Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
File:                     TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json)
Hash identifier:          8pQUl0pXG7OB78TG20xbsJ7icPMFrso+UBZ7ddWcmd0=
Subject key identifier:   3B:4D:AC:31:35:53:62:E0:65:DB:C8:1F:3C:A7:44:A5:93:85:2F:68
Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
Certificate issuer:       /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
Manifest number:          0111
Signing time:             Sat 23 Nov 2024 03:03:39 +0000
Manifest this update:     Sat 23 Nov 2024 03:03:39 +0000
Manifest next update:     Sat 30 Nov 2024 03:03:39 +0000
Files and hashes:         1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: k0Alioxen4wOexQCz7FYDzjGcsSmcrx9owqC8TZrpPA=)
                          2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: 4lTwXJNy8UAsVUNrxw2jbFpsl+WyFB6Z2ysqzLuaypw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
                          rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
        Validity
            Not Before: Nov 23 03:03:39 2024 GMT
            Not After : Nov 30 03:03:39 2024 GMT
        Subject: CN=6741460b-ac01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:55:78:74:ad:70:c5:d6:43:af:5c:49:0e:81:
                    79:92:ed:05:06:13:82:e7:a4:fe:3e:aa:3a:0c:ff:
                    3b:01:d9:cc:e2:27:e4:a0:0f:81:ff:50:c8:e8:4c:
                    88:e0:26:9b:2c:47:ae:4a:73:9f:1d:d4:62:d5:33:
                    94:f7:52:33:01:eb:0a:0b:cf:d6:bc:75:34:e7:44:
                    b2:77:27:f0:3a:55:7e:3d:44:8c:3e:6d:f8:08:23:
                    31:cf:4c:df:b1:b3:af:f6:ff:f8:c7:fc:4d:1f:58:
                    17:89:80:ee:ee:4e:52:4d:66:c3:cb:b8:24:57:b6:
                    dd:7c:0f:30:19:ab:43:f3:dc:a7:e8:ed:c0:07:6e:
                    61:81:98:9b:f5:77:c9:1a:75:e8:5f:ed:11:14:a0:
                    88:ab:a1:26:61:dc:bf:ff:6c:1d:bc:14:39:e3:b4:
                    7b:2c:92:67:fb:4b:c4:64:46:0b:ec:16:36:e0:25:
                    53:eb:49:ca:2f:5f:75:ab:4c:89:63:09:9f:23:60:
                    e6:da:e8:45:f8:e1:86:31:b5:df:ff:ca:ef:0a:01:
                    ff:42:23:8a:42:13:fc:ca:f0:ec:f2:a1:58:e1:92:
                    1d:51:72:1c:d2:61:4e:49:04:de:3d:d3:60:02:98:
                    ff:19:e1:33:24:ad:22:36:e7:32:4d:b5:7b:d7:64:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4D:AC:31:35:53:62:E0:65:DB:C8:1F:3C:A7:44:A5:93:85:2F:68
            X509v3 Authority Key Identifier:
                keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:70:80:62:e8:19:93:79:58:cb:23:cc:89:c3:fa:18:7d:7c:
         d6:41:8e:3f:89:9e:6f:b9:c4:67:67:d5:b3:03:01:72:a1:23:
         0d:18:b3:ca:32:78:09:3c:4f:34:d7:6c:ec:9c:4e:0c:1a:af:
         b7:82:b8:61:cd:0f:9a:e7:94:bd:9f:e0:34:6f:72:dd:95:93:
         5d:cd:59:09:ef:e1:d1:20:4e:d2:81:89:19:a7:99:cd:20:13:
         50:35:40:34:d9:bb:dd:b9:a5:6d:b4:48:c3:98:43:5f:62:16:
         d9:27:53:ed:ec:29:6c:6a:0e:ae:d1:bb:2c:39:7d:72:88:96:
         4b:b4:4b:8a:f0:18:de:f1:1e:8c:c2:e5:91:31:06:cb:3c:38:
         76:5b:1e:cc:11:ad:80:97:3c:1e:04:fb:b8:75:22:ad:09:71:
         f3:92:98:1e:7c:e8:74:97:b6:c4:06:f6:f4:2d:b7:fd:3f:9b:
         8e:c6:d8:09:a9:e8:84:4e:e5:b4:18:9b:e8:a2:7e:b1:64:a8:
         9a:b8:c7:b3:22:fe:8f:af:52:e0:04:8a:66:81:ba:b1:b2:eb:
         ab:1c:05:66:7b:e3:93:ea:16:b2:9b:4e:28:97:66:70:63:a7:
         03:00:fa:d7:3b:c8:c4:dc:d5:c2:ad:c0:43:b5:aa:e7:1b:81:
         1f:d3:6b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org