Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
File:                     HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json)
Hash identifier:          kCZkY7s9j7UWNEn1MLPgAHGAd+mBlWgbopB+0L8YXCs=
Subject key identifier:   2F:87:5A:52:3C:44:5A:85:A7:B2:5C:D2:5B:FF:75:15:BF:D5:A0:34
Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37
Certificate issuer:       /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
Certificate serial:       34BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
Manifest number:          3476
Signing time:             Wed 20 Nov 2024 14:16:02 +0000
Manifest this update:     Wed 20 Nov 2024 14:16:02 +0000
Manifest next update:     Wed 27 Nov 2024 14:16:02 +0000
Files and hashes:         1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: hkDLhOP6R4fWL3Qtd5JCIJnPecrCcoqMqRQmFVZPVzw=)
                          2: D3DAACB2507E11EF91EDBA52C4F9AE02.roa (hash: Whq1SIyvQYa1mALpVqGVZuuCi11KV+H9HrjJKdS2dN8=)
                          3: 3D6EDF86EDA711ED91155885C4F9AE02.roa (hash: mXb8AscVsTwHQGsL7M6XAxSIWwOh5epna0XlBQIQUOY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13498 (0x34ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
        Validity
            Not Before: Nov 20 14:16:02 2024 GMT
            Not After : Nov 27 14:16:02 2024 GMT
        Subject: CN=673def22-6abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9e:ff:08:c0:44:58:c3:c4:00:e9:05:02:e6:
                    61:c7:f9:43:6e:6b:ae:70:ac:cc:a2:10:65:35:d8:
                    f8:a0:b8:68:5d:97:9b:77:ae:c2:38:8e:bf:ad:ca:
                    9f:99:03:ee:b8:3a:e4:8a:d7:b4:32:5e:04:ac:fa:
                    22:14:98:0a:a6:34:7e:3c:01:20:3f:50:49:ee:3f:
                    ce:dc:b9:3d:2e:65:0c:2f:4e:80:63:88:8c:51:87:
                    53:1c:cc:9e:ad:fa:15:43:7b:d5:8f:cb:53:f0:38:
                    cd:e0:1a:aa:03:33:da:68:37:6b:d2:f3:93:ad:86:
                    8d:1d:02:2f:58:32:bf:52:34:48:9d:2a:68:ba:e2:
                    05:d1:a1:1b:99:63:ff:0b:b3:c7:d6:68:fc:6f:a3:
                    9e:c5:02:f0:a6:6c:16:c3:12:18:2d:08:04:44:96:
                    6f:90:91:ca:2e:97:1a:a9:c8:3b:56:31:ce:d0:2d:
                    15:5d:1c:b4:4e:38:5d:74:a1:c1:47:41:90:0d:15:
                    a3:36:7d:36:9e:74:c5:08:b9:f9:c0:68:fd:6b:dd:
                    56:b0:72:18:26:da:c2:b5:5e:ff:c9:c5:d5:12:06:
                    06:22:42:92:5d:30:3d:04:e9:52:67:c4:b2:15:4b:
                    70:b8:bf:e4:cf:6e:06:74:ff:93:e0:ed:2a:8d:b7:
                    de:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:87:5A:52:3C:44:5A:85:A7:B2:5C:D2:5B:FF:75:15:BF:D5:A0:34
            X509v3 Authority Key Identifier:
                keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ef:da:30:a1:56:3e:a1:78:b7:36:47:0f:91:3f:a3:ef:82:
         7e:f7:e0:4e:db:44:3f:9f:03:b2:aa:9d:78:fc:97:50:9f:d4:
         7b:8b:b7:16:a5:7a:d8:f4:52:55:1d:d2:71:45:d2:28:8e:ee:
         43:24:0d:ed:e4:d3:47:68:3b:75:e1:7e:aa:0b:8d:99:5b:25:
         3a:4f:76:9e:39:7b:e3:58:97:8e:a6:8f:1b:dd:7d:43:cf:73:
         94:d3:e6:78:fc:83:d9:2e:b1:86:ed:96:cd:6a:3f:d5:ba:16:
         d1:1e:e3:46:19:06:8b:48:51:27:d1:b8:bf:08:18:8c:d0:4d:
         92:17:35:92:bd:ac:c6:2c:8f:f0:50:5c:39:42:4a:f6:25:4e:
         2a:cb:c2:aa:8c:c8:1f:e4:13:16:09:4d:a7:ac:77:dc:cd:5c:
         b0:17:70:e1:25:11:fb:be:04:c2:b6:b4:69:2c:6d:ea:a7:53:
         68:67:2e:dd:88:fd:41:f5:8e:f5:65:93:94:b0:73:b6:81:b3:
         60:d4:b9:5f:38:7f:e6:a7:95:08:21:e3:5e:1b:c0:b8:5b:a6:
         26:6d:b2:0c:52:97:81:0e:e3:c2:22:05:62:44:05:45:c6:32:
         bd:4d:8a:38:46:f3:5f:b1:31:d6:71:3a:81:50:d5:c7:16:95:
         ef:98:a7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:12:03 2024 by rpki-client on console-fra.rpki-client.org