Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft
File:                     7A443962573EC01D5131651F90F46DA19AFC21D2.mft (raw, json)
Hash identifier:          n3XJCxDsVyXX6exPAsYdyC1z7JVIEWcAKlncbcRw13k=
Subject key identifier:   3E:88:DA:3C:1A:CE:11:90:1D:AA:F2:E5:FC:50:7F:34:13:65:B4:29
Authority key identifier: 7A:44:39:62:57:3E:C0:1D:51:31:65:1F:90:F4:6D:A1:9A:FC:21:D2
Certificate issuer:       /CN=A917447B0000/serialNumber=7A443962573EC01D5131651F90F46DA19AFC21D2
Certificate serial:       520614DAAABC73F80A70C7990B0DE644469CE734
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft
Manifest number:          58
Signing time:             Sat 23 Nov 2024 16:49:53 +0000
Manifest this update:     Sat 23 Nov 2024 16:44:53 +0000
Manifest next update:     Sun 24 Nov 2024 17:30:53 +0000
Files and hashes:         1: 323030313a6466343a353134633a3a2f34362d3436203d3e20313533333436.roa (hash: 1C3rbFzudLCdfutKbgqgtRQRfEtQCAigc6gLtTheXZU=)
                          2: 7A443962573EC01D5131651F90F46DA19AFC21D2.crl (hash: aMIOPNVefj4A7kMtIYEbJ628HrtGCe0ZpwTGymkqNJ8=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 17:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:06:14:da:aa:bc:73:f8:0a:70:c7:99:0b:0d:e6:44:46:9c:e7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000/serialNumber=7A443962573EC01D5131651F90F46DA19AFC21D2
        Validity
            Not Before: Nov 23 16:44:53 2024 GMT
            Not After : Nov 24 17:30:53 2024 GMT
        Subject: CN=3E88DA3C1ACE11901DAAF2E5FC507F341365B429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:56:35:86:fb:56:22:1a:ee:49:6a:ea:31:
                    4c:94:e8:25:44:b4:1b:b5:16:57:6f:24:7e:f7:99:
                    a5:a1:22:92:15:be:1a:7f:d8:4e:5c:5b:98:e4:f5:
                    b3:df:df:e0:6d:2e:7e:9d:61:f5:7b:49:7d:3e:a4:
                    dc:5c:b3:1f:b8:75:d0:c7:7b:be:1d:47:19:69:97:
                    6e:da:1b:f9:67:c1:42:5c:fa:5d:2e:01:d5:0c:03:
                    fd:e0:08:d2:e5:30:15:e8:d4:d2:d8:9e:38:90:35:
                    25:7c:06:53:f2:41:67:bf:e7:77:38:0b:9b:3f:86:
                    62:38:36:0b:66:50:d5:55:c2:56:04:f0:af:9e:5b:
                    ac:bc:09:e5:35:c0:e5:30:f7:3b:a9:1b:30:bc:84:
                    ae:fb:60:86:97:6a:31:37:84:dd:e4:74:62:e2:96:
                    fb:ea:91:81:c0:d9:8f:98:ee:ac:4e:5a:85:c2:09:
                    b2:ca:97:01:da:36:f8:8a:42:d7:e8:f1:83:2e:64:
                    8d:73:ff:b3:9d:9a:9f:38:f2:e4:57:9d:27:61:bf:
                    39:48:c3:88:ac:91:d5:88:cf:c1:db:8e:7d:18:0b:
                    22:48:37:fe:05:5f:c8:89:44:1a:87:4d:66:6e:ce:
                    2c:95:a5:a8:6d:32:fe:bb:a1:f1:d1:98:34:fb:62:
                    96:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:88:DA:3C:1A:CE:11:90:1D:AA:F2:E5:FC:50:7F:34:13:65:B4:29
            X509v3 Authority Key Identifier:
                keyid:7A:44:39:62:57:3E:C0:1D:51:31:65:1F:90:F4:6D:A1:9A:FC:21:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ee:99:84:ba:90:63:d6:0d:7d:82:fe:bc:33:1f:31:97:22:
         90:33:67:85:dd:64:10:80:7b:9c:43:59:68:f0:73:1c:38:a8:
         a2:17:4d:a7:ac:f3:80:e6:47:ad:34:e0:57:c6:a6:b7:6d:10:
         f4:38:4e:3d:ae:1c:62:5c:02:3c:59:5d:5e:cb:65:39:21:3a:
         8c:19:4f:87:2e:a3:d6:c9:c8:8b:8b:ce:d0:e1:0b:89:90:18:
         b7:c9:f7:71:a2:b5:fc:21:ce:6a:d3:87:53:13:d2:48:61:d8:
         7a:8a:8c:e9:2a:65:69:d7:bd:e1:93:5d:be:05:4d:2e:f3:22:
         6f:71:81:da:2a:10:82:c9:62:0a:fb:dc:ff:44:1c:c8:5a:5d:
         33:43:cc:21:85:5c:00:9b:93:cc:8e:11:80:74:ee:c7:07:27:
         8d:11:24:99:80:98:e6:b5:1b:7e:56:59:ae:9d:59:50:cc:1a:
         1d:5c:b9:5b:e7:9a:67:c8:76:f4:70:60:12:dd:eb:c8:92:20:
         1d:5e:f5:2c:3c:6a:25:8a:4b:c8:62:11:6a:8b:13:5c:61:03:
         9d:20:9e:ad:0b:85:e5:09:d6:bf:a0:4a:d5:cf:a7:fd:51:e8:
         58:dd:1e:f3:69:79:3a:1f:63:bc:70:c2:1f:45:55:0e:f9:64:
         14:ef:35:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:14 2024 by rpki-client on console-ams.rpki-client.org