Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File:                     QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier:          ZBKUNCbaPghEpFOaDqZNGa7aDn6CFsaYQlqzBMs+1V4=
Subject key identifier:   EC:D4:EB:BE:57:EE:9F:8C:B7:01:4E:4E:FB:F0:18:59:C7:E4:21:16
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       04A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number:          0B96
Signing time:             Fri 22 Nov 2024 21:26:35 +0000
Manifest this update:     Fri 22 Nov 2024 21:26:34 +0000
Manifest next update:     Fri 29 Nov 2024 21:26:34 +0000
Files and hashes:         1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: UtitLemcGdKdPn9zahJYx/L5/GvYp+pI3KxtbMkeJug=)
                          2: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: 1xVLNQlNrVwrhPb266jUjImDeI1JBJLkEMDQeKUBnFI=)
                          3: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: c9XW6vjr9ZRxN55xmeXFihDxkfyhr1D0e4wxYGC5e+I=)
                          4: A291634816B711ECBD752D47C4F9AE02.roa (hash: Ctq7IqjnfC2JklzmQsi0+l8pKomLg5k/LbwaF/nwW84=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186 (0x4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Nov 22 21:26:34 2024 GMT
            Not After : Nov 29 21:26:34 2024 GMT
        Subject: CN=6740f70b-47cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e2:0d:8c:24:b6:4a:5b:2d:33:73:5d:01:37:
                    eb:0a:64:3e:92:46:eb:83:da:48:19:8f:0f:b9:17:
                    18:0b:7d:39:a0:12:33:55:d8:52:0a:07:31:3b:44:
                    ba:92:4c:0b:10:94:f4:ee:16:a3:c4:3a:f2:b1:9f:
                    c1:0a:a8:f0:8a:84:03:7e:5c:ec:7d:99:32:70:e9:
                    1d:ec:a7:4b:d7:2e:19:3c:4b:b1:87:af:a3:62:d3:
                    50:76:4e:b7:26:10:88:65:26:ca:77:38:48:1f:df:
                    d1:f0:42:d9:d6:8a:8d:03:11:00:60:a8:1d:8f:2a:
                    4b:81:f4:d6:46:da:48:ff:d0:d8:26:94:78:e5:12:
                    47:b6:ad:d1:83:24:ea:f6:47:32:82:75:01:3b:99:
                    32:7d:55:15:de:6c:58:a8:32:e8:1d:72:83:81:f1:
                    f3:ce:0e:d5:57:01:fd:af:84:ec:5a:03:6c:15:e5:
                    95:b8:53:c3:99:28:0d:2e:2b:b0:aa:7b:7d:1c:7a:
                    16:a3:c6:42:c9:86:c4:c7:dd:13:7e:e5:f3:42:ac:
                    6d:48:84:82:4a:a5:4c:bf:ff:a1:d1:78:ed:44:ae:
                    dc:d9:dc:40:10:be:60:4b:45:00:96:76:4b:d6:ef:
                    e7:c3:0e:b6:f1:95:c2:fe:0f:89:74:21:da:39:b1:
                    4e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D4:EB:BE:57:EE:9F:8C:B7:01:4E:4E:FB:F0:18:59:C7:E4:21:16
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:31:eb:f0:3f:c0:24:dd:4e:a3:4b:dd:cb:66:08:dc:64:0d:
         df:53:12:58:d2:b4:2e:7d:dd:17:de:89:12:71:b9:f4:62:70:
         c2:86:7e:1a:04:cb:55:e2:c2:b3:8f:aa:ea:75:90:ca:29:41:
         2f:14:48:71:05:72:9b:da:62:8a:14:ce:4c:a8:af:15:7f:2b:
         d7:2e:7d:01:c6:67:45:6f:b8:b6:eb:c3:3f:10:34:ef:6a:40:
         9f:f6:5e:bb:e2:fb:90:19:59:11:f8:9e:5f:7d:14:75:5e:57:
         2f:7e:7d:d3:eb:ad:25:29:3e:73:07:a1:9f:98:43:7d:54:82:
         78:8a:48:c9:6c:e5:a2:84:6a:06:25:da:97:a8:fd:28:4a:03:
         ab:d1:4c:e5:7a:f5:d1:0f:df:9f:cc:1c:b6:cf:61:15:83:53:
         b5:4b:0d:d1:29:a0:1b:a1:d1:18:ce:b9:25:fe:d8:91:cc:22:
         18:7a:aa:c9:24:bd:48:e4:22:75:f6:28:f1:6f:68:f2:7b:ee:
         ff:42:eb:bf:5b:db:e4:12:be:24:9e:19:47:ec:c0:26:2f:ad:
         8d:dc:d7:d6:11:52:27:c5:a1:55:51:37:f6:6d:8b:a8:47:0a:
         6c:02:ae:1d:78:82:4d:ac:c9:85:cd:fe:94:4e:61:f5:17:54:
         89:ed:08:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:51 2024 by rpki-client on console-ams.rpki-client.org