Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
File:                     SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json)
Hash identifier:          2jgx0edVEesOwFkU+hu5uzBvnF1mHWZZ8O1KpPkMvl4=
Subject key identifier:   C0:76:84:7A:D9:4E:BD:8A:0C:90:A0:C3:BA:C0:2B:0E:EE:27:02:2B
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Certificate issuer:       /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial:       3427
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
Manifest number:          3424
Signing time:             Fri 22 Nov 2024 15:18:47 +0000
Manifest this update:     Fri 22 Nov 2024 15:18:46 +0000
Manifest next update:     Fri 29 Nov 2024 15:18:46 +0000
Files and hashes:         1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: EYI2E15Y4J5Mjht7A+8ug82tSu9wcR8RhnVT6mPw0/M=)
                          2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: G4KsLmxeAP7/JJm6vWHK6Z6vUjbZ/olzKXC4RCzIV1I=)
                          3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: EFoko6/Oo4yS+iQPWL7a8g+RGjqC0rfuz0mNQ78aoW0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
                          rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13351 (0x3427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
        Validity
            Not Before: Nov 22 15:18:46 2024 GMT
            Not After : Nov 29 15:18:46 2024 GMT
        Subject: CN=6740a0d6-c9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:ff:8d:37:db:8b:9c:b3:20:ac:2e:75:8e:
                    bb:bd:65:6f:a8:83:07:e3:35:70:e4:5c:c7:d9:72:
                    9b:df:70:d6:73:00:77:fb:6b:8e:9b:2b:4b:20:f4:
                    36:08:7d:72:a3:e4:04:78:7e:cc:35:69:14:25:cb:
                    cf:be:e6:23:14:2d:0d:a8:07:e3:b5:71:57:c4:1a:
                    a6:65:a2:51:a3:eb:8b:78:df:55:90:23:6f:6a:f9:
                    6a:3d:91:91:e7:04:e5:5c:82:6f:7f:20:0f:d2:05:
                    9d:6e:c0:fa:7e:b5:9b:d7:32:af:b5:a2:e8:63:2d:
                    eb:f6:12:c4:0f:b5:34:cb:ff:8b:96:ef:b4:25:5f:
                    73:69:29:5a:5a:ea:c3:13:b7:bf:29:4f:d0:25:e8:
                    52:b5:9a:01:cc:94:65:89:c0:71:21:91:4f:e4:27:
                    a1:84:37:b0:62:14:01:50:8e:0f:06:3e:8c:dd:0b:
                    4f:6a:4f:b3:24:e6:ed:a9:e5:6c:ef:eb:a3:8b:97:
                    ff:a1:84:55:90:b1:d1:48:bf:bb:bd:f4:b9:f7:9b:
                    40:12:72:dd:a7:5f:4b:8f:49:f6:33:c4:b1:6d:60:
                    28:31:a8:27:97:1b:7f:cb:ab:38:bd:c4:ad:5a:89:
                    22:6b:c9:ef:eb:1f:3b:a3:56:af:f3:df:23:3d:5b:
                    96:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:76:84:7A:D9:4E:BD:8A:0C:90:A0:C3:BA:C0:2B:0E:EE:27:02:2B
            X509v3 Authority Key Identifier:
                keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:a7:60:bb:54:35:ac:e5:cc:da:17:b8:48:aa:0b:8e:56:a0:
         1e:33:fd:79:73:65:0e:0a:c4:19:90:17:97:bb:57:51:f3:3d:
         9d:ef:97:b7:0b:7c:59:f2:f4:85:d3:73:91:77:3a:82:b6:bb:
         64:61:e8:cc:2a:63:54:1b:eb:db:25:85:60:af:e2:34:52:6a:
         d5:8e:1f:50:a1:67:ef:4d:a8:19:0f:0b:66:1c:05:e6:7c:4e:
         b0:a3:de:1c:e8:13:ab:30:bc:f5:c5:5b:b3:8c:fe:ef:2c:96:
         3b:c0:9a:44:b7:7a:c6:05:c8:7c:a0:b4:a7:a7:61:e7:a5:d0:
         9a:00:f7:44:a6:8a:2b:e7:42:3c:e3:c4:e2:e1:7a:d3:0c:59:
         42:30:cf:81:1a:ce:b3:a4:2f:00:5d:df:17:b6:ad:df:1b:e9:
         89:a9:68:d1:c6:6e:5d:d2:0b:ae:3f:0b:4e:e8:df:27:cd:6f:
         97:ec:2d:98:2b:a5:f7:66:9e:7f:98:13:49:b2:0f:d5:2b:99:
         0f:71:b1:ff:0d:6c:1a:c2:46:ab:9b:39:7e:ee:f7:41:c5:cc:
         71:73:d5:a5:3f:68:85:c3:5d:c0:49:b3:20:b8:85:37:b6:06:
         46:42:25:fa:c1:ef:8d:ce:3e:82:0e:02:2c:3e:34:a7:61:56:
         fe:4a:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org