Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
File:                     4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft (raw, json)
Hash identifier:          yB//8sK2D/3IxaJHD++oCgEE5Ij6nl2LkpQDiVbV7eA=
Subject key identifier:   55:EE:25:6F:DE:B9:88:A0:69:8C:37:71:78:7D:B7:DD:BC:C2:CB:E0
Authority key identifier: E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D
Certificate issuer:       /CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
Manifest number:          01C5
Signing time:             Mon 25 Nov 2024 01:38:46 +0000
Manifest this update:     Mon 25 Nov 2024 01:38:45 +0000
Manifest next update:     Mon 02 Dec 2024 01:38:45 +0000
Files and hashes:         1: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl (hash: ymypRnUu+aGSM4vRhP6iy/eAhoMCsigCvuTdrJ54fkU=)
                          2: 909F94F070F911EDBA42F056C4F9AE02.roa (hash: pVK0XdTrjBptKJEy8yW+YdDJrksJGkGUiYH7tSYKlBw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl
                          rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D
        Validity
            Not Before: Nov 25 01:38:45 2024 GMT
            Not After : Dec  2 01:38:45 2024 GMT
        Subject: CN=6743d525-2e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:8e:55:19:0e:fe:6b:4f:1c:21:c2:0e:d4:
                    98:28:ea:61:48:ff:ee:e7:7f:8c:94:2a:de:53:00:
                    2c:58:49:cd:fe:af:c2:bd:8e:11:61:b8:fa:ab:f4:
                    e8:e6:b7:1f:d8:1f:52:94:41:00:a4:57:9d:a2:89:
                    9f:5f:7e:e9:06:62:49:ce:a5:c2:06:c4:01:1b:e9:
                    bf:f6:40:2d:61:55:83:b4:a3:47:1e:87:2e:4e:12:
                    4f:cb:05:5e:18:b5:f4:cb:0b:e8:ca:ea:16:97:08:
                    e5:ed:7e:2d:4a:25:6d:24:25:1b:d1:41:6f:57:13:
                    f1:37:03:99:22:61:f0:03:37:ab:73:0f:c8:5d:46:
                    17:ac:39:07:82:df:9c:e0:a2:e2:b0:69:72:9d:54:
                    ca:19:ac:c8:52:d3:11:73:81:a4:9e:d3:e9:10:44:
                    36:54:4d:af:9d:26:30:3a:d8:20:6a:bf:7a:e9:08:
                    52:4f:d1:4d:3b:f8:8a:5b:42:53:68:32:33:22:cc:
                    40:85:f0:e7:7e:98:85:9d:9b:8e:fa:11:d9:d4:fe:
                    31:76:c7:62:d9:46:f5:bf:d9:e9:1c:75:ad:8e:cb:
                    09:b3:76:18:4b:72:84:ed:bd:26:77:0f:63:b6:4e:
                    a9:ff:5e:f2:a0:10:98:1e:31:f8:81:90:fb:a3:b1:
                    f7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EE:25:6F:DE:B9:88:A0:69:8C:37:71:78:7D:B7:DD:BC:C2:CB:E0
            X509v3 Authority Key Identifier:
                keyid:E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:73:fe:5b:61:f4:47:a1:1b:2f:ce:47:5c:1d:ee:96:58:bf:
         43:26:78:01:bf:c8:4d:86:48:dd:a3:ab:bb:6d:78:37:87:96:
         5e:5a:c4:58:71:7f:05:7c:3e:c1:d8:5b:2c:2d:da:24:a3:73:
         46:b9:52:68:27:bb:85:5b:00:7f:17:1c:0b:ba:1e:9a:21:31:
         7d:c0:43:4e:30:cc:21:62:bb:ca:a2:80:da:10:9d:05:31:ce:
         5e:b2:c5:2f:f5:b3:ca:f5:e4:49:53:a1:a3:8d:97:c3:2c:f7:
         e1:00:0f:44:c5:b0:04:ff:71:e0:05:dc:7b:b7:68:7d:e1:f1:
         27:e7:8e:ca:db:0d:f6:01:47:6e:23:e4:7a:84:fe:0a:4b:c6:
         a7:d2:59:3a:ea:86:53:22:e8:4b:f3:8a:97:16:63:db:c7:29:
         01:a9:f7:b5:65:67:06:c7:69:f9:b3:11:0b:f9:dc:9b:d7:ea:
         6b:0b:22:ba:0a:93:69:e9:e1:f8:5f:bd:4e:0e:51:f4:20:47:
         bb:f3:be:38:e4:98:f9:e2:8c:17:16:0e:4f:f3:49:29:61:07:
         99:70:49:64:4a:4c:c5:01:8c:b8:fa:1c:36:37:e9:c3:af:4a:
         e6:b0:24:22:bf:9c:00:02:91:5f:04:34:78:d6:a6:bf:4b:d1:
         0d:86:56:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:07 2024 by rpki-client on console-ams.rpki-client.org