Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft
File:                     P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json)
Hash identifier:          g7eETRu2qqmfPJRbughn3/jHzGiCCjDwhfQ1jBADMlE=
Subject key identifier:   96:64:ED:21:0F:67:C6:8C:F5:A8:9B:BA:C1:77:AE:6F:C9:87:30:12
Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A
Certificate issuer:       /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft
Manifest number:          6C
Signing time:             Sat 23 Nov 2024 04:55:12 +0000
Manifest this update:     Sat 23 Nov 2024 04:55:11 +0000
Manifest next update:     Sat 30 Nov 2024 04:55:11 +0000
Files and hashes:         1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: Fv8jGTbsUKVA5Jbq3HKfLM9jfAuqWtatEmxaboyZofw=)
                          2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: iuWtuyJfTt35leUhlOLk+Ja/aEErWGzoAPeuFPCgOUo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl
                          rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A
        Validity
            Not Before: Nov 23 04:55:11 2024 GMT
            Not After : Nov 30 04:55:11 2024 GMT
        Subject: CN=67416030-888a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1d:fa:1b:ff:ef:33:72:e8:03:a4:62:e1:23:
                    af:96:ff:d9:b0:35:f5:77:69:51:4e:ca:bd:c4:b8:
                    ac:e8:76:50:68:0a:ed:3c:d2:84:da:6c:67:d4:5e:
                    fb:99:1b:6c:54:c1:3a:e3:88:03:ea:a7:f0:a3:37:
                    9d:61:8e:ed:34:2f:a5:a2:df:c2:5f:36:34:b3:95:
                    5c:ff:46:df:9b:cc:d9:bd:c7:1d:22:a2:99:b5:0e:
                    81:c2:4e:16:a7:27:6f:b8:77:66:dd:01:97:a4:c0:
                    1a:74:a2:1c:c0:fa:01:fc:b0:b1:89:8d:e9:ae:8f:
                    b8:f0:6a:1c:81:72:2a:db:b2:78:f0:18:58:5a:01:
                    82:02:41:13:c6:f2:4a:bc:1d:ea:c2:4f:ed:65:33:
                    17:1b:d4:5b:c3:4a:91:b4:f3:6d:b1:97:9e:60:8e:
                    d3:79:b3:17:27:dc:e5:d2:be:9c:95:b5:e6:70:de:
                    ba:23:82:12:31:83:33:f3:93:fd:8e:a6:a7:91:93:
                    44:c3:d5:ee:52:50:84:52:57:2d:4a:33:5c:b9:36:
                    31:10:8d:d0:76:26:13:1e:b9:56:18:5b:0b:e1:71:
                    18:b8:1f:1d:40:2e:aa:1a:c4:f5:1b:e4:61:7e:84:
                    e4:16:ee:20:53:f2:34:4c:01:04:aa:7c:f3:96:75:
                    79:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:64:ED:21:0F:67:C6:8C:F5:A8:9B:BA:C1:77:AE:6F:C9:87:30:12
            X509v3 Authority Key Identifier:
                keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:59:26:b3:12:d5:6f:e9:61:9b:19:fc:93:f2:0d:25:21:
         a8:52:42:7d:79:79:d0:6d:c2:5e:8d:62:1d:b3:f4:f6:e4:86:
         d7:37:ce:ac:aa:e5:a6:c9:81:bb:ee:93:79:21:98:a5:32:58:
         ff:c5:35:a7:42:96:42:39:cc:5e:44:3d:fa:8a:c9:13:52:81:
         d8:e5:0c:a6:de:8f:5d:ac:ea:c0:8e:80:6a:f2:88:62:c8:16:
         fd:34:60:74:1d:9f:f0:68:2b:b5:44:9d:72:62:10:68:ed:df:
         94:83:77:0e:a8:ba:dd:06:e7:e8:6b:7f:98:bf:17:af:75:48:
         82:e5:94:82:45:6d:98:70:32:ec:2a:37:33:ca:c1:fc:8f:89:
         30:39:f3:bc:03:88:53:fc:4e:c0:e4:4e:90:09:6e:38:e9:67:
         ec:ef:fa:6b:a8:c5:a6:0d:25:60:28:9d:fd:a6:15:cc:aa:26:
         eb:79:01:e1:c9:24:a8:79:1b:21:60:f0:b8:0d:7f:9c:65:c0:
         38:52:65:62:a5:90:ec:4e:9f:52:ac:bc:1e:7f:e0:f7:b5:7d:
         5d:b3:3d:ea:61:04:2f:e7:75:4d:38:71:7e:88:0b:fd:6b:d9:
         2d:5f:39:5d:c8:94:95:5c:a1:f8:45:e4:97:c9:7e:d1:a3:27:
         82:8a:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:22 2024 by rpki-client on console-ams.rpki-client.org