Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
File:                     ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json)
Hash identifier:          5HdsD4ZGT4o/XyoJTcpMwAi9pAr8NqOzp1N8KCVfBEg=
Subject key identifier:   EE:1B:8F:2E:58:F8:4C:D1:EF:F0:53:DA:6C:E9:8B:05:FD:77:63:C1
Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80
Certificate issuer:       /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
Certificate serial:       07AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
Manifest number:          07A1
Signing time:             Fri 22 Nov 2024 20:48:42 +0000
Manifest this update:     Fri 22 Nov 2024 20:48:41 +0000
Manifest next update:     Fri 29 Nov 2024 20:48:41 +0000
Files and hashes:         1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: FGbm34+qRIc6Q/W1MerQ9pdx+wwxymcg3uVYWzw9IX0=)
                          2: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: 7SJtSkXKrhgxiJ/u+ScdWT/CZ8bW5ltRvm0xbyH8/2Q=)
                          3: B019C596499E11EBA61D7146C4F9AE02.roa (hash: 9WsPzCvsd/JuejjAiVSpINcZRZVtqlKA7kdOF+8fdUE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl
                          rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
        Validity
            Not Before: Nov 22 20:48:41 2024 GMT
            Not After : Nov 29 20:48:41 2024 GMT
        Subject: CN=6740ee2a-14aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:94:2a:c8:1c:79:cf:3c:f7:c4:95:54:07:
                    72:34:bf:44:9e:e6:7b:0c:af:d2:65:03:0e:b0:73:
                    86:7b:71:dd:6f:ea:08:2b:0a:cd:fe:22:10:d0:5e:
                    d8:1c:7e:2c:f4:bf:28:76:a6:79:21:2e:76:ad:12:
                    7f:a0:dd:70:4c:d1:81:80:2a:16:d4:2f:3e:ff:21:
                    5a:17:cf:c3:d1:e0:2c:41:2b:89:e2:3c:54:bb:18:
                    cc:2e:eb:00:8e:1a:48:0c:04:b6:93:2e:99:bc:bb:
                    11:90:76:e1:ef:d7:21:96:32:bf:bc:e9:aa:db:44:
                    4d:b2:f9:89:7d:24:cf:27:61:05:99:d6:17:73:5e:
                    ec:1b:66:08:ae:01:5a:9b:03:68:66:44:66:34:05:
                    9f:28:ec:93:73:fc:1b:fd:ad:68:13:0b:cb:8e:d3:
                    93:86:7a:86:af:53:d5:f0:5e:e6:91:e8:7b:4d:00:
                    28:75:93:fb:3b:6d:46:4f:5e:3f:9b:77:51:b9:a7:
                    73:88:3d:be:e3:ea:37:0c:52:b8:4f:4c:fc:61:62:
                    12:ee:86:2c:0f:19:c4:c7:15:82:9a:ae:0b:79:b7:
                    f4:8b:a7:93:a5:97:8a:fb:cc:b9:9b:77:bf:94:a2:
                    9d:19:2d:53:a0:fb:34:71:ab:7e:77:b6:c7:5e:0c:
                    8f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1B:8F:2E:58:F8:4C:D1:EF:F0:53:DA:6C:E9:8B:05:FD:77:63:C1
            X509v3 Authority Key Identifier:
                keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ca:66:91:01:35:5f:6b:78:e7:0b:32:c7:43:b5:6b:53:a0:
         79:cf:f4:83:b5:3a:4a:cf:f1:42:0b:13:f4:76:96:31:ad:be:
         74:a5:6a:b6:9a:41:73:26:6b:95:12:82:70:4b:dd:a8:68:c5:
         d0:82:59:e5:5f:1c:83:5a:c0:3b:9d:eb:c4:86:bc:84:6d:65:
         a4:ee:d1:34:86:23:99:93:2e:1d:e9:8c:dd:34:44:73:c7:2b:
         77:0c:e1:a5:cb:b1:f6:23:51:23:47:6e:81:79:78:6c:e4:9a:
         35:c4:53:c2:5d:22:d8:1c:35:e0:76:ab:00:7a:f3:08:a0:8e:
         93:32:d4:73:91:56:92:2b:37:e2:24:d5:14:2d:25:f1:48:0a:
         88:58:84:4d:99:75:b3:c7:83:43:58:dd:48:64:d3:d6:29:96:
         52:32:0c:5e:b3:22:c6:50:6f:b5:a6:b0:2d:79:f3:65:7a:d6:
         7a:34:e1:3f:de:fa:e8:94:6d:f1:8f:be:6d:d0:b1:9f:fe:4a:
         8f:0b:8c:b3:2b:25:fe:43:65:a1:55:cd:97:f5:84:29:fd:54:
         34:95:04:69:04:c5:0f:bf:e8:f0:03:38:27:69:78:67:12:03:
         5f:46:39:ed:d4:ca:7e:1a:76:cf:91:a1:56:c5:3b:60:4c:c5:
         49:99:01:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:15 2024 by rpki-client on console-fra.rpki-client.org