Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
File:                     N-24AKVpn6hX9211S38vQXXuqF0.mft (raw, json)
Hash identifier:          VUmWBJm35GPBfmhKr5/Divuzw2umL7O9zR0qpm0wgEk=
Subject key identifier:   71:12:45:88:8A:2F:52:5A:FF:54:2E:B0:37:20:CD:99:8B:03:8B:3F
Authority key identifier: 37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D
Certificate issuer:       /CN=A91E6F07/serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D
Certificate serial:       07F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
Manifest number:          13C7
Signing time:             Fri 22 Nov 2024 18:26:00 +0000
Manifest this update:     Fri 22 Nov 2024 18:26:00 +0000
Manifest next update:     Fri 29 Nov 2024 18:26:00 +0000
Files and hashes:         1: N-24AKVpn6hX9211S38vQXXuqF0.crl (hash: 7Dd/F/bblb2pfueoR8ypMJ2/yNAJ3KxolMRNo1NUbAE=)
                          2: 6E570966CD1B11EA9613AA1DC4F9AE02.roa (hash: ohLcJGiw9Qpz+3q7Qq1rXsYI1VYW0bgcQ/ITvPJhtyk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl
                          rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033 (0x7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6F07/serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D
        Validity
            Not Before: Nov 22 18:26:00 2024 GMT
            Not After : Nov 29 18:26:00 2024 GMT
        Subject: CN=6740ccb8-fd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:7b:b7:47:88:c8:5f:ef:f9:e8:98:b8:2d:
                    15:39:b6:44:a1:17:e1:ac:eb:16:22:df:92:e1:8b:
                    e5:fd:ed:13:a2:d3:17:99:ae:ef:a7:69:01:84:ce:
                    be:7f:0d:04:aa:3b:cc:07:f6:48:ec:ee:68:e4:03:
                    e0:e6:40:64:9d:c5:8f:ac:f6:b0:5c:55:a5:a2:64:
                    2a:d6:5b:e9:b8:da:ce:6f:1f:f6:9e:e5:e9:d8:1f:
                    1f:4e:7d:4a:98:70:6c:59:6e:49:93:98:bf:38:86:
                    db:12:d1:de:6f:78:0e:97:c1:1e:94:55:4f:36:67:
                    ef:5c:64:54:ee:f6:a7:92:67:89:94:1f:43:33:a9:
                    5c:ca:13:e9:f9:24:69:d9:9f:fc:36:29:55:c9:9d:
                    e7:83:83:cc:ed:d9:e8:24:84:59:6b:7b:b6:ff:e4:
                    e9:24:19:5d:4c:bb:62:e6:46:ec:07:bc:2a:6f:2a:
                    a4:4a:04:d2:95:41:5d:87:ba:dc:24:1d:18:30:21:
                    ca:32:c9:c1:8a:a6:b8:1a:71:16:a8:85:ae:6a:2b:
                    c4:3f:be:6b:c4:aa:45:a1:9d:3a:9e:41:39:f9:ce:
                    19:15:79:13:c3:c2:5b:78:3d:1d:2c:70:84:d2:2b:
                    d1:9e:5d:d2:07:bb:b9:7b:e7:11:0c:bc:8e:b5:25:
                    ea:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:12:45:88:8A:2F:52:5A:FF:54:2E:B0:37:20:CD:99:8B:03:8B:3F
            X509v3 Authority Key Identifier:
                keyid:37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:0d:a2:e4:44:aa:62:6f:21:35:38:27:5f:26:8d:87:8e:27:
         1b:78:88:fc:83:34:68:20:cb:c8:38:60:d3:25:72:9f:23:f8:
         14:b4:1c:dc:de:ce:2a:95:35:00:bb:3f:fc:df:51:64:e4:ad:
         30:06:de:fe:0a:d9:8a:ec:3e:e2:b4:71:f2:e4:11:ac:bc:e0:
         06:8c:96:6e:16:f8:68:fe:d1:7a:14:cd:a3:3a:04:2e:65:37:
         58:a2:0b:f3:bb:f4:c2:42:4e:a8:0c:22:9f:73:75:f0:24:d4:
         a8:02:29:21:50:bf:56:b0:3f:5c:d7:73:23:eb:ff:bb:4f:11:
         01:e5:ae:b6:75:7a:94:35:84:19:b8:2d:35:8e:83:73:e2:91:
         1d:40:5c:37:06:ca:b2:28:56:59:0d:09:49:a4:cc:0f:5d:ed:
         ac:37:64:9a:04:61:79:4c:0f:d3:e8:14:5d:a5:ac:c1:3a:51:
         a1:ff:1e:11:c7:5c:ab:9f:5c:13:7a:cd:aa:92:9e:8d:7c:6a:
         0d:92:00:d1:b5:8e:2e:29:c5:58:03:06:44:74:d3:66:ce:e6:
         34:69:6c:ee:42:4c:b3:d6:01:7e:49:2d:b5:79:46:7e:15:b9:
         53:0c:3d:30:38:2b:94:63:f0:79:c7:6a:f2:59:19:3b:6f:bb:
         13:81:02:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:21 2024 by rpki-client on console-ams.rpki-client.org