Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
File:                     TvlHO1VK4acroJgf_v4Tji1IDsw.mft (raw, json)
Hash identifier:          y+0c48Nx3KSt9mWrXpl5UWB9LeA9442FhnLOrRNO4ms=
Subject key identifier:   3A:DB:50:66:0E:E3:87:04:53:EB:E7:7D:C4:3A:82:2F:A8:B0:BF:89
Authority key identifier: 4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC
Certificate issuer:       /CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
Certificate serial:       08F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
Manifest number:          08EB
Signing time:             Fri 22 Nov 2024 20:09:59 +0000
Manifest this update:     Fri 22 Nov 2024 20:09:59 +0000
Manifest next update:     Fri 29 Nov 2024 20:09:59 +0000
Files and hashes:         1: TvlHO1VK4acroJgf_v4Tji1IDsw.crl (hash: JaFMLV/hVZWK/G0EyX3rivxbijcr6pkMjVSQcorLKI8=)
                          2: E32E2F000EE811EE90BBC818C4F9AE02.roa (hash: rZTxgnVXWMDQsg0oTYE7f4kyKGpDxh1zgyaFzYbZkqY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl
                          rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291 (0x8f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
        Validity
            Not Before: Nov 22 20:09:59 2024 GMT
            Not After : Nov 29 20:09:59 2024 GMT
        Subject: CN=6740e517-1f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5a:55:9d:c7:5a:4e:c6:3b:4f:0d:6d:a1:6b:
                    d5:92:c8:f1:e1:ad:3f:34:51:8a:a8:97:ae:29:e5:
                    28:fe:2c:f9:4f:44:42:63:33:cb:9e:56:06:6c:18:
                    c6:52:5d:16:5d:e9:73:d2:aa:a6:76:f9:28:7c:65:
                    a3:54:49:1b:ca:72:a8:ee:03:08:78:b2:41:08:aa:
                    72:09:16:a8:fd:4f:33:5e:ac:6d:97:d5:7b:29:0c:
                    c9:6b:35:04:72:ed:28:7a:67:d9:d6:b2:53:8a:0e:
                    39:c6:72:d4:6e:b0:48:cc:a4:16:cd:53:c6:a8:d6:
                    af:d2:87:98:0c:e7:57:a1:a3:39:f6:04:c7:0c:f9:
                    1a:2b:1a:04:fb:b9:6b:f0:25:99:63:55:88:f4:f1:
                    d0:73:8f:27:a2:e7:fe:da:24:4b:ae:8d:ca:a2:d5:
                    79:ca:84:b1:ae:49:77:5f:fa:c4:15:a0:2e:ae:12:
                    b9:0f:52:10:f6:bf:4b:49:4f:95:79:49:44:d8:6a:
                    cb:67:bb:0a:df:40:76:a6:f0:72:86:df:f7:5d:7b:
                    4c:12:8f:54:2e:51:09:f0:eb:35:f8:a9:38:3b:89:
                    0e:c3:69:1a:5c:db:68:38:dd:39:4d:71:d6:f8:9f:
                    2e:72:ee:f3:ef:d1:7e:3a:42:a3:33:34:b8:a6:56:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DB:50:66:0E:E3:87:04:53:EB:E7:7D:C4:3A:82:2F:A8:B0:BF:89
            X509v3 Authority Key Identifier:
                keyid:4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e7:f9:cb:c9:fb:7a:98:2e:93:1f:c3:75:3d:c1:83:ff:72:
         9b:0a:56:ce:2e:8b:2d:10:e0:9a:d7:e8:a9:65:7d:66:30:4a:
         e5:d0:ba:eb:4d:9e:e6:56:9c:ad:f6:ca:ee:aa:df:0d:6f:35:
         ab:41:75:bd:30:bc:56:62:3f:29:a1:72:87:82:69:ed:52:5c:
         5e:da:0d:0f:fa:f0:16:84:29:63:45:0c:59:ed:4f:5a:9d:64:
         17:35:6f:0a:66:8a:6f:02:75:c4:8a:26:78:92:c3:75:dc:d5:
         0b:19:4b:7f:2d:77:f3:71:a6:4b:3c:6f:94:92:34:29:66:3e:
         01:16:9a:af:74:34:fa:f9:22:23:f4:85:9a:f4:4e:47:89:7f:
         68:cc:26:f0:a4:e0:9a:1e:99:8e:8f:0a:b0:ad:d2:55:4e:d1:
         f3:56:f1:e9:b1:63:6a:cb:22:e7:ba:5e:e3:de:db:32:84:e8:
         0a:8e:93:67:ed:ca:2a:4a:08:5e:fe:ba:ea:8e:b7:ba:4e:2e:
         a3:e9:73:60:8a:d8:b8:b5:1f:76:27:39:91:39:92:d5:06:67:
         d3:50:bd:87:4f:3a:62:f8:79:3a:4a:3c:af:46:54:78:f9:41:
         46:48:e6:68:37:f1:9f:f7:b0:1d:83:02:e6:93:0f:d5:89:01:
         ac:1d:08:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org