Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
File:                     McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json)
Hash identifier:          ie4l2BxewZK6wOj0bXCG5+Q64oaVlw8KfLAS0JJ3La0=
Subject key identifier:   6E:6C:06:F3:24:51:C3:DD:82:A9:22:AB:F0:35:D9:A3:EE:32:6E:60
Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6
Certificate issuer:       /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
Manifest number:          D7
Signing time:             Thu 21 Nov 2024 03:46:08 +0000
Manifest this update:     Thu 21 Nov 2024 03:46:07 +0000
Manifest next update:     Thu 28 Nov 2024 03:46:07 +0000
Files and hashes:         1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: Udu1OlzjysxGBzc0ejrx9AQipEj/svM6bJJSQhLp4yE=)
                          2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: V8Zp+nAsYIlE3XVLWHEpLyn3xdZCD/9TBOLVEQMgunU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
        Validity
            Not Before: Nov 21 03:46:07 2024 GMT
            Not After : Nov 28 03:46:07 2024 GMT
        Subject: CN=673ead00-42e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:3c:7a:77:ca:28:32:91:4e:f3:11:5f:6e:
                    a2:65:a6:f9:6d:e0:b8:ea:7f:eb:2f:9f:94:9b:c2:
                    6d:f6:b2:8b:1c:90:fc:03:b8:5a:d3:39:49:cf:d6:
                    6d:33:28:cd:95:ca:60:a7:2c:12:51:be:de:7a:df:
                    52:74:ae:3a:9e:61:d0:2e:d3:9c:d1:79:88:ae:33:
                    a2:4f:fa:cd:40:1f:39:82:51:a4:fe:9c:c2:03:b3:
                    60:63:51:44:d4:35:af:2e:8b:a6:9e:43:bb:23:35:
                    7a:86:cb:10:f6:d0:f0:28:48:15:2d:7b:c4:f3:14:
                    cc:9f:96:bd:51:36:99:90:1c:4c:ad:e5:c6:3c:7f:
                    c6:12:6f:80:6f:a5:0a:9b:2f:af:a8:e4:2f:f9:6c:
                    2d:02:db:7c:be:62:8b:30:57:1f:ed:98:85:a5:83:
                    75:e9:1e:fc:10:8d:48:3c:b0:fb:c9:53:5d:6f:6b:
                    2f:31:4e:dc:65:37:eb:46:8d:42:9f:43:4d:9a:42:
                    51:2c:97:39:4d:e5:aa:80:e0:40:f1:e8:ea:16:cd:
                    6d:be:7f:60:cf:67:de:25:c9:34:19:05:70:4c:37:
                    61:8f:2d:a4:86:07:df:63:b1:b4:c1:97:93:ae:2f:
                    94:4c:7b:a0:49:d6:39:b6:70:2d:e2:f4:8e:a6:2a:
                    4f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6C:06:F3:24:51:C3:DD:82:A9:22:AB:F0:35:D9:A3:EE:32:6E:60
            X509v3 Authority Key Identifier:
                keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:07:04:2c:9b:e7:81:ee:8d:b8:68:b1:8b:7c:40:2a:47:17:
         49:48:b8:77:f0:d1:ef:bc:86:db:4a:7a:3e:92:3a:29:be:c1:
         fd:33:e4:46:70:53:4d:7b:03:a6:cc:b3:26:58:6e:3d:e8:34:
         37:de:db:bb:66:86:33:6e:53:92:32:69:34:74:94:0a:23:8f:
         49:bb:b4:ea:13:19:12:96:8f:b6:2a:e8:9f:ca:a8:7a:e8:95:
         37:7a:cd:2d:75:89:03:b1:ef:8b:10:c5:ec:04:c1:01:33:cd:
         0c:30:32:cd:34:5f:ec:67:1b:3d:36:b6:89:cb:97:11:10:42:
         92:1e:f5:db:39:c3:46:ac:4c:52:a2:94:bb:85:6c:35:0a:07:
         99:07:8f:49:71:08:06:2e:ee:1b:04:c2:6d:0f:f6:86:f3:d6:
         51:ad:7c:2e:c3:54:3c:69:16:d9:88:e3:d8:ee:00:b8:7c:80:
         c1:14:6c:26:df:9b:1e:00:56:b1:ca:c1:07:25:f9:67:26:38:
         dd:f7:55:d1:0e:b4:82:2f:fb:8c:6b:06:95:8a:55:ca:04:2a:
         c7:71:c9:95:f5:bf:aa:ce:82:7a:06:80:ac:ad:c6:80:20:2d:
         b5:aa:73:80:34:aa:c3:60:8c:06:38:7d:15:7d:43:2d:a6:78:
         24:6b:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:04 2024 by rpki-client on console-fra.rpki-client.org