Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
File:                     GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json)
Hash identifier:          yjsIwD8plVFvxw+8ZZbl+4VnuEOvUd/WLiTxIbL2fqA=
Subject key identifier:   C0:C1:9A:AC:08:6E:92:0F:0E:3E:19:42:DC:96:BF:B7:3D:A3:36:0F
Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
Certificate issuer:       /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Certificate serial:       0356
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
Manifest number:          0351
Signing time:             Sat 23 Nov 2024 00:33:18 +0000
Manifest this update:     Sat 23 Nov 2024 00:33:18 +0000
Manifest next update:     Sat 30 Nov 2024 00:33:17 +0000
Files and hashes:         1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: ILsrdKa23XL4bWD3IlUJHl5dx4SWRjdBBJqIeYGHjW4=)
                          2: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: oQqFB4mCK9lOMAaK8N1MQQ3r8ZV/5SIQAc2GEgxu44Q=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
                          rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
        Validity
            Not Before: Nov 23 00:33:18 2024 GMT
            Not After : Nov 30 00:33:17 2024 GMT
        Subject: CN=674122ce-4c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:76:d1:77:7d:ba:77:6f:08:81:d4:d3:84:
                    dd:80:90:e7:7a:f6:fe:04:67:a7:60:a5:cd:b0:27:
                    f7:c2:1e:b5:c7:e0:d5:3e:af:6b:2e:64:45:c7:2f:
                    83:de:4d:a1:68:be:57:f8:87:ec:1b:3a:40:0c:4c:
                    1a:6c:19:45:59:c3:e5:dd:71:fe:f4:15:d0:aa:82:
                    75:c9:d2:8a:c6:4f:b5:70:37:dc:be:f1:8c:2a:13:
                    c3:27:88:0c:13:6a:9e:2b:15:23:49:59:c2:df:ab:
                    9e:a7:cd:1c:14:63:bd:46:10:82:9b:7e:73:0f:e0:
                    20:4b:a1:b9:15:90:cb:dd:fe:8a:59:fd:6f:75:a3:
                    5d:fb:0d:b3:fe:19:9a:f4:4c:da:4d:a6:cc:57:0f:
                    48:0b:04:86:1a:3d:50:a3:ea:34:7f:25:51:05:1e:
                    79:30:e4:c8:b1:e1:b9:c6:23:a4:e6:f7:b4:f3:de:
                    df:19:19:c6:5a:d6:6f:01:83:a3:bf:23:b3:d5:f8:
                    9f:9f:0e:b3:59:af:b3:4d:b2:56:f8:04:93:8e:0d:
                    e7:85:19:0e:98:a1:2b:6d:ba:e9:15:3d:28:3a:1e:
                    87:64:8c:53:f0:38:e3:a8:9c:3a:71:af:5e:c5:8b:
                    00:36:f8:0c:06:76:3c:10:5f:55:70:46:88:11:24:
                    bf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C1:9A:AC:08:6E:92:0F:0E:3E:19:42:DC:96:BF:B7:3D:A3:36:0F
            X509v3 Authority Key Identifier:
                keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:99:38:ab:b7:69:d4:6d:15:bf:6d:84:89:09:11:3a:6b:36:
         16:24:50:a3:ec:6a:22:55:a5:a7:c3:a7:7a:1c:84:ff:30:bd:
         20:ca:c9:ac:cc:54:a0:12:98:3a:43:2d:19:f0:97:96:88:05:
         55:d5:80:92:17:8f:b9:c4:8a:a8:a3:7c:33:01:15:85:15:be:
         4d:5f:de:73:49:c5:c6:77:b9:ed:ff:0e:43:68:2d:a3:28:c1:
         fc:30:49:65:5e:7a:9e:aa:e1:96:15:93:f9:53:9c:c0:cd:82:
         94:e3:4c:c2:15:64:92:e4:97:8b:01:84:16:6e:98:02:1d:3f:
         86:da:72:06:23:d7:b4:d5:1c:c4:ea:b2:8d:a4:70:e9:d6:c9:
         96:c3:20:3c:92:c3:24:f3:2d:7f:09:4c:09:5a:ae:9e:39:df:
         e9:19:d4:ca:51:c6:67:4f:31:79:58:44:25:c9:90:31:48:47:
         c0:71:9c:57:d6:94:36:3d:41:bb:97:06:fb:bb:2d:41:8a:a1:
         f8:07:5e:b4:b4:2c:c9:8b:1a:c2:2b:53:bb:31:a7:1e:22:93:
         4b:db:f6:7b:b7:44:53:7e:c2:aa:74:d2:12:0f:fd:01:33:3f:
         2b:eb:c8:67:ec:f6:6f:3a:02:1e:d4:3f:20:89:45:66:cf:e0:
         d9:34:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:30 2024 by rpki-client on console-ams.rpki-client.org