Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
File:                     OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json)
Hash identifier:          VrKkijaBytvajPIaHs+21HGgO1AesMkOQzD7zNdtdzk=
Subject key identifier:   16:3F:D4:80:36:8E:26:5E:AA:E0:4A:CD:4A:5F:97:99:C9:9F:8C:D2
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Certificate issuer:       /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial:       1A23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
Manifest number:          19ED
Signing time:             Wed 20 Nov 2024 16:20:50 +0000
Manifest this update:     Wed 20 Nov 2024 16:20:49 +0000
Manifest next update:     Wed 27 Nov 2024 16:20:49 +0000
Files and hashes:         1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: Sy5oUPxeFRyx6PO+RSDKijXyHUOxEdropw60Od9jQWI=)
                          2: 6C897E54597B11EDB603273AC4F9AE02.roa (hash: tECuYiObkHM8+lQ9pAL6rPX0WAXD3+sDD+oT9RLjEFY=)
                          3: 6E44CE88597B11EDB603273AC4F9AE02.roa (hash: uSAHzBc+YHmREVNWY2QOkLWbks+7w1YPJ8vpHREo1FM=)
                          4: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: UvxhutC//RajTrYueD0iUFQneJ/UQC0+drD5TAjJyFQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
                          rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6691 (0x1a23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
        Validity
            Not Before: Nov 20 16:20:49 2024 GMT
            Not After : Nov 27 16:20:49 2024 GMT
        Subject: CN=673e0c62-4ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:a6:86:06:6f:c4:9f:69:3f:27:9d:76:b6:
                    52:b0:9b:22:2d:c8:20:35:35:91:00:be:b3:06:64:
                    d7:8a:f5:24:67:6f:ba:d9:bf:c8:8c:ff:0e:dc:1d:
                    40:f3:c1:ba:3b:d6:d2:ab:fd:36:fc:ca:9b:81:c7:
                    e6:58:cf:b2:63:c1:b0:a6:3f:41:b2:36:2c:24:a1:
                    16:27:2b:12:ed:41:ef:4f:35:88:fe:c8:71:14:74:
                    65:6b:0d:37:bf:bb:fb:86:55:97:02:52:75:9f:57:
                    4d:45:55:13:c7:59:03:61:d8:c2:8e:3c:ce:1e:10:
                    1a:dc:d8:1e:99:89:0a:ac:49:d4:d4:8a:82:84:ce:
                    92:12:54:c1:a2:90:c0:5a:fb:e8:d3:47:9c:37:96:
                    fd:d1:55:62:dc:16:c0:c9:b0:be:22:ee:62:95:09:
                    21:a8:4a:bf:bb:82:ab:4b:e8:7c:0c:cd:64:a1:ed:
                    0e:46:34:e7:1e:3b:1e:f8:6e:ca:3d:83:0f:34:47:
                    32:be:5c:5b:17:a7:98:ce:9d:d2:3f:44:56:53:e0:
                    3e:cf:0a:2d:02:00:fa:d7:89:26:da:bb:62:8c:8b:
                    4a:27:0e:5f:f7:44:8c:e2:53:28:ad:b4:17:e3:c3:
                    af:ce:7f:37:40:c4:96:c5:0c:71:a6:7e:f4:3f:97:
                    fc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3F:D4:80:36:8E:26:5E:AA:E0:4A:CD:4A:5F:97:99:C9:9F:8C:D2
            X509v3 Authority Key Identifier:
                keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:f3:21:cb:86:86:99:5f:9e:53:64:75:3c:ac:77:7b:a5:
         c8:19:e0:49:ee:45:52:46:11:4b:fe:e6:84:7d:1a:74:44:2c:
         01:71:13:25:63:01:03:92:b1:9a:10:60:e9:44:0a:1c:e2:f3:
         1d:ea:88:37:66:2a:2d:52:10:21:4a:5f:be:13:0f:de:df:c1:
         d0:fe:e8:c1:30:58:cc:14:ca:1f:9c:ac:2b:af:d3:54:bb:45:
         b0:0b:d4:fd:45:da:38:7d:9d:9a:04:a8:99:05:8e:1a:b4:be:
         9f:8e:ad:c9:f0:1f:85:6b:b9:70:be:73:11:59:0d:2b:3f:8a:
         c6:1e:a8:91:31:0c:07:38:87:e3:b2:4b:6c:99:cd:a1:6f:c3:
         6d:3c:3d:65:ea:11:a4:4d:dd:40:70:ae:ec:cd:00:09:26:20:
         fb:87:32:84:a1:c6:29:e4:fa:78:45:ae:e6:01:e5:2f:05:92:
         92:72:4a:8b:2d:73:b8:26:cd:14:d2:35:d2:af:59:2b:f6:7f:
         c0:19:dc:db:26:f8:08:1b:a6:b9:dd:02:7f:e0:23:b6:d8:99:
         c5:ab:74:4c:de:e9:fc:93:67:46:62:2b:6f:fd:ee:a9:f0:96:
         e1:53:27:c7:a3:f6:90:43:db:c3:4b:41:a3:b9:8a:cc:bf:83:
         78:09:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:45:07 2024 by rpki-client on console-fra.rpki-client.org