Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
File:                     4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json)
Hash identifier:          k6IwEzHwOY0QvbNAHGW33dBj8U0je+r5kBDKbEcv7jc=
Subject key identifier:   45:B7:59:D3:2E:08:21:5D:70:9F:67:BC:C1:C2:AD:D1:22:1E:4E:02
Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6
Certificate issuer:       /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6
Certificate serial:       0317
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
Manifest number:          0314
Signing time:             Sat 23 Nov 2024 00:45:00 +0000
Manifest this update:     Sat 23 Nov 2024 00:44:59 +0000
Manifest next update:     Sat 30 Nov 2024 00:44:59 +0000
Files and hashes:         1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: jA275GJ8W5p5OChZBAaY6MOlElBGN5gZp5YPJQ5THGE=)
                          2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: SdiEw5/7A1+mSQhjRwF+90L+XCu7NDNES7xMleeOJcw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6
        Validity
            Not Before: Nov 23 00:44:59 2024 GMT
            Not After : Nov 30 00:44:59 2024 GMT
        Subject: CN=6741258b-2bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:05:53:44:e2:61:c8:29:37:e6:ed:07:dc:
                    0c:d0:38:fc:8c:19:35:02:09:8d:c6:f2:40:9a:18:
                    31:25:af:0c:93:5b:d4:08:89:06:67:eb:b3:91:e6:
                    90:1b:81:a0:c0:79:f6:9c:13:27:64:33:12:82:4f:
                    49:84:93:db:20:69:8a:85:78:42:a9:ea:15:a5:75:
                    2d:87:06:b4:17:52:cd:a7:30:4d:5c:cf:32:8c:cb:
                    e7:a1:e0:fe:c0:05:ea:1a:6a:fd:72:83:2e:1b:29:
                    f8:c9:2a:ed:bd:01:bd:e0:cc:1e:b3:e4:eb:e2:1a:
                    6f:74:6a:c0:6d:c3:75:89:71:d8:70:51:b5:d2:e6:
                    66:47:e4:fe:5d:fa:45:bb:65:f4:7d:10:f9:09:d1:
                    b9:33:90:36:3c:df:30:9f:04:53:6a:d6:d8:a7:e0:
                    e0:2a:a1:73:46:de:57:86:a9:3e:2f:51:65:dd:a1:
                    04:fe:04:00:fe:aa:b9:f9:e3:6a:23:04:19:90:5d:
                    df:dd:38:88:87:6d:13:11:95:98:d2:59:70:ef:a1:
                    6f:2e:4f:47:47:fe:35:88:90:03:ed:e1:be:06:42:
                    56:d8:53:5c:26:f3:a5:b7:be:0c:93:8d:6f:6f:2f:
                    fe:99:ef:8a:0a:9c:b7:23:70:86:ee:ef:6b:33:78:
                    fb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B7:59:D3:2E:08:21:5D:70:9F:67:BC:C1:C2:AD:D1:22:1E:4E:02
            X509v3 Authority Key Identifier:
                keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1f:e7:3d:25:f0:eb:50:f5:cd:01:03:8c:cd:e9:d8:44:23:
         15:3d:2f:f2:ef:f3:34:64:25:57:51:cc:76:5f:38:63:5f:4b:
         4a:d0:68:ec:eb:d7:9e:84:1f:99:34:b0:1d:70:35:b9:66:e5:
         23:45:43:22:c7:c2:f2:a4:81:2b:16:b2:13:83:44:fc:f8:99:
         f5:d9:90:54:de:c0:89:62:e1:75:ea:cf:b9:70:97:bd:bf:b4:
         b8:77:e8:6c:21:75:8a:0f:6d:6e:33:f7:54:6f:89:59:12:6c:
         4f:06:1b:17:8d:25:35:e1:01:03:3b:d5:66:99:8f:e3:15:ae:
         d2:2a:6f:16:1e:b5:26:d8:26:6c:d9:e2:e2:7d:4a:16:49:d6:
         e8:ff:e7:99:2a:7a:c6:04:96:40:19:27:11:35:5f:f0:7c:62:
         f2:94:6f:d4:5d:8d:56:ee:f7:98:b4:89:f4:23:55:44:3f:f7:
         8b:45:5c:04:22:e6:60:8d:9b:27:47:64:61:a0:a9:53:57:50:
         32:46:1c:64:d5:ab:13:d8:93:14:63:3f:9a:56:bb:83:83:20:
         79:47:b4:a1:79:d5:ef:e5:f8:a8:72:16:ae:0e:04:8d:f8:ab:
         ea:fe:ab:3f:9e:dd:c2:05:9a:08:3d:af:c4:be:46:b1:46:c1:
         6f:8f:ec:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:44 2024 by rpki-client on console-fra.rpki-client.org