:2a:7e:19:0d:de:
                    a6:33:22:d0:5b:bf:46:f0:a2:73:2f:31:61:d1:a1:
                    48:c5:56:b6:a3:22:d9:10:d7:67:04:61:0e:e0:94:
                    19:23:10:02:64:b1:ca:dc:a7:79:75:35:4c:05:22:
                    3c:ec:fd:9f:c5:cf:f7:74:c3:b0:bf:38:e9:a5:95:
                    70:52:8c:38:3d:91:44:70:70:3d:8d:69:98:2e:75:
                    24:7f:39:f1:69:44:da:31:a7:c9:59:01:b7:bf:85:
                    5e:3a:61:93:fb:ef:43:7f:27:09:9f:82:be:d9:f4:
                    9b:b5:3a:48:05:2f:21:87:3d:71:f6:53:e0:d0:7d:
                    bf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CA:38:EB:F4:6D:85:52:21:E7:E0:E8:B1:C6:2C:3A:1B:53:2E:08
            X509v3 Authority Key Identifier:
                keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:78:bd:10:97:43:f1:83:40:e0:45:1f:6e:0e:40:df:c7:b6:
         70:4a:78:3f:e0:5e:76:fe:e2:e9:f4:01:5a:c5:c7:b8:15:24:
         6b:4c:7f:e7:ef:64:2d:c8:e4:f9:85:31:cd:6c:38:6e:56:8b:
         4a:dd:36:68:43:6e:b7:b9:2a:a4:df:ae:a1:28:29:e7:66:af:
         b0:fc:dc:de:a2:7b:fc:de:a4:7c:7c:2c:c0:43:da:52:2d:3b:
         80:69:21:52:90:c7:7d:45:73:7d:c3:af:c0:bc:e3:1c:74:2c:
         e1:08:e1:e2:c8:ef:2a:ec:48:39:95:a2:8e:1a:38:d1:ef:e6:
         bc:cb:4b:30:64:c1:58:3d:e1:70:23:04:84:d5:ad:52:28:6f:
         0f:1b:d8:8f:f2:9c:e2:a9:23:6a:1e:2d:03:d6:b0:73:0b:51:
         86:be:23:f3:80:23:37:f9:11:0d:90:fc:86:f5:43:4a:68:78:
         da:05:cb:e6:ee:24:3f:a5:30:0b:fa:fb:e8:d1:0c:c3:f5:17:
         06:5b:68:c8:32:95:75:61:64:45:c6:0b:bc:ea:eb:a7:c4:88:
         6a:9d:51:df:90:a7:81:4a:f3:7a:e1:ed:f9:9f:65:7c:c9:ca:
         38:77:86:4f:ee:3e:8c:9c:6b:0c:46:6e:d5:33:c0:91:9a:13:
         3e:f3:cc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org