Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
File:                     PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json)
Hash identifier:          MAJkF980oc9UsDVezYHqAfm2QgKslU1kr1BAjIZcDfI=
Subject key identifier:   00:3C:42:99:88:00:CA:0B:38:68:52:CF:0F:7B:CF:AC:C5:B1:12:89
Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
Certificate issuer:       /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Certificate serial:       064F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
Manifest number:          0649
Signing time:             Fri 22 Nov 2024 22:02:01 +0000
Manifest this update:     Fri 22 Nov 2024 22:02:00 +0000
Manifest next update:     Fri 29 Nov 2024 22:02:00 +0000
Files and hashes:         1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: vezjUsukWjnZXmsqFDCBxLSIh+PGS1om2dV55ghn8VI=)
                          2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: QCHui8d37ydNx5pkaHoJoeho1nXwmP/z+o5jMR8k9Tw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
                          rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615 (0x64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
        Validity
            Not Before: Nov 22 22:02:00 2024 GMT
            Not After : Nov 29 22:02:00 2024 GMT
        Subject: CN=6740ff59-61e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:8b:de:7c:4b:86:cd:4f:6b:ca:31:30:23:
                    ae:f1:5e:0c:7b:67:e6:8c:78:6d:c8:53:ba:23:b4:
                    50:9e:b5:5b:37:6f:2f:df:f5:f8:d6:43:64:f8:0b:
                    19:be:c3:4c:79:ac:00:d8:99:9a:ac:3a:f0:7d:1b:
                    00:a5:9b:60:3e:ae:66:7b:ea:3a:a9:34:40:a3:64:
                    b4:a3:fb:9d:ca:c3:a4:d4:e3:7f:ae:62:51:1d:90:
                    e3:4a:92:6a:18:96:65:29:87:b8:68:00:d3:a6:42:
                    46:69:cd:b0:76:66:4e:d9:57:19:7b:0e:11:80:42:
                    52:ba:47:51:65:11:17:89:65:d7:a6:12:a0:53:74:
                    21:1e:22:7e:6f:f6:c2:62:4d:50:83:81:e4:09:87:
                    4b:06:2c:54:2d:39:49:91:54:d5:48:84:7c:5a:7a:
                    49:15:6d:cd:37:c5:50:52:c0:d8:92:ca:37:cc:8d:
                    fe:a0:f5:07:00:2d:2f:7a:48:e7:04:68:23:d8:03:
                    c7:73:0a:6f:4f:85:a3:75:2a:06:1d:b2:1a:e4:be:
                    ac:4b:42:71:ea:00:dc:0b:d0:2e:05:09:76:a6:4e:
                    ac:67:51:c8:b2:cc:ea:23:49:b7:0b:96:ee:05:de:
                    b4:1a:fa:14:eb:c8:9c:07:e3:27:0f:56:cd:88:1f:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3C:42:99:88:00:CA:0B:38:68:52:CF:0F:7B:CF:AC:C5:B1:12:89
            X509v3 Authority Key Identifier:
                keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:fa:5b:a6:e6:2f:4d:11:13:17:9c:ce:96:c7:67:7b:63:
         49:67:fb:12:10:81:c1:0a:6f:07:be:fc:67:39:1f:d1:ff:5d:
         c3:43:6f:36:ce:59:d8:3b:13:89:1c:d0:bb:b3:bd:9b:1d:b6:
         ea:24:5d:83:ab:5b:e6:4f:74:c0:88:d0:ba:81:49:1b:7d:8e:
         9b:4f:01:a9:32:57:de:87:a8:3a:d2:30:51:db:8c:27:7a:83:
         4f:bc:94:48:72:e3:01:8e:cf:fc:1b:97:bc:00:4a:97:ff:f6:
         9e:08:7e:10:2a:10:21:ef:54:6e:c3:42:53:36:5d:4d:f2:51:
         12:4f:f5:e5:27:5f:5c:f5:b9:17:97:94:7f:0d:19:56:57:de:
         19:5f:f3:26:03:e6:a7:31:22:4b:97:4f:3e:be:ce:2a:83:6c:
         d2:92:06:f5:a0:88:1c:eb:32:82:8d:01:fd:e0:72:9b:9e:3d:
         45:48:78:a5:4c:ba:c1:ce:45:5b:40:a8:10:ef:a6:35:ee:98:
         6e:be:7d:79:47:31:5f:e2:18:a2:22:f4:23:8c:f8:13:f0:b0:
         ed:95:46:cf:cd:8f:f5:69:78:fc:14:f9:42:7f:50:ca:fb:35:
         c7:53:dc:a1:97:bd:d4:77:df:b3:5a:50:8c:e6:af:f4:53:b8:
         79:c8:c8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org