Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier:          419wwFKlXjUdox6vqCwAKusvH8iCR/NpK6iN1J0N9EY=
Subject key identifier:   0F:B2:7F:13:CD:51:49:61:66:CB:CD:1B:A7:FF:21:D4:BB:37:43:44
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0A18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number:          09F7
Signing time:             Wed 20 Nov 2024 19:37:51 +0000
Manifest this update:     Wed 20 Nov 2024 19:37:50 +0000
Manifest next update:     Wed 27 Nov 2024 19:37:50 +0000
Files and hashes:         1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: aMQrXCNeroN4tXiMqlcqCEqlPlvintG/9hZ73c+PriY=)
                          2: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: mw/1AkG0h2/VCsdxl5VCIYoldfBNUqXCdmVhyy1MN0I=)
                          3: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: oI04e+L7sfMU3Sj0iOiRw8fx6cZ5LmX2RbaxWaFzzOU=)
                          4: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: ruViVCRJvEfOz9OjHERXLsP/W7M4wMXz2oTU4fGgAJk=)
                          5: 8A533506C9DC11EE8B24C55EC4F9AE02.roa (hash: YQ93vpgeMhab/R8ZlFAYYEI4TgKyYiC1Ypil0/nPvE0=)
                          6: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: VPX0H6cdFOsD+zG6jkUQSU97ro/+zyFklQ+WnPjh1dQ=)
                          7: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: Bhm0Q4XwclM/AutVLQajl/RY7MZ/JnuqZS+j7Xz7NN4=)
                          8: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: KMNvvX+seGU0kX0Y9POTEvFI+e3rPIB5wqdW880u6II=)
                          9: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: yQYomqcwgOlX6WAs8ZRA75TVRZC7TmCArM+Ntkj02Ew=)
                          10: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: HS8PGK9JvgH2bBKy4nxxFbr2M5XBFdQnBUnj4pS0EeA=)
                          11: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: C+ub+CENSJtyHyu/2AvvJdYuCVWeMlxkJN2l0lgPcTw=)
                          12: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: kxN3E1UjFrRW2qS6VXZ4546hiWA0TPCQ1evX0olnexQ=)
                          13: 8B8856F4C9DC11EE8B24C55EC4F9AE02.roa (hash: maL4uN20qdAsWEHHKCBH0I+qShISlNfAhA2p73xkGTY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2584 (0xa18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Nov 20 19:37:50 2024 GMT
            Not After : Nov 27 19:37:50 2024 GMT
        Subject: CN=673e3a8f-c431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3c:64:73:16:61:f3:d9:d6:52:42:da:6f:cb:
                    93:e6:f5:65:37:48:4c:2a:06:5f:67:f4:32:30:06:
                    bd:f1:50:ca:76:76:df:d5:0b:60:93:88:c6:aa:7e:
                    2c:bc:fe:89:a9:79:a5:dc:d9:af:fb:31:fa:63:eb:
                    5f:72:e9:4d:52:5a:c2:52:9f:5b:fb:1c:94:bd:39:
                    34:1b:cf:dd:a3:a3:58:b9:7d:a6:59:07:de:58:26:
                    16:35:e1:46:05:d1:35:1d:5f:cd:93:37:7f:ce:b1:
                    70:8b:65:eb:f7:b7:40:2e:bd:bd:09:a7:3a:de:6a:
                    e6:63:46:28:58:d8:41:5e:2f:60:72:72:6e:7c:8b:
                    df:88:80:d5:13:f7:1a:3a:9c:5f:ce:4b:5b:e2:f8:
                    f7:81:5f:ba:ac:c7:e6:0a:93:60:f2:57:a9:98:a8:
                    a6:75:32:c6:8c:aa:91:a6:f7:b1:35:30:fb:9a:b8:
                    91:ea:fb:3b:75:93:83:04:37:0e:68:f5:a9:a2:82:
                    d2:67:fb:3e:ce:f8:22:98:de:6e:d9:4e:d3:18:1e:
                    2c:d3:0e:a0:e0:83:bb:f8:90:27:9c:3b:da:a8:ec:
                    92:8f:e3:7b:58:c7:b0:09:0f:dc:a8:92:e0:b7:43:
                    70:02:06:4f:6b:ac:9e:30:39:ef:f0:cc:ed:bf:58:
                    3b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B2:7F:13:CD:51:49:61:66:CB:CD:1B:A7:FF:21:D4:BB:37:43:44
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b4:95:46:35:9f:07:6b:3d:f7:25:bb:4c:8f:d3:c7:56:3e:
         b5:3c:41:26:85:de:01:01:7f:35:74:44:f3:a0:5a:70:11:ff:
         c8:94:0c:e2:8e:cf:c1:15:31:41:a2:bc:bf:ab:e9:e6:0c:88:
         a0:08:24:d9:69:86:88:d3:b7:78:e1:9f:78:ac:e8:d8:8a:07:
         cf:62:fd:9a:30:8f:1e:f9:83:9f:97:d7:03:0c:5e:3c:56:d5:
         52:fc:81:12:ee:22:6e:51:73:6a:e1:a4:74:e4:c1:e7:e6:31:
         59:3a:bc:35:3d:4e:bc:19:8a:b3:65:e2:98:ad:e2:8d:8d:2f:
         85:3c:6b:1f:05:02:d1:fc:fc:30:4d:ea:8f:f7:c1:bf:ac:0a:
         46:81:57:1e:9d:5e:e4:76:85:75:fe:0c:eb:e6:80:2c:dd:29:
         de:2d:75:48:1c:48:42:6b:2d:0c:fd:42:bc:00:48:28:a6:c9:
         03:2a:80:a6:ec:f3:99:f6:df:32:e7:54:12:72:1b:46:97:c2:
         7f:79:62:6b:7d:31:85:57:3f:21:43:2b:01:4c:d3:1e:ea:45:
         3a:bb:c1:58:ea:ba:ae:23:d4:72:4d:ec:ff:93:6a:77:b0:c0:
         da:3f:e1:64:59:54:ae:01:b9:89:35:56:bd:60:8b:c6:84:23:
         7c:6b:e4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:45 2024 by rpki-client on console-fra.rpki-client.org