Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File:                     tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier:          JvHdgZNfKt9jGU00UhxXzn5IPHUFPfr2eS62DgK3quQ=
Subject key identifier:   4B:C0:D8:E1:90:D4:D8:EF:F7:58:C2:40:BA:EB:BA:38:66:50:BC:C7
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer:       /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial:       061D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number:          060E
Signing time:             Fri 22 Nov 2024 22:14:21 +0000
Manifest this update:     Fri 22 Nov 2024 22:14:20 +0000
Manifest next update:     Fri 29 Nov 2024 22:14:20 +0000
Files and hashes:         1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: tokC7s7gdicMaiMr14BndRxO8iFTq8yAlj91iJuLRsc=)
                          2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: wvKmIi2++zbJbE9MCN6birY4f8q7zR7YkJ8AOwoHL0c=)
                          3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: enNVOzFUB83x7iJjfLJWQJYDSM1EIlchFYs8Y1Lu3uk=)
                          4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: GKP5taJaLT0/BVslpBvisPkis2pdFhShqf+TdK4IIA0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
        Validity
            Not Before: Nov 22 22:14:20 2024 GMT
            Not After : Nov 29 22:14:20 2024 GMT
        Subject: CN=6741023c-6378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:6a:b8:bb:22:ff:5c:6a:21:3a:e0:5f:c9:
                    25:c7:ae:cd:ba:91:84:36:92:c1:b5:6c:b4:74:58:
                    8a:0d:42:bc:1e:76:3e:7d:69:a9:e6:3a:5f:c2:0b:
                    1f:f4:3b:84:26:b7:b7:6c:0d:1d:64:ce:8d:d1:a9:
                    1c:84:9e:a7:9f:b7:e6:f8:85:82:b4:e4:16:a2:9e:
                    c1:1f:f2:a7:fd:a9:1a:b8:72:42:a1:a8:4e:2b:64:
                    35:b5:e9:f9:41:90:c1:9d:5d:b4:3f:18:0c:a1:a5:
                    ed:d3:b4:10:66:ad:53:6d:b5:c3:2d:4c:7f:f4:08:
                    8b:4f:64:c9:c3:d8:3f:ef:06:58:2b:62:22:d1:0b:
                    f1:64:a5:b2:87:0f:16:8b:6c:f9:d2:66:cc:62:0f:
                    a4:fe:33:ad:23:78:ce:34:03:68:66:54:47:9f:a1:
                    2f:8b:b9:6c:8d:e9:9b:15:ac:dd:81:fc:07:dc:71:
                    cd:73:30:7f:74:34:07:36:1c:91:d6:c2:2f:b0:b5:
                    0e:6f:31:e1:f6:c6:80:80:34:64:bc:b3:4f:31:a9:
                    85:fb:ae:95:9b:81:3d:3b:81:f1:c0:1f:22:5c:55:
                    71:ad:b5:a2:5d:e6:8c:2f:21:a3:b0:4d:c4:26:d9:
                    2b:c1:0c:d1:9d:7c:b6:30:a3:5a:09:e3:9f:f3:b4:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C0:D8:E1:90:D4:D8:EF:F7:58:C2:40:BA:EB:BA:38:66:50:BC:C7
            X509v3 Authority Key Identifier:
                keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:1f:79:7e:ba:6f:67:c2:b9:d6:82:44:0a:54:69:c0:d7:7a:
         36:46:87:33:68:e3:58:47:21:4e:ee:83:b0:c4:78:b5:fe:c9:
         ee:c0:e2:0f:ca:06:e3:42:86:54:b7:be:a9:5b:71:2d:60:5f:
         2c:fd:f2:ff:d0:c3:8b:65:85:e5:c3:dd:c2:ce:01:6d:8f:2a:
         da:06:66:0a:ca:61:18:b6:d9:53:d3:17:bb:55:01:0e:7d:5a:
         cf:f9:27:2d:ed:96:01:41:7c:8d:bf:2f:67:e4:cb:12:8f:c9:
         ca:60:2c:46:3e:9b:85:df:97:eb:e8:76:e0:8f:6b:f4:3d:77:
         08:19:69:f2:6c:dc:a8:13:e6:56:d2:9e:ba:28:9e:89:70:70:
         24:b3:0d:4b:9a:b5:86:5d:a8:6d:cb:22:cc:af:58:ec:93:97:
         4f:e3:1f:c5:54:42:77:1b:5b:c3:28:67:16:2f:06:f5:07:dd:
         d6:51:e7:be:ae:0f:06:41:f5:b2:f1:0c:c6:0d:b9:d4:52:b1:
         83:cf:51:f9:47:3f:77:fe:5e:e5:83:3c:42:c3:56:86:25:e8:
         25:57:79:e0:db:0a:cf:ad:42:9c:50:de:b2:7a:4c:1a:bc:8a:
         d4:22:0d:d7:12:25:b3:7f:0b:46:4a:73:c5:0d:b0:fb:b5:e4:
         5c:03:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org