Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
File:                     ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json)
Hash identifier:          lHWLXf4oIQODS7aGRxrGKsFIJoK3+PxlH9FMRz7JScs=
Subject key identifier:   ED:D5:63:91:9E:1C:3A:5F:26:5F:9D:4C:E4:3F:D7:2F:00:4E:D7:8F
Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
Certificate issuer:       /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
Manifest number:          34
Signing time:             Thu 21 Nov 2024 05:38:59 +0000
Manifest this update:     Thu 21 Nov 2024 05:38:59 +0000
Manifest next update:     Thu 28 Nov 2024 05:38:59 +0000
Files and hashes:         1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: yNrpF9XqtFUUvTo239iJjn4gqQS5L8JfeAbM7l0JT+c=)
                          2: CAADA49A5B9C11EF9AD89645C4F9AE02.roa (hash: ok11TU/iv6LJLPAflEPHiwiFhyg6n0qqCM2K15cUC/8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
                          rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
        Validity
            Not Before: Nov 21 05:38:59 2024 GMT
            Not After : Nov 28 05:38:59 2024 GMT
        Subject: CN=673ec773-c576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:f3:26:bd:9b:a4:61:06:ca:38:ed:a0:b7:
                    81:3b:af:34:d6:b3:19:82:4f:90:2d:8e:51:68:72:
                    75:c1:91:ae:73:16:6a:7a:18:8c:81:3d:19:5e:40:
                    47:9e:31:20:3d:86:8f:25:34:67:c5:e2:c6:04:5d:
                    32:35:bb:d9:40:b7:98:8c:bf:97:f2:0c:5c:6a:91:
                    6e:30:ed:a4:76:92:4a:a8:94:08:a9:b0:3c:82:87:
                    54:d3:a3:a0:20:21:bf:56:30:fd:4b:d5:81:42:18:
                    74:e8:35:28:6c:24:24:68:e8:6a:fa:c6:de:5f:72:
                    81:30:45:9d:60:ff:f3:da:70:66:3b:37:2a:12:67:
                    b6:2e:51:b0:14:16:ea:7d:2b:21:40:b9:8d:ea:4f:
                    04:97:d0:50:18:e7:bd:db:7f:c1:22:6f:0d:88:09:
                    61:40:ca:b4:a5:48:be:d7:ff:ff:3c:32:46:8f:b2:
                    55:f9:92:16:f5:3d:65:64:5a:d6:ba:c8:ca:30:59:
                    49:5b:57:ab:21:f5:23:cd:7c:0b:36:57:4d:5b:80:
                    fb:58:19:45:9c:d2:0b:d6:80:95:06:96:88:52:25:
                    6b:bb:e5:28:db:09:41:c9:3e:ac:a5:ef:d9:f5:07:
                    c3:77:80:48:d7:2d:53:c2:fa:7b:b5:01:91:cf:2d:
                    6d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D5:63:91:9E:1C:3A:5F:26:5F:9D:4C:E4:3F:D7:2F:00:4E:D7:8F
            X509v3 Authority Key Identifier:
                keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:07:6b:05:78:a0:ce:f6:37:6b:56:f7:1b:20:be:03:f5:28:
         18:f7:56:e1:10:74:35:f8:da:d9:60:1c:7d:af:c1:a9:f0:54:
         0b:69:ff:d0:8a:b6:c2:15:d8:f3:de:12:f1:0c:6c:3d:ac:3c:
         0a:e4:aa:be:00:0c:31:91:20:67:77:d3:c1:d9:98:c0:4a:c6:
         04:df:fe:0f:fb:18:66:47:31:2a:ef:a9:06:39:e4:2c:9b:28:
         fe:d4:09:93:27:10:b9:be:8a:fe:17:57:64:73:c5:35:c9:5a:
         a1:2c:5f:3a:97:b4:6b:7b:81:81:7a:eb:13:7e:bb:b5:e8:ac:
         c1:bf:3b:4a:b7:83:8b:12:07:68:3e:52:58:82:c9:25:6d:d6:
         9d:28:b9:a1:43:05:8d:6e:69:4d:a7:6a:6d:a2:05:7e:3e:c3:
         bf:64:9c:22:45:c9:6d:e3:ed:e9:50:96:de:7e:03:ab:07:2c:
         16:7e:25:74:cd:3a:27:35:38:28:e1:9c:57:1d:a2:23:36:66:
         5b:61:53:39:5d:cb:ca:ff:73:d6:26:b7:6d:b6:0e:c1:26:31:
         e9:83:cd:67:4c:4f:a6:bc:91:80:3f:d2:d6:7f:c8:da:c2:94:
         cb:4f:2c:88:c4:b2:0a:f5:6b:7c:1d:4b:b7:d4:eb:6d:26:a2:
         d9:51:3a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:52 2024 by rpki-client on console-fra.rpki-client.org