Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
File:                     UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json)
Hash identifier:          F02eW7Y866lLMv4qPa8bpObrLVR4S7vUIIBKcZ8Ee8s=
Subject key identifier:   F4:DE:0B:8C:53:1C:BE:C9:B3:0E:5A:6D:91:8B:F9:30:21:07:91:05
Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4
Certificate issuer:       /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
Manifest number:          A3
Signing time:             Thu 21 Nov 2024 04:28:00 +0000
Manifest this update:     Thu 21 Nov 2024 04:27:59 +0000
Manifest next update:     Thu 28 Nov 2024 04:27:59 +0000
Files and hashes:         1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: 56l/A2WN2hIDKwNY4UzvpOcXVvSouA+pnBRtKjjzAIo=)
                          2: 5C0778D42FC011EF8A6D832FC4F9AE02.roa (hash: KcSGSJdJ4hjBIrByd6Jh9h10gk3ySnfjjKKxTLLFHX0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
        Validity
            Not Before: Nov 21 04:27:59 2024 GMT
            Not After : Nov 28 04:27:59 2024 GMT
        Subject: CN=673eb6d0-8896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:17:1f:64:ef:bf:61:a0:d2:09:da:51:76:
                    d4:8e:24:c0:14:05:1c:5f:97:8b:78:b0:a4:14:30:
                    7e:b3:a0:c4:fd:b2:2b:f9:a1:b8:63:f2:04:c1:dd:
                    14:db:44:e3:b7:e3:bd:e7:b8:3b:ec:5d:60:cf:a2:
                    cd:53:54:db:15:c8:5a:67:04:2c:b6:d3:eb:12:ea:
                    4c:ff:b1:6b:06:ab:16:28:5d:f0:57:23:c6:67:7e:
                    7f:3e:0e:7b:01:f7:ed:bd:aa:13:8b:a4:07:10:04:
                    d5:7f:80:28:ee:88:20:78:0e:75:b9:6c:8d:87:c2:
                    f0:c7:29:6c:d3:97:e7:dc:f0:2e:c6:37:1a:f2:2f:
                    fb:31:b1:f0:90:31:7b:19:3d:60:1a:80:c0:92:52:
                    25:b3:9a:03:5e:ec:b2:15:82:47:a1:90:42:49:4d:
                    29:32:d8:ff:16:d3:b2:80:e9:4d:95:9c:a0:62:50:
                    96:2e:bc:05:61:2b:51:0a:e1:56:44:bc:fe:7f:93:
                    f9:5f:53:7e:51:b8:e9:28:2a:4f:4d:34:a6:c5:4a:
                    99:5e:7b:86:35:a6:c9:c3:ba:a5:3d:ff:18:19:9a:
                    1e:f9:ca:f3:8a:cf:d2:f9:4e:a4:e7:1a:10:b7:f2:
                    ca:d5:97:1c:f0:2d:ba:30:9e:4e:71:05:ac:55:18:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DE:0B:8C:53:1C:BE:C9:B3:0E:5A:6D:91:8B:F9:30:21:07:91:05
            X509v3 Authority Key Identifier:
                keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:34:52:c7:b4:5a:e3:dd:3d:a1:2b:4d:ad:3e:9d:ff:e8:fc:
         de:31:1f:20:5c:93:6d:f7:d2:92:2c:9d:92:b0:b1:83:04:ec:
         5c:75:d2:e5:1c:4d:ab:57:58:4f:24:d2:17:ed:3e:b1:f3:39:
         99:89:6c:63:ed:9b:19:4d:cb:4e:9c:a2:0e:a0:07:80:ab:52:
         37:f7:32:30:ca:11:1d:8e:bf:37:d4:ef:37:f5:ed:9e:7e:a9:
         61:51:32:87:3b:6a:f0:f3:a6:dd:65:c4:e8:ce:bd:ec:27:ad:
         8e:c6:94:20:8b:27:ab:d6:fe:43:68:a5:49:59:a0:57:40:33:
         37:37:4e:18:1e:9a:6d:fc:03:42:41:d2:d0:f5:ab:41:0b:84:
         9e:fd:92:7b:d3:94:38:68:fb:b2:92:99:e4:d2:74:b4:c4:29:
         8e:50:29:f5:05:80:3d:72:43:39:82:c8:0f:12:fa:dc:bb:6e:
         c4:37:d6:98:ae:5f:bf:4b:26:02:4b:34:59:c3:35:4d:b5:94:
         1d:01:6c:95:2f:fd:64:ff:ed:9b:2e:6f:ef:d5:fb:25:3b:29:
         63:c9:7b:df:e2:6a:68:87:ef:dd:7d:c8:c5:cb:1e:2c:f9:94:
         0e:79:d3:6a:3e:5a:fa:f3:4c:1d:da:7a:68:25:87:7b:68:fd:
         a2:97:42:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:22 2024 by rpki-client on console-ams.rpki-client.org