Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
File:                     Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json)
Hash identifier:          v3PPb2qkbYtbtyYb29mMgwC2ayqbtc8U26s27FSiIY8=
Subject key identifier:   59:A2:57:62:3F:23:ED:3C:4E:53:B4:F0:C9:F9:B2:C7:CD:37:10:68
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Certificate issuer:       /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial:       0501
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
Manifest number:          04F7
Signing time:             Fri 22 Nov 2024 23:15:50 +0000
Manifest this update:     Fri 22 Nov 2024 23:15:49 +0000
Manifest next update:     Fri 29 Nov 2024 23:15:49 +0000
Files and hashes:         1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: 9RveeGgNIdu9RxNbgma7dApCnFZiWHtztMci/ymXJLE=)
                          2: EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa (hash: 0uI77WnMvgx38BJ7x5ctqph2jfLMtLeb4wieKz5xnjk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
                          rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
        Validity
            Not Before: Nov 22 23:15:49 2024 GMT
            Not After : Nov 29 23:15:49 2024 GMT
        Subject: CN=674110a6-3e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:29:e4:62:41:3c:12:a7:07:4f:83:fa:c6:
                    ff:f3:da:46:1d:5a:46:08:6c:d1:f9:9c:ad:73:4f:
                    10:6d:8e:68:13:2e:a0:49:de:44:10:7a:1a:a4:18:
                    6d:42:0a:87:b0:04:7d:90:e4:43:9c:94:87:97:d4:
                    4a:c4:60:bf:a0:ac:f6:e7:86:9a:bf:fe:57:32:17:
                    79:65:03:bc:d8:b9:cd:28:24:87:1b:14:9c:ac:ff:
                    e6:2b:e6:86:a5:06:54:67:ec:e5:0a:f2:a3:b7:c9:
                    50:e9:d4:bd:b7:2d:30:2c:e1:5f:32:d2:8c:64:5e:
                    a3:c0:3a:84:77:57:d1:02:83:ea:9f:51:87:3f:98:
                    ca:9d:d0:e6:b9:e1:97:c0:be:9c:60:85:5b:c5:57:
                    f9:b8:b6:bf:df:b1:b0:4f:b9:26:71:1e:e5:83:26:
                    ec:d5:74:43:cc:ed:f7:ed:8c:6c:f3:7a:40:64:02:
                    6c:72:50:86:30:47:62:99:15:6b:2a:81:34:0e:ac:
                    b4:d4:13:b0:33:4b:b6:b8:c4:f2:89:d9:3d:39:82:
                    68:10:5b:8f:36:f4:4b:0d:b1:86:7b:95:72:00:33:
                    03:1b:cf:21:2e:9f:5c:13:7f:01:0a:e0:9a:13:6c:
                    e7:aa:da:54:f4:3b:c2:96:c4:e6:e7:0e:a8:3d:d9:
                    56:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A2:57:62:3F:23:ED:3C:4E:53:B4:F0:C9:F9:B2:C7:CD:37:10:68
            X509v3 Authority Key Identifier:
                keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:87:40:53:bd:80:af:61:5e:c6:72:67:c7:ef:19:29:ca:f0:
         b5:38:c3:7b:16:15:9a:23:b7:e9:40:24:65:ef:4c:5d:1e:70:
         a6:3e:94:91:4f:8e:96:d5:6b:97:33:34:fa:34:81:0f:f1:00:
         33:46:e3:6a:fe:8f:59:7c:20:da:d7:7c:d4:fe:51:40:e0:46:
         26:bb:70:67:02:86:e9:7e:dd:56:55:93:48:b5:e3:b5:3e:68:
         a9:06:8b:a5:e0:c9:bb:ec:21:fa:38:73:ba:0b:d3:96:b2:5e:
         07:0b:19:60:24:51:3a:ee:cf:8d:19:37:5c:5d:7f:06:74:7e:
         41:49:58:94:f6:7b:f0:4f:74:28:bf:af:07:99:ff:30:75:9a:
         7b:53:a7:50:82:fd:79:0c:eb:59:9a:f9:58:ed:d0:82:f1:35:
         24:c2:8a:2f:7f:9c:63:62:0a:79:b5:28:07:96:37:05:07:b1:
         fa:7a:b5:44:60:cf:d4:51:b0:73:48:a9:6b:90:c4:01:ba:70:
         c7:1b:ec:0c:23:f4:76:9d:34:6c:22:ea:d1:e7:b6:f2:73:5f:
         ed:fd:db:7f:01:2e:bd:be:c3:eb:f7:30:8b:ad:40:ab:3b:e2:
         57:e4:6b:73:14:71:2b:d3:83:27:e0:ea:5b:cb:03:e2:e8:3c:
         ab:38:db:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org