Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File:                     cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier:          JVBWHA4huXCS6PNwsa/HPOIe9ip7xXw+G4gKOFUIxXU=
Subject key identifier:   BB:68:EE:DE:39:D3:0C:FD:B4:2E:F8:FD:80:43:E6:6E:44:57:27:DC
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer:       /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial:       06E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number:          06D5
Signing time:             Wed 20 Nov 2024 21:37:40 +0000
Manifest this update:     Wed 20 Nov 2024 21:37:39 +0000
Manifest next update:     Wed 27 Nov 2024 21:37:39 +0000
Files and hashes:         1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: 7JHlYmSaNr4yCBqcro8Gh4/8eiG5oTktLsIfxivMM48=)
                          2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: Wg8lhii6fS+ISW5JHYHpOa6pzoQlnpj7gMJiQaNStNA=)
                          3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: qKRjykDno1daJfQQjFQDgdcngx+c1WC/QlLs58bkJD4=)
                          4: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: BkTcuyEezWUWEkhN6v2tftRUBORfyEfzklVup25IVEk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
                          rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764 (0x6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
        Validity
            Not Before: Nov 20 21:37:39 2024 GMT
            Not After : Nov 27 21:37:39 2024 GMT
        Subject: CN=673e56a4-2eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:38:9e:a0:7f:88:35:f2:75:f6:09:65:d6:72:
                    37:de:e2:2c:34:26:ab:4d:e9:4e:e5:41:09:33:46:
                    a3:3b:74:8f:75:b8:d5:d4:32:ae:11:fe:c3:01:e7:
                    c0:28:5c:db:af:a6:54:7f:b7:76:92:50:8d:5f:aa:
                    99:1b:4e:11:a5:49:38:77:f9:38:8c:75:2c:28:03:
                    65:e8:6b:eb:17:56:66:af:49:cf:55:60:2f:c4:4e:
                    b7:80:af:ad:f5:87:5f:31:5d:4c:fd:6a:47:41:8f:
                    67:09:c4:d8:71:3b:75:1e:90:f8:19:62:05:b6:fb:
                    c6:80:bf:67:fd:8a:12:e4:ba:5a:de:b5:10:ba:75:
                    b2:3a:1f:bd:71:62:81:3d:5e:6a:8a:38:44:b7:32:
                    ae:9d:e9:c8:76:f6:0a:cc:d9:34:87:06:29:46:d4:
                    73:df:7a:d9:fa:e4:ee:57:69:39:c3:44:96:2b:ff:
                    90:8d:37:fd:24:4d:61:e5:d0:d4:17:d3:26:7d:24:
                    4a:c6:8e:51:8e:d4:58:1c:39:db:46:4d:08:fe:93:
                    86:13:b1:72:2b:ca:b3:9f:26:3b:3e:7b:6a:a4:23:
                    93:75:46:b0:2b:00:fe:07:a3:39:5d:42:61:9e:b6:
                    05:2b:3a:7f:76:aa:64:21:0f:49:10:72:3a:80:46:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:68:EE:DE:39:D3:0C:FD:B4:2E:F8:FD:80:43:E6:6E:44:57:27:DC
            X509v3 Authority Key Identifier:
                keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:91:11:e4:a3:39:76:a0:ce:fb:1b:a3:02:d9:ee:4a:be:5e:
         f5:62:35:c0:71:70:34:f9:5f:6b:0e:93:16:b2:e7:7c:9c:25:
         ef:74:d6:39:c5:ad:5f:c6:a7:92:f3:1d:ad:4a:3c:49:3b:70:
         ec:0f:6f:e5:5d:aa:1a:f4:2e:0c:ad:6d:0d:ef:40:ca:4c:3e:
         28:5f:81:70:7e:45:eb:e0:f9:e7:b9:95:6b:29:df:ca:2e:0a:
         58:7b:19:89:50:35:df:6d:0d:cf:da:ea:07:3a:da:15:b5:a6:
         a6:20:7d:f1:ba:2f:59:36:d7:80:f5:18:2b:bf:05:e6:0d:47:
         07:70:da:2a:14:bb:f1:5d:a7:6d:02:85:94:7c:5b:65:2d:14:
         d0:05:74:37:28:e9:46:01:67:38:bf:d2:bc:03:ef:fd:67:60:
         eb:0a:23:c7:01:11:b3:17:7b:c1:b2:e7:37:a7:38:a8:b3:37:
         b2:21:69:be:da:bb:c5:f2:a8:16:e1:34:33:19:72:37:f5:a5:
         9f:ec:fd:69:46:9d:74:98:e3:6d:c0:34:17:5f:94:e9:7a:15:
         55:16:e8:b9:7f:eb:c5:4b:0c:a0:8d:fe:20:11:2f:47:b7:1e:
         4c:1a:75:b1:6e:66:2e:8e:40:3e:a7:52:2d:7b:1d:7b:74:d7:
         c0:4b:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:56:02 2024 by rpki-client on console-ams.rpki-client.org