Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
File:                     woYQciwbyJvjK01LiizCHeZxfMg.mft (raw, json)
Hash identifier:          ecyO9Y9piDoGm2FtOedOVHTEAi4RPaBZ8IC2huopEmE=
Subject key identifier:   B1:3A:EA:E7:B3:4D:1C:1B:46:45:15:0C:E7:6C:18:3A:F7:51:26:75
Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
Certificate issuer:       /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
Manifest number:          022E
Signing time:             Thu 21 Nov 2024 01:25:54 +0000
Manifest this update:     Thu 21 Nov 2024 01:25:54 +0000
Manifest next update:     Thu 28 Nov 2024 01:25:54 +0000
Files and hashes:         1: woYQciwbyJvjK01LiizCHeZxfMg.crl (hash: BXUsSiwPYaajb17DEwrzZWX3fYAUUwQHkM8Yt4MpUYI=)
                          2: ACBFA1221CD111EFB2BDF412C4F9AE02.roa (hash: UwAW7kcH5nr3Ub6tH3UV078TuKNxa/duHi/yChGrK6c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
                          rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
        Validity
            Not Before: Nov 21 01:25:54 2024 GMT
            Not After : Nov 28 01:25:54 2024 GMT
        Subject: CN=673e8c22-345a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:c7:40:92:d2:20:05:6d:01:f0:55:65:09:
                    52:98:2e:66:a1:50:28:83:62:c2:5a:3c:46:94:d8:
                    16:f5:39:32:4e:66:1d:f3:98:10:93:9a:98:09:52:
                    9c:cc:ee:52:2d:5e:df:31:e2:93:30:08:fb:96:fc:
                    c2:37:36:3f:05:33:af:8c:c9:54:e9:bb:74:bb:f7:
                    ec:7d:45:09:08:1d:20:28:0f:eb:78:84:14:00:e8:
                    a8:43:ac:36:93:ce:38:7d:21:46:34:db:30:41:43:
                    48:48:27:83:e5:f9:21:86:1b:4a:d6:47:a8:b4:78:
                    35:ce:a4:55:ba:85:e7:5f:1b:0d:fa:73:a0:9f:f4:
                    38:94:38:92:8d:10:7d:64:fa:9e:80:da:b6:db:f5:
                    86:a4:dc:58:37:80:0f:a3:9c:a7:46:4c:1a:da:47:
                    5b:33:6f:eb:a5:1f:9f:ce:0d:e0:c1:d0:16:ca:6c:
                    46:9e:16:23:ec:a6:a5:e0:ab:3d:d7:12:2b:87:13:
                    96:2d:c7:70:38:2a:de:52:ef:9e:8b:bb:07:84:96:
                    f4:6d:6b:e3:2f:57:17:79:02:38:08:34:23:e6:a3:
                    fc:cf:22:98:62:45:eb:b8:4e:2e:d5:49:fa:a2:f9:
                    ec:3c:b3:d2:6f:c9:b5:de:29:d3:e8:db:40:4d:40:
                    dd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3A:EA:E7:B3:4D:1C:1B:46:45:15:0C:E7:6C:18:3A:F7:51:26:75
            X509v3 Authority Key Identifier:
                keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:15:be:f4:c4:7d:18:52:eb:3b:ef:43:51:eb:65:27:27:f7:
         f3:83:55:f8:8c:bb:d4:f1:60:c7:f0:49:06:34:ab:9a:ea:db:
         ce:97:9c:97:4e:29:9b:a5:83:4d:d9:99:92:8f:dc:bd:90:f2:
         2d:9c:41:f7:0a:0a:4c:5c:e8:0d:5b:65:36:f2:c8:a8:ff:c2:
         31:28:82:5b:26:28:4f:db:6c:6d:5d:d4:a0:b9:c6:8a:37:b9:
         c9:8a:9b:8d:cc:e4:e6:f5:30:2e:c8:48:f5:75:c2:19:63:56:
         d1:a8:c4:e7:e2:f8:f1:19:43:05:b1:11:cd:60:dd:34:17:aa:
         88:d6:83:ce:a2:d9:53:72:f1:ae:e3:ff:76:fa:00:e7:00:19:
         0b:d4:b1:9a:3b:00:0c:0a:fa:10:61:97:8f:68:59:a1:f2:89:
         91:9e:62:cb:83:28:2f:0e:6a:12:1c:35:7b:bb:f4:e0:90:65:
         4f:65:50:c5:54:0c:3f:ef:d6:6e:bb:c7:36:9f:c5:f1:d4:39:
         a2:c3:45:b0:65:6c:89:ec:5b:ca:8e:a2:ae:f3:01:e9:26:54:
         ba:a1:b9:6b:19:55:a3:14:93:ed:64:3d:b7:85:4c:62:19:08:
         2f:c2:b6:62:af:35:8f:ec:91:d7:f7:b5:de:a1:20:2a:b3:56:
         86:f0:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:12:06 2024 by rpki-client on console-fra.rpki-client.org