Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
File:                     FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json)
Hash identifier:          KIvl+4+YXg9vS7fxEXjKt1AgH8+SVOBOYU/9NEO75a8=
Subject key identifier:   1B:74:69:52:A8:16:C8:04:F5:35:D3:EE:17:EE:32:52:EB:DF:DA:6E
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Certificate issuer:       /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
Manifest number:          015D
Signing time:             Sat 23 Nov 2024 02:24:29 +0000
Manifest this update:     Sat 23 Nov 2024 02:24:28 +0000
Manifest next update:     Sat 30 Nov 2024 02:24:28 +0000
Files and hashes:         1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: uYiqj6lSdXsgJzZ+LNtpI4MudXHz+9DddOSxOZ4jBfo=)
                          2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: XNcFF969T4muviYB6d8eP/rEqpj8zfL+B4W5dgWu14E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
                          rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
        Validity
            Not Before: Nov 23 02:24:28 2024 GMT
            Not After : Nov 30 02:24:28 2024 GMT
        Subject: CN=67413cdc-73e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f2:93:da:14:5d:99:e9:58:37:5d:c4:d3:3e:
                    0b:e0:b6:dd:8d:a0:84:e8:90:78:ef:70:54:dc:17:
                    44:81:f8:67:a1:8c:32:44:d1:7b:97:7b:73:0c:0e:
                    c5:41:01:41:c6:f1:50:93:16:5a:e1:fb:e3:bb:32:
                    ee:3b:c6:25:e3:fe:e3:00:86:f8:bb:89:5a:8d:9d:
                    12:6a:ad:5d:dc:99:9d:53:06:e9:02:e7:b7:a9:1c:
                    6f:81:43:df:6d:76:5a:58:d8:d0:20:72:01:de:7b:
                    2c:6f:fe:d8:a5:f1:28:3d:09:1c:34:2b:bb:7b:64:
                    31:02:1d:7d:b4:9f:23:c0:c7:d9:b9:42:7a:39:b3:
                    8b:f1:36:95:67:f1:22:5d:e2:f3:43:46:1b:f8:71:
                    16:5b:17:70:af:75:00:de:de:a0:fc:94:08:d0:e2:
                    31:a0:90:88:fe:23:1a:bd:8b:88:c4:6c:28:f0:98:
                    e2:97:5e:fd:08:1b:07:7d:c2:53:12:11:83:e2:e3:
                    a1:5b:46:cb:cd:bc:1d:a6:90:af:c2:49:ba:ef:8f:
                    f6:a6:4c:91:b9:fe:40:5a:57:b1:8d:f5:9d:ca:49:
                    12:82:e3:e5:20:c5:14:56:37:fd:4b:08:98:85:04:
                    30:bb:ae:2c:b6:24:e2:5f:e2:3d:14:6c:92:da:47:
                    42:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:74:69:52:A8:16:C8:04:F5:35:D3:EE:17:EE:32:52:EB:DF:DA:6E
            X509v3 Authority Key Identifier:
                keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:71:52:06:1d:2b:8a:27:83:bb:4f:be:d3:c8:32:e6:fc:54:
         cf:37:5f:95:72:d9:94:49:79:95:41:ac:a5:79:0c:d6:56:43:
         79:e0:1f:d4:31:f2:59:ce:40:a7:3c:40:f9:c9:16:7c:1e:d2:
         b2:ac:f7:cf:86:e3:47:a5:d0:6d:60:ca:e8:7b:69:eb:66:69:
         b7:53:4a:6c:96:65:c0:68:4c:aa:83:5f:2d:1e:89:19:f4:74:
         d1:3e:0f:a3:82:cb:3d:7b:bc:65:7d:a0:fa:cd:4a:2e:8c:19:
         24:71:9b:a8:1f:fc:37:82:fc:d0:1d:14:48:4a:fa:d9:da:35:
         57:a1:3f:9d:19:13:d4:37:55:fe:9c:ee:9c:c8:98:9c:6d:82:
         8a:b4:91:95:cb:1c:74:88:80:e1:cf:08:20:95:25:43:d3:bc:
         92:a4:93:a9:23:08:6a:db:50:8c:4a:b6:a4:3c:f6:2f:3d:7b:
         08:0c:11:25:36:23:b8:02:3a:a0:84:92:a8:5e:d8:70:c0:6b:
         93:10:f3:b5:14:16:31:59:3c:ef:c6:35:3e:c2:22:67:8b:3d:
         63:da:d0:1e:f9:c0:68:a1:9c:87:7c:8d:b0:e4:de:8e:f7:32:
         70:2a:b3:8d:10:d7:27:64:f6:f6:a5:1f:c1:4b:2c:ef:ef:dc:
         c4:c4:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:57 2024 by rpki-client on console-fra.rpki-client.org