Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
File:                     liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json)
Hash identifier:          WGE7AAhF+AKEIBD/WzH3NDKiHSYW1QJNqF6e6/t+124=
Subject key identifier:   23:56:65:51:D0:2D:0B:8D:7D:62:58:79:AC:35:77:96:00:4C:62:C7
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
Manifest number:          014A
Signing time:             Thu 21 Nov 2024 02:36:35 +0000
Manifest this update:     Thu 21 Nov 2024 02:36:34 +0000
Manifest next update:     Thu 28 Nov 2024 02:36:34 +0000
Files and hashes:         1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: zIlLh2N2Kmu8ZYrVlMcTxXvi5Q05N9IZhkwaoIF7ybw=)
                          2: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: 7yJqSe9S8oY45tghmuLu9vV7HsIeAXeIVFN3LThNCxo=)
                          3: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: XFMG3mPb80u9qfHaI194dJXblrOEUC++dIIm+Bzqkjw=)
                          4: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: KuhfA0h0fU7PC9HbE51Sqnz5h1zO5p0TnicH+m1oCF4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: Nov 21 02:36:34 2024 GMT
            Not After : Nov 28 02:36:34 2024 GMT
        Subject: CN=673e9cb3-481c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:da:57:7a:f3:70:c3:8f:66:47:8a:98:a5:
                    f8:81:6b:ef:dd:68:9a:3f:0b:d8:bc:4c:2d:6f:24:
                    e2:f4:3d:4b:df:ca:71:0d:24:42:d0:ad:2c:68:96:
                    ab:77:20:5b:6f:3e:9e:c2:a0:58:e2:0e:c6:67:56:
                    c2:8a:0d:ac:ca:c7:45:44:e3:97:20:7b:8c:a3:07:
                    5e:9e:0a:5c:4c:61:c3:ce:c3:99:15:23:b3:00:06:
                    40:0c:52:d1:4a:9f:aa:fc:79:40:db:02:14:38:ca:
                    e1:7c:fc:1d:0d:bf:62:38:a4:9e:6b:2d:3b:f6:f3:
                    a2:a2:fd:c9:96:e8:90:e0:3d:80:65:7e:2d:e0:3f:
                    ed:f5:f6:97:17:48:a6:c5:d9:c8:92:11:26:d0:a3:
                    63:d3:0a:15:36:a1:d3:b5:e5:9f:09:bf:fd:ad:69:
                    7d:f0:54:2e:57:2c:81:12:52:b2:06:73:e5:62:33:
                    77:f6:19:44:71:f0:db:73:f3:3b:ff:5c:4b:71:d4:
                    d5:14:c1:2d:22:0a:38:e6:5b:26:d2:50:51:cf:12:
                    8a:a1:10:ce:1e:74:c9:d4:14:60:33:a7:ad:c2:20:
                    9c:49:fd:c8:ff:83:90:16:db:80:d8:5b:82:c3:99:
                    2b:38:fa:dd:e5:40:ef:d6:f2:50:f2:47:6c:5f:9d:
                    4e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:56:65:51:D0:2D:0B:8D:7D:62:58:79:AC:35:77:96:00:4C:62:C7
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:71:06:2f:4d:db:68:e8:f1:14:e8:29:36:02:11:7a:a0:5d:
         55:a9:db:84:ac:2a:d1:fc:33:67:38:79:fa:0f:ca:01:be:ec:
         79:48:c0:6a:cc:6b:4b:55:5b:c3:4c:57:40:a3:90:cc:2e:9d:
         13:2f:3d:77:0e:4e:37:76:26:aa:0f:91:24:66:76:19:06:49:
         a2:80:c5:fe:d3:ea:c7:b0:ce:b4:10:d1:be:06:f2:5e:b4:37:
         ff:30:f1:de:4d:03:da:df:30:d0:ba:7c:a3:6a:51:81:c9:5b:
         c5:11:da:73:02:a2:3f:b5:8e:59:1f:a3:83:82:b3:dd:12:6a:
         56:c1:e4:02:3a:41:16:89:7c:95:8b:d4:0a:d9:b4:2b:78:cb:
         24:db:e3:02:63:20:c9:c8:fd:81:6b:5e:dc:57:f6:47:28:b6:
         43:1f:5a:d4:88:46:38:2a:93:90:46:1e:59:82:16:69:ea:ca:
         4e:93:a0:0c:41:fa:7c:3c:e8:0d:c1:fd:18:8a:12:2c:02:fc:
         11:10:56:1c:fd:38:6e:0b:59:c1:8d:4f:1f:01:48:9d:bb:39:
         c4:4b:b6:17:e5:3f:ca:a1:e9:83:8e:83:84:8a:68:32:6e:24:
         be:34:35:f3:e2:39:4d:b0:39:24:53:ec:4b:9a:6d:f5:14:36:
         ba:da:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:08 2024 by rpki-client on console-fra.rpki-client.org