Manifest

$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
File:                     C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json)
Hash identifier:          I0Qf5qTvNG9Dh2GJ//0buEQ3Uv+FGQJc5fLdHr/vePw=
Subject key identifier:   84:26:5A:73:4E:9E:E9:E1:3B:B1:3E:35:DC:9B:0A:27:2C:CF:3A:E6
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Certificate issuer:       /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial:       5F9D801DB3059151F97573F3412177A3EDF6ECDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
Manifest number:          052A
Signing time:             Sat 23 Nov 2024 12:00:01 +0000
Manifest this update:     Sat 23 Nov 2024 11:55:01 +0000
Manifest next update:     Sun 24 Nov 2024 13:04:01 +0000
Files and hashes:         1: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=)
                          2: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=)
                          3: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=)
                          4: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: vkUWGSn8iMCGyONwkvKoj9Bvt5RKmZ8QSuwd17DSam8=)
                          5: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=)
                          6: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: h5d4nm6UDVIM1mHpAmBBMuYbnv7Z434/dGxh/e5XEXM=)
                          7: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: eVVSCidFEMX60BW/nesknQieLs++VQWMtA6mI6tAHsU=)

Validation:               OK
Signature path:           rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
                          rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 13:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9d:80:1d:b3:05:91:51:f9:75:73:f3:41:21:77:a3:ed:f6:ec:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
        Validity
            Not Before: Nov 23 11:55:01 2024 GMT
            Not After : Nov 24 13:04:01 2024 GMT
        Subject: CN=84265A734E9EE9E13BB13E35DC9B0A272CCF3AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:37:a0:1a:d4:b3:1a:52:ef:76:be:45:5e:ca:
                    ca:14:b9:6a:13:e0:6e:90:e7:17:5e:44:85:da:a9:
                    9d:2a:b0:02:50:35:a9:eb:fc:e3:73:2b:f7:55:82:
                    ce:8c:37:2d:52:c1:fc:28:4e:ce:c6:3d:aa:e4:ec:
                    0e:37:0d:eb:96:c9:de:8d:19:e7:6a:ed:55:8e:78:
                    d8:cf:c8:a4:71:25:9f:6a:cb:d3:a6:1e:ba:cf:b5:
                    10:a0:87:02:2f:6c:af:9a:51:21:f9:79:96:11:b9:
                    b3:82:25:6b:23:df:79:dd:cf:e6:83:f8:4a:55:4e:
                    87:b9:a6:6b:27:2f:eb:39:69:3e:74:02:6e:3f:97:
                    9a:a6:62:88:b9:0f:ea:a7:4b:6b:59:2f:bf:e0:64:
                    4a:52:92:fe:8e:07:6c:1e:9c:1f:c6:de:20:76:18:
                    45:2a:e3:70:fa:eb:88:14:30:9c:e4:a0:35:89:6f:
                    9f:36:b2:a4:ca:76:21:ae:dc:bc:63:b4:d4:87:70:
                    4b:82:21:c9:f8:f1:0b:fd:ac:e4:29:0f:1c:d7:ce:
                    88:99:d2:af:0a:cb:4b:bb:8a:75:34:22:86:e8:48:
                    4f:e5:e6:db:f5:bb:f8:e2:64:77:f8:6f:0c:78:c0:
                    e9:43:9c:76:5c:be:58:27:05:7d:4f:56:ec:1b:4b:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:26:5A:73:4E:9E:E9:E1:3B:B1:3E:35:DC:9B:0A:27:2C:CF:3A:E6
            X509v3 Authority Key Identifier:
                keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e0:98:8d:bc:c4:6a:7f:05:5d:b7:01:8c:90:c5:27:ea:8d:
         0b:98:f2:d0:24:6b:69:5e:64:13:35:53:97:11:cf:40:1d:20:
         22:b8:ef:20:f4:83:11:6e:46:35:eb:e1:c9:77:2d:9f:26:95:
         75:d5:33:fa:b0:59:5a:04:f3:b1:a7:a9:22:4f:da:97:7b:20:
         11:6c:aa:0f:c8:12:ca:e2:5f:64:cf:c2:68:78:79:36:b7:31:
         05:1f:ed:e1:c7:db:63:b2:bf:c4:97:f1:66:a8:b6:09:0f:70:
         bd:d1:46:d8:8b:84:97:46:e3:4d:ce:6f:5a:2e:db:30:c0:22:
         66:46:0f:05:bf:83:46:66:3a:31:c3:2d:e9:97:ae:7a:7e:64:
         7b:5a:57:a7:6f:75:25:4b:6f:5b:60:c2:53:43:2b:b5:ab:7a:
         d4:5c:5c:57:02:7e:ff:77:24:d8:3f:5d:5e:b7:5f:56:eb:aa:
         a7:ed:26:3c:20:05:48:c0:20:0e:78:c4:6a:b1:2d:46:e3:87:
         88:7f:f8:a9:9e:ac:db:c4:06:c4:2c:22:d3:8f:2a:55:3f:c8:
         9c:23:71:ac:3b:66:e2:81:32:4f:1c:c5:c0:64:9b:58:07:a5:
         c8:2b:68:03:d2:3d:b1:20:8b:9a:17:fc:81:68:76:62:9c:e1:
         de:1a:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:50:47 2024 by rpki-client on console-ams.rpki-client.org