Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
File:                     4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft (raw, json)
Hash identifier:          quJ9X9kM7cm8pI5XjWQZujf+mQgiTIVxlrBwXHn4Onk=
Subject key identifier:   A1:8B:09:BE:E3:43:70:64:DC:F0:6B:5E:58:BF:7A:2F:88:88:2E:75
Authority key identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B
Certificate issuer:       /CN=A91E1887/serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B
Certificate serial:       06CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
Manifest number:          06C5
Signing time:             Wed 20 Nov 2024 21:40:46 +0000
Manifest this update:     Wed 20 Nov 2024 21:40:45 +0000
Manifest next update:     Wed 27 Nov 2024 21:40:45 +0000
Files and hashes:         1: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl (hash: ycUXgTH8DFMCuEeMHd+Kfzy4EcHKyjsbmURJ5k1bpsc=)
                          2: 9F46C468355711EBA5B81020C4F9AE02.roa (hash: +mNdwjus2Kgr8/pfP9kkqV55Ej1FzQoLbQf0Qcf2IT0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl
                          rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1887/serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B
        Validity
            Not Before: Nov 20 21:40:45 2024 GMT
            Not After : Nov 27 21:40:45 2024 GMT
        Subject: CN=673e575d-9566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:43:ca:0b:e7:48:93:8c:72:c6:1d:9e:7d:
                    b9:42:56:a7:aa:a0:a7:3d:7b:fb:2d:88:90:b9:2a:
                    2b:4c:c3:fc:2b:3d:eb:e0:9b:65:4f:cb:28:29:89:
                    2c:d0:33:62:3c:56:12:a8:42:0b:03:73:65:01:60:
                    14:9d:3e:bd:63:b6:a1:bd:45:3f:e4:5e:e5:75:29:
                    e1:27:f0:05:77:10:5c:a3:7a:02:9d:66:34:ea:6d:
                    78:6a:2b:d6:f7:19:cf:47:9d:a5:25:51:58:f8:7c:
                    02:f0:95:b0:ac:1f:c4:66:51:7e:ba:c3:f4:00:b7:
                    1d:8f:d2:be:be:4f:8a:5c:1b:aa:5e:ff:64:5d:29:
                    34:19:2d:52:aa:48:5e:5e:84:88:75:14:d0:4c:7d:
                    4c:32:b1:c5:81:90:9e:b0:9a:61:f5:3c:1c:ba:f1:
                    18:f4:d3:57:93:52:49:95:6f:28:27:64:92:7d:68:
                    cf:da:7f:e5:5d:2d:bb:36:6a:ba:e8:81:41:07:af:
                    53:85:a8:e7:a7:cf:9e:1e:e8:86:8e:21:46:14:88:
                    55:48:ac:f9:47:e6:7b:d5:53:bd:25:ba:a9:0a:bc:
                    3a:42:aa:2c:39:91:9f:cd:10:97:d8:ab:56:cd:2d:
                    b4:06:6d:69:a6:e6:89:74:4d:f4:60:b7:e1:6f:2e:
                    7a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8B:09:BE:E3:43:70:64:DC:F0:6B:5E:58:BF:7A:2F:88:88:2E:75
            X509v3 Authority Key Identifier:
                keyid:E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f6:89:89:00:03:d6:b8:8f:84:14:a6:bd:82:a4:23:df:47:
         b3:0a:5c:49:ec:44:f5:d4:d1:d1:e7:db:cf:49:23:11:97:d8:
         84:8f:cf:d0:ce:b3:bb:1d:cf:37:6a:a1:4a:0d:8a:58:75:b8:
         fd:b4:13:a2:f3:1e:1a:1f:10:0f:ae:e4:54:67:bd:bf:c9:90:
         48:4f:14:fc:a4:00:40:de:46:6a:f7:7d:a5:bc:01:a9:21:72:
         03:c6:7b:7a:58:01:42:56:4f:05:09:2d:10:fd:b3:51:5c:cd:
         13:b7:11:f6:32:10:5d:7a:ba:46:d6:16:64:44:3c:0a:2f:83:
         21:65:d9:93:ec:3f:d3:23:a2:4f:02:43:ce:e3:07:cc:05:af:
         78:c1:3f:b5:bd:6a:2a:1f:bc:ea:7a:34:18:28:a4:7b:81:e0:
         eb:ea:7b:e2:2b:b4:b5:72:93:b2:a1:a6:1f:7f:7a:7d:19:12:
         dd:07:08:3c:c0:b0:43:e9:29:24:84:d4:57:7a:44:b3:cf:c6:
         6f:36:96:f0:41:39:79:a0:ec:0a:fd:27:be:56:d6:cd:fe:ad:
         83:ee:fd:6a:12:6d:5f:4a:a5:c9:b9:b0:48:f9:ab:a6:24:ce:
         36:f3:0d:fe:ce:ab:5d:4e:6b:5a:8f:69:2c:b1:d3:61:9b:93:
         94:ca:4d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:56:01 2024 by rpki-client on console-ams.rpki-client.org