Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
File:                     3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json)
Hash identifier:          u/psi37zIQc2AGQojKOXjgPVB6exYiDskKcjX7xxZ48=
Subject key identifier:   8E:42:79:EE:C2:7D:EA:2C:7E:B4:F2:BB:76:C3:E0:EE:22:62:0B:78
Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8
Certificate issuer:       /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8
Certificate serial:       0763
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
Manifest number:          0750
Signing time:             Wed 20 Nov 2024 21:10:04 +0000
Manifest this update:     Wed 20 Nov 2024 21:10:04 +0000
Manifest next update:     Wed 27 Nov 2024 21:10:04 +0000
Files and hashes:         1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: yYFfRB8VovrgctTcinln988Sr1LFuONQhADMPlfTnQs=)
                          2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: uenMBzygNtm8pOViOrVCvIQk55vDxQTLDfSdNpW+OjU=)
                          3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: LrK2l7svpCCk7PczhtxpbxrrUZBtDgU/uzHjp2bGy8E=)
                          4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: 4189wGj0EPbmCiBfwKVkbJETVgwnkFWeQOcnoateYoU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl
                          rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891 (0x763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8
        Validity
            Not Before: Nov 20 21:10:04 2024 GMT
            Not After : Nov 27 21:10:04 2024 GMT
        Subject: CN=673e502c-ccf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:37:93:70:a6:c2:87:7d:1f:0f:a1:6e:2b:
                    8c:c6:40:89:20:da:be:0a:91:f3:38:f9:75:6b:4d:
                    16:18:89:56:7c:d1:c8:15:43:c9:23:78:fe:c7:87:
                    18:32:ab:e5:69:25:e8:72:dd:86:eb:1e:61:cd:24:
                    b9:22:cc:24:bf:26:d3:f4:59:e7:55:a6:e5:b5:10:
                    40:08:9f:f4:18:51:5b:cc:4c:7f:95:67:a7:76:e6:
                    77:8b:cd:2c:d1:9a:eb:52:90:27:2e:29:e5:35:45:
                    bf:88:60:48:5e:ef:15:ee:0f:92:18:b1:9a:72:13:
                    7e:fb:12:05:21:80:59:e5:12:3e:08:2e:b1:85:b5:
                    2a:78:44:bb:48:86:c2:8d:62:f5:af:8a:c7:8e:77:
                    7f:f9:c5:c9:a2:5b:c2:c0:18:cb:25:1c:d8:2b:a8:
                    1b:fb:b3:fd:5f:35:65:fd:69:b8:42:b9:8d:a5:2d:
                    42:8e:0e:d9:b3:86:cb:2c:3c:5e:42:11:72:f8:ad:
                    5a:59:40:b1:88:34:49:c0:7d:c4:63:59:99:9f:e9:
                    ad:53:b9:a6:43:99:5d:dd:1e:a7:12:bb:0e:e7:00:
                    25:84:31:c1:d6:b6:b8:d1:e1:59:c1:ca:3b:c2:66:
                    39:11:84:4d:fc:e7:ed:48:cc:f2:19:7b:63:a3:c0:
                    3d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:42:79:EE:C2:7D:EA:2C:7E:B4:F2:BB:76:C3:E0:EE:22:62:0B:78
            X509v3 Authority Key Identifier:
                keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e1:7e:3b:65:ed:ef:2b:ae:fc:aa:13:71:41:5f:31:3a:6e:
         52:3d:8b:db:56:02:36:8e:a4:57:58:97:a3:1b:a8:88:85:62:
         fa:68:a3:cd:60:4a:e9:3b:49:4b:28:45:d0:ae:58:cc:23:86:
         41:f6:9a:5c:ed:ad:2b:49:7a:40:69:ac:2b:c3:de:a4:88:96:
         08:ef:dd:cd:71:ab:7a:1c:4f:92:6e:fa:ba:e0:36:24:88:8f:
         22:0c:76:6a:33:22:7d:48:0c:98:c7:ff:66:a7:b0:3f:ef:77:
         fd:5e:45:9b:a8:a2:e9:87:8b:67:b3:64:ca:d0:9a:32:c7:81:
         d5:5f:5b:35:83:f2:90:05:17:4a:28:08:12:aa:2f:c8:61:ee:
         fe:93:23:d9:ac:a8:79:f7:66:5e:8a:7e:5c:40:d5:40:a8:12:
         26:26:2d:91:ce:c9:55:92:e9:69:e8:79:18:2e:bf:d7:68:2e:
         fb:a0:e4:23:62:f9:e7:9a:98:1d:52:b1:ad:16:cc:fa:55:2e:
         02:6e:57:e3:9f:9b:67:5e:8b:0d:6d:e9:18:0b:05:6a:76:e1:
         3b:82:8e:5d:da:5b:a1:bc:a8:9e:66:6d:2e:28:50:36:19:73:
         df:55:f4:47:00:a9:e4:f9:5f:17:7d:f7:82:84:b3:60:d3:3c:
         79:cc:86:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:56:01 2024 by rpki-client on console-ams.rpki-client.org