Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
File:                     k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json)
Hash identifier:          /vlrGlxmKO7Crxzqpk8JZ8bThQKHdAx84yki6tyKakU=
Subject key identifier:   CF:61:A0:6A:C1:B6:E2:84:FD:99:9D:86:D5:68:BE:1F:4C:D8:B2:4A
Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Certificate issuer:       /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
Manifest number:          87
Signing time:             Sat 23 Nov 2024 04:38:20 +0000
Manifest this update:     Sat 23 Nov 2024 04:38:19 +0000
Manifest next update:     Sat 30 Nov 2024 04:38:19 +0000
Files and hashes:         1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: onREdNR+WdHrA8rtzoKNqlD56ZsZFo37n+EAxbSLlXQ=)
                          2: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: UKwsFEyPykSAjx1cUaIvhwF+WNkQjRemB2kUzANIKwE=)
                          3: E0C47044E18D11EE82E6CE22C4F9AE02.roa (hash: oHYJEFfD1Lon7ikYLeo6m1Hr1wIXkseOcXKkDnJ3sdE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
                          rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
        Validity
            Not Before: Nov 23 04:38:19 2024 GMT
            Not After : Nov 30 04:38:19 2024 GMT
        Subject: CN=67415c3b-0cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:72:31:67:1b:4c:c1:8e:88:6a:86:90:cb:
                    a1:d1:3a:60:54:74:ce:a5:e9:3a:06:52:f7:e1:54:
                    da:57:6f:f8:3f:d5:60:c4:ec:ba:10:9d:da:4a:4d:
                    22:df:d8:b0:92:e1:fc:05:32:ff:6a:40:c8:2a:c7:
                    36:72:eb:4f:81:22:55:dc:90:97:96:94:6f:26:99:
                    b4:0e:15:07:70:6d:b6:68:fe:ec:b6:da:80:3e:91:
                    12:f3:02:fc:6a:75:35:3c:34:ce:a0:69:fa:45:51:
                    f2:7b:8f:de:ae:9b:ee:f1:c5:b6:38:b4:c9:51:49:
                    ec:1c:e8:e5:5d:bf:63:f9:30:e5:95:ef:35:c0:d3:
                    58:22:45:0f:eb:fb:22:d6:6f:6f:a3:9f:f0:9e:12:
                    74:df:66:5e:4b:63:ec:f3:74:49:18:89:43:7c:cf:
                    5c:4e:17:bb:2f:13:84:27:19:41:a5:ba:e9:8b:6d:
                    df:ac:78:49:4e:bf:3d:32:77:b6:ea:0d:59:4c:b9:
                    42:30:be:52:7c:f8:19:82:e3:45:0b:be:e5:3e:28:
                    5a:d0:57:fd:e2:1c:f1:a2:72:0f:01:04:40:5b:0f:
                    7a:72:25:80:7c:69:df:50:e7:57:42:c2:83:91:c4:
                    5e:7c:85:7a:63:89:4d:22:04:e8:0d:1b:9e:c1:95:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:61:A0:6A:C1:B6:E2:84:FD:99:9D:86:D5:68:BE:1F:4C:D8:B2:4A
            X509v3 Authority Key Identifier:
                keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9e:f9:24:22:54:1d:09:d5:ff:b3:62:33:80:c0:64:bd:75:
         40:76:4b:40:45:99:6d:90:db:7a:de:61:2e:e8:10:04:85:ce:
         1f:7e:52:4f:96:46:f3:04:d5:3d:c2:df:7e:d7:fc:21:1a:d9:
         72:f8:fb:cd:49:f6:d9:6d:fa:f6:93:e6:a7:d5:45:71:33:81:
         12:6c:d4:04:c9:59:6b:9b:a4:b6:2f:19:ef:a6:44:b4:61:8a:
         d4:6c:18:e0:69:89:23:d9:8e:1a:5a:c8:14:f3:56:71:b9:82:
         9a:ac:b1:64:1a:ad:58:15:57:11:ae:3a:db:1d:3b:b4:2a:8b:
         21:24:95:02:29:34:12:77:52:8f:4e:73:13:49:ab:b3:0e:ca:
         dd:65:4a:99:32:77:a8:de:d6:48:50:c0:31:a4:64:f9:54:f3:
         f4:d4:8f:84:3f:53:1b:a7:ff:53:f0:9d:98:27:ae:79:8e:42:
         3b:2c:2b:d8:28:40:ce:c5:74:8a:aa:f5:d7:5a:7b:59:ab:4b:
         e9:c4:36:eb:48:38:85:16:a5:5e:e1:61:f6:0e:c4:0a:b6:65:
         84:cd:e1:29:dd:a5:84:e1:5d:05:e6:a0:64:65:02:f0:fb:04:
         ad:ca:0d:37:18:2e:ff:78:25:26:50:4a:b7:2e:ab:a3:7a:60:
         87:66:db:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org