Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File:                     cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier:          Ci4SrT+l8ksR/N3f9v8YqzCE1nwbydWpwyPf+G5CtI8=
Subject key identifier:   C8:A8:61:1A:C5:A1:87:65:94:57:56:C8:71:7C:F9:94:23:6B:56:47
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       0594
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number:          057B
Signing time:             Fri 22 Nov 2024 22:54:40 +0000
Manifest this update:     Fri 22 Nov 2024 22:54:40 +0000
Manifest next update:     Fri 29 Nov 2024 22:54:40 +0000
Files and hashes:         1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: eooJb56F9DeqwZc54T58YCKV+8S9kwEjO9qYI0sk53E=)
                          2: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: Pea43XyYLdD57bd2jMcFm5++NRhrK6aAEARYz2ZZaTI=)
                          3: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: byFCEX/cfxkLVHdJ69qb/hcxv5zL8EwxRt2sj7xuv/w=)
                          4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: w21kT3wxQZFfqU1ntFUJE5r1+DTM2tACmKEPJfh1Bvo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1428 (0x594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Nov 22 22:54:40 2024 GMT
            Not After : Nov 29 22:54:40 2024 GMT
        Subject: CN=67410bb0-3625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:40:67:46:94:66:b3:30:b6:4e:09:28:c6:8f:
                    87:42:25:ab:6b:70:19:dd:88:e5:e4:3e:1d:60:04:
                    8a:e4:e8:26:6e:0b:70:7f:82:ee:17:cf:32:82:a4:
                    d3:f8:e8:2d:2f:85:81:51:6e:d8:fa:5a:d8:1e:fc:
                    15:bf:7a:6f:d4:06:d7:12:bc:f9:28:92:a5:dd:98:
                    0e:20:3c:43:96:a2:97:cb:43:28:5a:5a:7f:6c:e9:
                    a1:f9:0d:25:e3:b9:6f:46:4b:e6:c7:f7:c9:69:05:
                    1e:59:36:d3:67:b1:bf:91:6b:27:9b:5b:28:eb:b6:
                    6b:bb:00:86:5f:ee:dc:95:b6:72:c7:cf:56:0a:6e:
                    c9:7e:6d:a4:d5:f6:66:ff:e6:be:44:1c:c9:e8:23:
                    64:f7:da:47:15:65:99:2f:78:0b:d8:03:f1:57:64:
                    4f:6c:8f:ab:0d:b2:c0:3c:24:bb:d7:10:e3:63:7b:
                    eb:e8:8f:f9:a7:0b:84:b8:d4:c4:9f:68:44:b5:31:
                    b1:ef:22:a3:80:2a:bb:38:a4:00:46:d9:49:2f:f9:
                    4a:2b:41:d3:83:4f:34:f0:8d:9a:b6:8a:fd:02:2b:
                    0a:4b:0e:91:4b:5a:c8:37:38:d9:0b:54:fa:a3:ec:
                    42:07:fe:63:79:91:ae:63:4a:7e:28:53:83:f1:59:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A8:61:1A:C5:A1:87:65:94:57:56:C8:71:7C:F9:94:23:6B:56:47
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:79:22:1e:89:44:08:d7:59:aa:01:5c:53:39:93:64:f1:62:
         88:00:9b:ae:6b:63:a3:dd:00:15:fc:50:7b:b1:8e:33:fb:c3:
         41:4d:f9:9a:07:4e:1a:b7:51:16:d5:fd:7c:61:4c:2e:f3:46:
         4f:1d:dd:0d:43:90:59:08:1c:f2:c4:f8:99:d9:e1:7c:a0:2f:
         7f:2c:98:dc:83:e2:35:c9:0c:69:2a:70:51:01:1e:e4:26:85:
         1a:61:59:db:02:ed:6c:ee:44:6c:aa:a8:d4:ef:02:8d:10:ae:
         51:94:08:0c:5d:27:19:98:83:e1:14:64:29:4f:b7:3b:e9:b0:
         6b:d0:97:c8:13:bf:d4:d9:8f:27:9a:fd:9e:f6:32:55:f2:ec:
         c9:a1:92:c8:e7:4f:ed:ce:6e:5b:1b:e6:09:d6:3a:ed:e3:f1:
         ff:bd:29:f6:4b:d5:46:fe:e1:b2:1d:3c:79:7e:82:e1:ef:de:
         d2:4c:03:be:2f:c8:14:f0:01:58:de:90:74:9e:df:8f:a7:0b:
         6c:1d:42:89:93:8f:62:8a:fd:82:03:2a:f2:fb:dc:92:de:c7:
         41:32:b0:ef:0f:c1:ed:2c:c7:66:da:b2:2a:26:ae:01:31:5e:
         02:f0:cf:97:79:66:1a:15:19:a6:7f:49:d3:ea:84:4f:e6:90:
         f3:27:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:35 2024 by rpki-client on console-fra.rpki-client.org