Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
File:                     ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json)
Hash identifier:          vViyDfCWWsBeZ45Fdcvf+apmxNAxXRZ0iywhKi7+b8U=
Subject key identifier:   37:E8:80:04:20:C9:41:C0:70:51:36:4E:F6:67:D2:07:8D:AD:E4:EE
Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7
Certificate issuer:       /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7
Certificate serial:       346B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
Manifest number:          344D
Signing time:             Fri 22 Nov 2024 14:46:39 +0000
Manifest this update:     Fri 22 Nov 2024 14:46:38 +0000
Manifest next update:     Fri 29 Nov 2024 14:46:38 +0000
Files and hashes:         1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: 9O6g3ohXYH/vo4jGJoLcnjYRbna8uCba3dZxaInOO2I=)
                          2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: XLFFyTyQ5aTiK8WXu9gtf2R7+dyEwOo/BwutuE+hG+o=)
                          3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: XDgfDVSO7Gnjq2fHLozwYtS7v1j4tWJk/8XrPXX6330=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13419 (0x346b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7
        Validity
            Not Before: Nov 22 14:46:38 2024 GMT
            Not After : Nov 29 14:46:38 2024 GMT
        Subject: CN=6740994e-d5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:4a:19:a8:a4:ea:2d:35:6d:ca:a6:81:7a:
                    54:01:90:39:99:bf:8c:c2:bf:08:20:e5:94:fc:6c:
                    7b:35:bb:a2:1a:ff:8f:4e:84:4d:f0:a9:8f:3d:21:
                    6f:b3:20:f5:26:01:d9:8a:ef:6e:1b:f9:c1:31:c5:
                    c6:1b:0c:bf:eb:72:4a:0a:a4:89:e4:d8:78:ea:74:
                    af:6e:38:aa:14:94:86:47:65:96:50:3f:e5:4a:1c:
                    d8:e1:b6:cd:2d:ba:4f:72:8e:aa:41:d6:ee:02:2d:
                    13:6d:cb:1e:ce:76:8f:98:b6:b7:d5:f8:5b:8d:3f:
                    22:3f:2d:59:6d:b0:15:8c:b3:a4:a3:de:b0:c0:5a:
                    06:99:45:0e:87:9d:bc:61:73:d3:38:0b:76:c6:a5:
                    93:dd:5b:0b:be:a3:82:17:1f:c6:26:7a:ae:08:ad:
                    e7:72:90:88:b1:57:c1:6d:b1:d9:c5:63:f5:16:29:
                    37:33:b6:78:50:91:07:d9:a5:b5:48:80:32:d9:b1:
                    2b:09:5c:58:e2:33:30:7b:07:28:d9:33:6a:b3:e7:
                    8c:39:43:b3:ec:d8:b2:cd:b4:c5:de:0e:8c:f4:da:
                    48:1b:50:b6:f0:fd:e9:6c:b3:df:b8:2e:bd:c0:a7:
                    68:a5:1a:5a:9a:75:e3:ec:1e:00:16:63:3a:bb:5c:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E8:80:04:20:C9:41:C0:70:51:36:4E:F6:67:D2:07:8D:AD:E4:EE
            X509v3 Authority Key Identifier:
                keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5f:2f:28:05:d8:41:02:e6:c9:31:7e:41:42:62:e4:f6:9e:
         0c:a5:1d:ee:ea:59:8b:fd:3e:46:ae:1b:d7:3f:c7:b4:ec:f8:
         45:c2:c8:95:92:32:e0:e6:55:4a:ee:d6:cc:7f:d4:bc:7f:f9:
         26:28:65:f3:63:59:4d:14:a3:ad:fe:87:94:7c:22:e9:99:97:
         66:f8:16:c3:58:82:d1:6d:b8:98:66:48:9b:a0:d0:14:df:30:
         e5:de:52:c9:9c:c2:53:64:f3:83:a3:34:d4:d6:e1:21:bc:c2:
         77:bd:d2:34:be:3a:f4:bf:36:01:3a:22:30:22:75:3b:41:f3:
         d3:6a:39:81:21:33:a9:ad:42:98:dd:ee:a1:91:95:27:f0:09:
         a9:83:ca:88:6d:b5:3c:3d:d4:4f:ae:0f:b2:88:ed:23:33:07:
         64:bd:15:35:4d:de:2b:b1:56:64:73:62:ea:a5:75:1a:23:3e:
         f8:2b:86:84:b2:3c:32:6d:e8:28:4f:6f:5e:8f:5e:c5:0d:5d:
         5e:7e:f1:a4:44:e4:01:29:5c:09:e0:2a:ab:fd:22:ea:1f:36:
         f0:38:bd:b2:02:64:6c:ee:99:6c:3c:e7:c6:1d:66:21:3e:bc:
         44:c5:2e:c0:be:15:45:cc:56:79:95:09:aa:21:7f:9c:d2:ae:
         d5:9f:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org