Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
File:                     T8Rg8J-QqobK9GfCha149DEnILA.mft (raw, json)
Hash identifier:          2hLuz3FWrgX94lECvWt3WGk1ImXIPE7C481/qY35Rvw=
Subject key identifier:   83:80:9D:E4:0D:5E:91:B8:36:00:22:C1:3A:6F:41:02:1F:7E:14:57
Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0
Certificate issuer:       /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
Manifest number:          41
Signing time:             Sun 15 Sep 2024 09:53:19 +0000
Manifest this update:     Sun 15 Sep 2024 09:53:19 +0000
Manifest next update:     Sun 22 Sep 2024 09:53:19 +0000
Files and hashes:         1: T8Rg8J-QqobK9GfCha149DEnILA.crl (hash: 6DVT0SUaVFuzvniW4Pc+4YyJr7mpisGH4X48LonaBeo=)
                          2: F394D822271911EF86EB1C09C4F9AE02.roa (hash: mt85vO9S1+M069/Vqga0C4rzQVNchf8ezTWc8qB7iUM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
        Validity
            Not Before: Sep 15 09:53:19 2024 GMT
            Not After : Sep 22 09:53:19 2024 GMT
        Subject: CN=66e6ae8f-2884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:16:9b:99:51:25:50:44:ec:af:14:fa:b6:da:
                    85:67:50:d9:98:91:17:f6:74:9b:7f:77:70:63:b1:
                    7b:96:62:1a:fe:32:7c:94:83:17:6d:46:f5:f6:3c:
                    c5:b7:a7:f0:e0:50:28:0f:4d:f6:d2:9f:ac:40:ba:
                    55:b8:e9:48:a3:d7:c9:c0:b2:c6:36:ec:34:bf:93:
                    84:8c:42:57:e7:10:af:bc:4b:0e:7c:f2:df:e5:77:
                    e4:31:ac:b5:f2:53:eb:35:54:b9:1c:25:42:3d:c1:
                    0d:89:64:76:35:72:66:8b:b1:8f:98:2f:14:4e:0c:
                    d6:44:65:76:d1:2c:da:d3:c2:90:e2:d4:2c:53:d3:
                    2d:fe:d7:b3:6a:e5:45:c0:de:5f:aa:47:bc:f0:86:
                    f2:4c:5d:02:9a:54:89:ac:40:65:a4:43:3a:83:03:
                    4e:69:8e:40:52:2f:62:cf:74:a0:df:d9:a5:bc:ad:
                    66:82:7b:be:d5:4b:a4:96:2f:b7:93:f1:ae:e8:18:
                    88:ee:43:93:b2:6c:ba:1f:6d:79:cb:1d:c5:3a:c7:
                    53:cd:e5:3a:0c:32:a6:71:cb:0b:3b:5e:f7:04:fc:
                    78:84:5c:61:ec:b6:9f:e2:0f:17:a7:ff:18:c8:55:
                    e1:fb:f9:c0:f1:0a:cd:cc:c7:30:d6:9e:f5:d1:95:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:80:9D:E4:0D:5E:91:B8:36:00:22:C1:3A:6F:41:02:1F:7E:14:57
            X509v3 Authority Key Identifier:
                keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:27:89:8d:3e:1c:45:a8:12:d8:8f:d6:44:79:89:5d:52:ca:
         ee:f5:e4:a1:e2:de:88:f1:6e:f4:d3:bc:e7:74:cf:65:a3:e3:
         b4:39:56:66:b0:3d:3f:62:33:cb:27:79:fa:35:99:d1:0d:88:
         b8:16:73:d3:9f:8f:35:29:a8:9d:31:d2:d5:9e:e0:6f:69:88:
         51:c4:f4:6d:ec:68:41:74:19:58:3e:72:9c:be:77:84:56:ad:
         d1:d3:be:e3:6c:09:50:b4:cf:b8:25:e3:0a:45:32:a8:2b:a3:
         a0:db:9a:47:6b:b7:13:09:e5:df:38:fc:aa:90:35:5d:98:36:
         ae:ab:07:0c:ea:e1:5d:56:fb:1b:ca:45:42:d5:cc:01:99:3f:
         27:04:dd:b0:d9:9c:72:3e:b8:2c:bd:69:31:ae:9e:8c:aa:37:
         8e:d9:d6:7f:06:3b:f6:26:d2:e2:56:ae:89:22:2d:fc:72:80:
         33:09:07:e2:e2:ee:c4:49:f2:68:3d:2b:20:86:68:c8:81:c8:
         b8:bc:49:f9:c2:29:dd:24:80:3b:30:5c:fc:5a:89:94:96:5a:
         53:a4:1d:67:3b:25:e3:b9:57:13:7f:98:c9:58:f5:f4:35:e4:
         31:04:5a:8d:98:d1:11:6a:22:d6:6b:46:b5:ea:8e:d2:98:e7:
         f7:89:0c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 10:46:32 2024 by rpki-client on console-ams.rpki-client.org