Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
File:                     sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json)
Hash identifier:          4+1cctN0Qp5Jz+nTdZrvjyK43ww1fcwoD7PqOERW+OY=
Subject key identifier:   A8:8F:34:17:24:DF:F4:B4:0A:26:06:25:B3:48:F7:09:8B:CB:0B:C7
Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12
Certificate issuer:       /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
Manifest number:          0A
Signing time:             Thu 21 Nov 2024 06:14:07 +0000
Manifest this update:     Thu 21 Nov 2024 06:14:06 +0000
Manifest next update:     Thu 28 Nov 2024 06:14:06 +0000
Files and hashes:         1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: zxMfQwMGjBzOe/ZcKQi8WBsfjNFaxsIFUDR5cS1Wg3s=)
                          2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: 20U7R8Yje/fzXp5s/Ng4KAPvO8aTGVHHdc0Vt45hE8k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl
                          rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12
        Validity
            Not Before: Nov 21 06:14:06 2024 GMT
            Not After : Nov 28 06:14:06 2024 GMT
        Subject: CN=673ecfae-5489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:bc:1b:4f:a1:84:ba:07:17:d3:d2:19:5f:
                    37:41:b0:b6:40:3b:df:c9:31:12:18:7c:4b:1a:81:
                    a2:a7:0b:c0:c7:5b:f6:64:43:0f:95:d6:f4:f1:76:
                    6c:a2:c8:68:5f:b9:69:91:47:97:e6:78:01:54:5c:
                    4e:da:f8:c3:56:63:a9:1a:dd:5b:4b:16:a0:c8:44:
                    b9:d6:23:73:a4:67:68:a7:0b:54:cb:cf:94:d1:fe:
                    61:33:89:e6:11:20:2a:e5:32:1c:7d:8d:90:82:b5:
                    13:96:d1:8e:6b:2a:0d:d6:6a:da:e1:69:43:f1:87:
                    b1:e2:c5:dc:f1:c4:71:ab:47:9f:fb:3e:fe:c2:cc:
                    57:4b:ee:e6:aa:88:62:45:75:66:58:86:7f:5f:30:
                    f1:44:94:9b:cf:69:b1:ec:1b:db:11:88:7f:99:52:
                    9a:bf:74:2f:5a:d4:79:2a:db:0e:47:af:0f:e4:81:
                    ab:ac:9c:cb:66:f7:57:36:a2:30:ba:31:9c:64:b7:
                    e3:ae:c8:2c:0e:e6:e1:30:a4:24:50:03:95:43:3b:
                    aa:4c:3d:e6:c0:1a:57:b9:4e:56:72:9a:24:9b:a4:
                    7c:44:73:bc:4b:cb:26:00:c6:e4:e3:c5:b7:77:0b:
                    5c:7b:92:83:20:35:ca:c6:85:09:20:22:ee:bd:0a:
                    06:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8F:34:17:24:DF:F4:B4:0A:26:06:25:B3:48:F7:09:8B:CB:0B:C7
            X509v3 Authority Key Identifier:
                keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9b:ad:ea:f7:04:e1:9c:11:03:9f:b0:a7:1d:ad:12:fb:04:
         fd:50:04:ac:b1:4f:d7:ae:ae:3d:fe:77:13:a0:ca:03:95:28:
         44:ad:0e:d0:1e:6f:2e:8e:0c:f8:1d:b9:30:2a:96:f8:f3:25:
         92:40:da:52:78:b9:33:95:85:51:fc:37:1d:b2:5a:eb:8c:40:
         dd:16:6f:4f:94:77:cd:5b:79:e1:12:ca:5e:41:39:ab:49:4e:
         c4:67:b2:7e:68:0b:21:e0:1f:57:83:2e:06:8a:84:8c:40:37:
         36:6f:c0:97:0c:8a:af:bb:ac:44:3a:f0:c6:03:87:15:a7:28:
         18:ad:aa:1d:d5:8f:62:3e:93:39:72:df:17:1a:f9:2a:b4:a6:
         bc:7a:ed:1b:02:09:8f:f8:89:f0:43:b7:e7:66:63:91:93:67:
         19:f3:00:63:51:4b:d5:d2:95:7d:42:e2:8e:66:eb:4e:f0:cf:
         e0:c1:df:65:43:e7:28:57:17:72:56:ac:d0:be:c4:58:29:57:
         c3:3c:9c:3a:d5:48:54:b9:3e:09:2b:97:9e:e3:7d:f8:25:10:
         77:dd:a8:33:5b:fc:a4:72:80:1b:7c:b6:39:ee:bf:8e:9b:b4:
         20:4f:4e:b2:33:b2:89:2e:bd:64:7d:2e:86:52:d6:46:ee:15:
         7e:c5:a1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org