Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
File:                     SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json)
Hash identifier:          a0QzhB8ZjoxOx5+6iEE8n+97FPNty83KOObxBeq24cI=
Subject key identifier:   65:60:9E:41:C8:D9:55:2C:08:2E:50:96:1A:C1:31:5D:2E:68:95:A3
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Certificate issuer:       /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
Manifest number:          0A
Signing time:             Wed 23 Oct 2024 06:46:44 +0000
Manifest this update:     Wed 23 Oct 2024 06:46:44 +0000
Manifest next update:     Wed 30 Oct 2024 06:46:44 +0000
Files and hashes:         1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: HALLqRt2qgcrb8IbitxwDbG2to4cTiYlSzveznO8mWU=)
                          2: 35525B92845611EFB053C341C4F9AE02.roa (hash: WnW59BqD7yxG6xwyHVyCL3N6dDBnzflFu8yKPNbhrU4=)
                          3: 35C99D4C845611EFB053C341C4F9AE02.roa (hash: V78F/sUvRrSVdDJyDfEyty7/vxO3/r50Hl6d0lC1src=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 05:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
        Validity
            Not Before: Oct 23 06:46:44 2024 GMT
            Not After : Oct 30 06:46:44 2024 GMT
        Subject: CN=67189bd4-851a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:f6:7b:9c:6c:c1:c4:dd:c0:95:92:cf:72:
                    6e:04:d3:2d:7a:68:85:a3:cf:3d:9d:50:33:d1:33:
                    0d:ab:a9:cc:55:88:fc:15:45:da:0a:83:8b:9d:37:
                    19:25:8d:cb:b0:81:59:65:cb:31:76:ad:50:d5:79:
                    a2:23:d7:1a:f0:32:99:19:8a:83:5b:db:72:a2:f1:
                    5d:63:2e:50:d2:fa:99:0f:83:fb:91:93:19:34:17:
                    5c:6f:20:22:ba:44:01:2a:f1:87:26:df:6b:32:68:
                    b7:91:c8:bc:a9:3c:fb:97:61:d5:21:23:26:43:b4:
                    13:bb:63:94:b3:62:3c:83:c3:dc:57:a6:3d:bb:e6:
                    6f:a8:59:54:9e:7c:d8:3f:e4:25:19:df:23:7b:ba:
                    e2:b4:62:5f:0d:14:66:0c:5a:c4:c9:53:a6:77:55:
                    05:49:3c:27:f8:18:60:a9:0f:9b:7b:63:05:31:48:
                    26:0b:49:61:63:d5:39:65:c2:3b:d0:85:76:9e:8c:
                    fd:ed:f2:6b:7e:95:6f:d5:66:86:d1:c7:f0:66:7b:
                    bb:90:ba:a3:14:de:5d:b9:95:1f:e9:f3:2e:27:6b:
                    96:a4:46:2e:57:1c:77:dc:9b:8f:84:d1:22:0e:04:
                    47:ce:2a:f6:d1:9e:98:90:94:46:90:f9:b0:87:15:
                    b5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:60:9E:41:C8:D9:55:2C:08:2E:50:96:1A:C1:31:5D:2E:68:95:A3
            X509v3 Authority Key Identifier:
                keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b0:dc:5e:e9:27:36:4b:08:4f:f4:c6:31:72:a1:b3:f2:ef:
         dc:be:bf:ea:97:fc:46:4d:c3:7c:f6:e7:85:32:8f:5b:0c:2b:
         41:f9:6b:69:39:3d:2b:3f:9d:d7:5e:76:85:e5:b8:36:7c:dc:
         23:f5:a2:7c:2b:af:e8:aa:46:70:6e:e9:6a:6f:d8:42:8e:8a:
         94:51:3b:ef:df:16:1f:45:01:80:72:5d:8b:26:04:4b:4d:fe:
         e7:51:90:7a:6e:50:bf:fc:cc:d6:11:41:a3:14:3d:b0:e7:70:
         78:fd:78:1c:79:f3:08:72:23:f0:8c:f7:4d:f8:93:95:02:fb:
         b5:6e:f7:c7:b1:b3:7e:35:ef:f3:83:77:a0:e1:9d:16:93:7a:
         39:d4:df:d5:a9:b4:bf:d1:45:64:7a:c1:63:d6:09:5b:a7:38:
         63:38:5e:88:81:1c:2f:3e:0c:73:03:ad:19:1c:37:fe:8d:44:
         46:e8:36:de:da:6c:59:b8:29:d6:2a:03:dc:fd:eb:d4:f9:ed:
         3e:32:ef:31:c1:fc:a2:f9:e3:aa:3e:4f:45:2c:ac:78:57:1f:
         58:b3:b4:a4:99:0d:32:c2:94:c6:6c:62:7f:a4:42:c0:e8:a8:
         e7:ff:33:1e:fb:3e:67:40:4d:d2:e7:aa:ab:66:2b:37:f6:51:
         9e:20:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org