Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
File:                     dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json)
Hash identifier:          sW5nLWCBVSgLLzTIca0S5xOH52ipu12WyoVy9y8h1hQ=
Subject key identifier:   33:EB:0E:B0:96:0F:96:96:D8:C5:08:11:D9:6E:87:89:22:77:5C:92
Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86
Certificate issuer:       /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
Certificate serial:       07F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
Manifest number:          07EF
Signing time:             Fri 22 Nov 2024 20:38:47 +0000
Manifest this update:     Fri 22 Nov 2024 20:38:46 +0000
Manifest next update:     Fri 29 Nov 2024 20:38:46 +0000
Files and hashes:         1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: FP5VXBeCtWf6vgyfVWUcRCmydU5MSA65dGJN3oIq80w=)
                          2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: JMbP2bjYVSs5KHacifQiOMQEGqNSmjGLrxcOwrXZ3Uc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl
                          rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2039 (0x7f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
        Validity
            Not Before: Nov 22 20:38:46 2024 GMT
            Not After : Nov 29 20:38:46 2024 GMT
        Subject: CN=6740ebd7-b83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:af:17:94:07:a6:9c:4f:6c:0a:b7:e5:d7:
                    1c:80:9f:78:5b:e1:8c:cc:b7:de:09:e8:8e:ed:7a:
                    69:89:c8:63:f5:9f:3c:b0:15:51:e5:41:de:1b:86:
                    0f:ab:35:d1:86:78:8d:9d:8f:d2:91:f9:55:86:5f:
                    1d:fd:78:d4:46:b6:57:b0:4b:c7:93:0f:cf:d9:e7:
                    82:04:3e:77:c2:78:16:81:f7:bb:d6:f1:ea:db:6f:
                    69:95:2e:f2:0c:47:83:00:1d:11:d2:24:b5:42:e9:
                    96:bb:f4:e8:da:88:ad:d6:68:e3:e3:fb:f8:42:50:
                    92:e5:2a:8a:78:00:64:31:54:d0:b2:f0:be:4c:3e:
                    64:a5:67:09:13:f5:31:14:ec:37:b7:25:b5:27:37:
                    8b:91:b1:d0:75:d4:af:b0:99:e4:45:0e:27:7a:10:
                    ca:96:bf:a7:9c:79:83:42:6f:93:05:53:bd:77:99:
                    a7:80:82:c0:ac:23:eb:d1:0f:b8:13:f7:88:b2:de:
                    c7:7c:e6:63:fb:68:a4:c8:3a:65:71:37:23:07:e2:
                    72:3a:e2:85:89:50:71:83:95:93:89:d0:7e:63:4e:
                    af:ec:1a:78:f0:c4:61:9d:c0:9b:f2:84:97:16:96:
                    09:3c:39:50:21:a4:c6:00:22:5d:bb:1b:cc:41:ea:
                    67:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EB:0E:B0:96:0F:96:96:D8:C5:08:11:D9:6E:87:89:22:77:5C:92
            X509v3 Authority Key Identifier:
                keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:97:90:b8:59:ef:69:ea:31:0b:86:b0:d5:cc:ef:96:55:da:
         24:53:98:e9:0b:7a:95:0e:b3:f9:6b:2a:30:d0:96:60:86:2b:
         29:a9:8d:27:3d:93:a2:be:a7:e2:d6:3d:ed:16:9a:a7:de:e1:
         b1:55:ec:1f:e8:2f:bf:62:94:bc:dd:da:82:eb:0f:36:a9:35:
         aa:89:2d:cb:6f:c0:4e:a2:d4:86:f9:15:2e:95:8d:f7:2b:c6:
         92:d9:ac:f9:23:b2:f5:d2:31:7b:39:c1:4f:a5:e3:7c:8c:42:
         d2:72:42:84:73:48:81:61:c4:b8:26:63:73:98:c5:3c:63:ee:
         09:96:c1:aa:53:e8:9f:9d:11:a3:45:89:59:8c:c2:42:c6:4c:
         80:6c:31:ea:f4:15:7a:dc:7a:6f:d1:84:10:49:51:91:23:65:
         93:e1:69:bc:e8:3f:0e:12:93:77:24:61:03:58:de:d2:ac:88:
         f5:2c:ce:15:38:4a:f1:1c:b9:df:87:7c:bd:23:27:d4:e1:7a:
         ae:b8:82:69:86:f1:64:7e:15:27:15:8b:24:68:c8:69:62:02:
         40:76:89:f8:72:09:00:9e:3e:ce:28:9d:7d:04:0e:05:d0:51:
         c2:c1:dc:14:6b:1b:83:5f:da:4e:4e:ea:9a:8c:9b:1e:53:23:
         eb:67:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org