Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
File:                     F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft (raw, json)
Hash identifier:          nrkrToEyd+NhldPAlbh6pnMgXcdSSEsyDyEbmuXk4/c=
Subject key identifier:   FC:BE:E7:FC:4A:CC:38:4F:52:44:77:7E:67:4C:B7:FB:49:1E:B7:50
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Certificate issuer:       /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial:       0767
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
Manifest number:          075C
Signing time:             Fri 22 Nov 2024 21:02:21 +0000
Manifest this update:     Fri 22 Nov 2024 21:02:21 +0000
Manifest next update:     Fri 29 Nov 2024 21:02:21 +0000
Files and hashes:         1: F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl (hash: v382nipV41jbootO2+2VVjWPGbmdFU1T/HafO+EpJUk=)
                          2: 8D38DE3C2FED11ECB35A414FC4F9AE02.roa (hash: b3IINsIGkusmcZDzQ0SpAmguUhxhUmGPE2FVVhx9sCM=)
                          3: 8E7B872C2FED11ECB35A414FC4F9AE02.roa (hash: 6G48QCBxnk47O0ZP40MqlHHprvi018zn6Ewz0OWI5eo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
                          rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895 (0x767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
        Validity
            Not Before: Nov 22 21:02:21 2024 GMT
            Not After : Nov 29 21:02:21 2024 GMT
        Subject: CN=6740f15d-8e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cb:cf:34:3b:b7:e0:c8:d4:a8:fa:bf:06:3a:
                    b3:63:5a:62:23:cf:d3:1e:68:2d:3a:f5:be:98:ff:
                    c6:50:e9:f8:9b:cc:de:47:01:9b:3b:26:86:c5:95:
                    eb:89:28:5b:6f:e7:e0:c7:37:18:6a:c3:51:b5:ff:
                    0c:47:5c:aa:30:1c:c7:25:8a:8c:5f:fa:60:9e:7f:
                    42:cf:f1:bc:ed:3a:1b:38:4e:41:6d:7c:e7:f1:34:
                    8c:bf:23:50:dc:e7:c6:df:a8:f2:9f:d9:73:c5:cc:
                    fc:53:2e:da:71:88:a3:63:b7:14:c7:88:bf:80:e3:
                    7f:9b:8b:ba:a3:e0:4d:7c:ad:cb:66:2c:f8:96:7d:
                    1b:3d:bb:b2:95:b5:f3:79:6d:8d:bf:93:83:4a:e3:
                    a7:31:d5:99:b2:70:5c:1c:5a:b7:20:39:ca:e3:1f:
                    f1:ac:f0:a2:de:50:8b:d0:e4:96:67:53:36:92:15:
                    57:db:69:1e:6d:32:d1:49:9c:8a:6f:3d:a6:9b:21:
                    b8:7b:ca:70:b3:04:03:5e:0d:07:c2:79:89:30:c5:
                    ec:d3:e3:c4:bb:cc:2b:1e:9f:1c:72:be:d3:df:fa:
                    96:54:76:20:84:33:63:ab:4c:61:14:33:03:fd:b6:
                    21:2c:9b:06:2b:d2:56:28:64:44:31:b3:bf:45:3f:
                    4c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BE:E7:FC:4A:CC:38:4F:52:44:77:7E:67:4C:B7:FB:49:1E:B7:50
            X509v3 Authority Key Identifier:
                keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2c:4c:de:7b:59:4e:a7:df:88:e6:b7:f6:de:59:41:26:69:
         6e:a5:c5:bd:dc:f6:6e:77:52:3e:4e:60:2c:78:0a:4c:93:34:
         bd:fe:11:b1:71:86:e7:08:e7:2b:52:50:a5:91:7a:fc:be:e3:
         d9:87:db:ec:19:44:a4:0f:71:21:1f:be:e1:19:71:32:8c:22:
         74:97:55:51:83:2c:2a:d6:fa:27:f7:28:4d:54:0f:53:6c:26:
         3c:ae:55:20:e2:df:c1:13:fa:20:ec:70:17:e4:7a:91:1e:10:
         04:ff:7e:a6:e4:50:df:98:08:54:5f:1b:d1:a3:63:d2:a8:ba:
         ab:f4:73:56:97:14:2e:33:5f:84:8e:69:78:2b:31:9d:31:b3:
         ad:ce:f0:a4:b5:91:0d:48:da:b4:5f:15:6f:a0:40:f9:61:92:
         3b:45:15:92:01:25:29:d0:0b:db:d5:3d:14:53:18:36:97:41:
         bc:58:19:b3:f0:6c:9e:83:5f:4c:f5:3c:9e:cb:a2:5c:b0:a7:
         ef:1f:0a:77:74:b0:ef:30:3f:d7:80:e5:a4:a1:4a:f4:1e:58:
         95:69:da:c8:dc:2f:65:58:6d:d6:e1:37:2b:c3:e4:50:2f:c5:
         0c:55:82:32:2a:e8:75:5b:1a:29:43:c4:74:f9:99:db:bc:bc:
         de:32:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org