Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
File:                     dhdGJegWMtON9iqDtXsDuiiH5vU.mft (raw, json)
Hash identifier:          4xW2auKqtXNevfIGsDBu4Q9OC9/yleLjXxR6XmTVPXk=
Subject key identifier:   E0:2D:0C:7B:9F:8F:7B:96:DB:2D:49:F7:8E:DB:A1:E5:7C:A4:17:11
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       0769
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
Manifest number:          0733
Signing time:             Fri 22 Nov 2024 21:16:54 +0000
Manifest this update:     Fri 22 Nov 2024 21:16:54 +0000
Manifest next update:     Fri 29 Nov 2024 21:16:54 +0000
Files and hashes:         1: dhdGJegWMtON9iqDtXsDuiiH5vU.crl (hash: yeS46DHKSN3kOKuQEhM39Opj+MWh+8yhaP5Hc5i64ZA=)
                          2: 84B9D0540E9711EB9A6C2B3CC4F9AE02.roa (hash: K52xx2W/Mcik5mRxm9U6IvBxrQHGv1YvMxay5SRYJMA=)
                          3: 857A6BC00E9711EB9A6C2B3CC4F9AE02.roa (hash: Wbhsx55tM4N17rZNB2kDgdGFenO9kZRJ8EDE85u0cgM=)
                          4: 824D5E300E9711EB9A6C2B3CC4F9AE02.roa (hash: skDBBc1IQYjn/71iD/DJ7UbJ9x+NBNpWQXWrB0UVp9c=)
                          5: 8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa (hash: 7432gBeXTm7SSnceAfVds2tUmmHfUv6NTFiLUykJYZ8=)
                          6: 8068BF600E9711EB9A6C2B3CC4F9AE02.roa (hash: SVn1VVZ+3ZR8Y8pLIZGfkKYftHZSrg4IHpWCNhJjYso=)
                          7: 21CF5E6C7AF111EF8BC4E684C4F9AE02.roa (hash: Gps/z43B5B8qe0Vu+tEKAfDIlFFm+t3i/AJ3TSaT5Qw=)
                          8: A98668464EEB11EFB3305C85C4F9AE02.roa (hash: o00oY1mvFq1qalSn730w1Zx7f6lSQNkyqzmPEMq0qK4=)
                          9: 1E5945A69E4111EDB7C9020EC4F9AE02.roa (hash: Z/HFFpz8mDokkl/o2tBtR38PdzQxQcSG8DEqsXqHTPU=)
                          10: 830314BE0E9711EB9A6C2B3CC4F9AE02.roa (hash: DUTfkPNp4N1bZnsFkK99J4BS1jT/ORtP1/196UTGt5c=)
                          11: 80F371780E9711EB9A6C2B3CC4F9AE02.roa (hash: kMtbUAPtvocZysI+IcmGjdQ27wvG+yqC0xgvM+0lCzk=)
                          12: 8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa (hash: BH+zzYhH9m8xg0G1VsoxTbjZr1Ti682iQG87sVdEKpY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1897 (0x769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Nov 22 21:16:54 2024 GMT
            Not After : Nov 29 21:16:54 2024 GMT
        Subject: CN=6740f4c6-6a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:8e:e8:ed:a2:52:5a:66:f3:28:99:ee:3a:
                    e1:95:88:e4:64:da:a0:a8:2e:39:30:b9:ba:65:95:
                    df:af:2d:c2:c5:e2:0b:88:94:dc:9e:be:e7:b1:1f:
                    21:a6:9e:23:57:12:f9:09:6f:e8:fa:40:b2:d5:7c:
                    d9:d0:ef:3f:0e:25:14:5d:f5:a3:ca:21:ee:6d:46:
                    cc:39:c9:da:7e:25:02:9a:ad:fc:94:61:66:fd:0f:
                    65:c6:b1:06:05:c7:ab:16:44:f0:92:22:64:eb:01:
                    33:c3:d8:d7:21:8a:8f:ab:71:f3:36:0a:29:93:ca:
                    17:2b:92:dc:10:c4:05:55:e0:6f:b3:d0:16:3a:63:
                    c6:56:6b:6e:65:e3:ab:ab:1e:68:06:9c:e2:77:4c:
                    f7:0c:ec:38:bc:5e:e0:8c:c2:bb:ad:e2:40:5c:75:
                    b5:24:1f:56:ba:24:0a:00:f6:52:3d:70:58:eb:e8:
                    1b:77:c9:b3:0b:44:86:a5:5e:0a:fe:f3:91:a2:01:
                    ff:5d:d2:4b:d8:5f:72:8b:c9:da:f7:63:8e:28:55:
                    1c:71:4d:90:65:5a:a4:ce:58:30:19:14:a5:e0:84:
                    84:41:7b:93:4e:7b:17:47:47:bf:83:80:05:16:c5:
                    45:bd:f8:40:84:7b:86:1d:2b:1c:30:0a:15:54:67:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2D:0C:7B:9F:8F:7B:96:DB:2D:49:F7:8E:DB:A1:E5:7C:A4:17:11
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2f:47:47:c5:a7:50:7d:fb:d3:22:71:8b:a4:fd:77:78:e3:
         4f:ff:29:f4:15:7d:62:46:14:1a:44:72:b5:18:fc:c3:6b:b5:
         e3:04:5e:9f:90:8d:85:66:e4:d0:e3:8b:33:6e:8b:94:71:88:
         78:e8:50:e2:db:e9:3a:96:20:01:70:1b:04:d5:1b:23:31:7b:
         e0:a4:c7:0b:50:8b:9a:bc:c1:19:be:3c:29:50:19:d1:14:8c:
         74:28:e6:78:ec:3c:fb:43:3f:93:d7:f8:eb:2e:a9:e0:84:91:
         30:5c:cd:0e:99:e6:52:e4:07:38:76:da:d3:d9:ad:c9:2c:39:
         bf:f5:6b:44:e9:37:f6:39:45:ab:09:be:a1:82:4c:cf:39:7b:
         7b:64:ad:98:30:32:8b:46:04:d6:89:5b:54:15:7e:98:bb:2b:
         d2:8a:f1:f5:5d:4b:67:70:d3:cf:a8:df:25:8a:95:d5:7d:95:
         c6:54:43:a8:98:b0:a1:6b:6a:0b:af:9a:88:0d:7f:35:2f:70:
         d4:db:ae:d5:7d:67:bc:da:ae:15:2b:a1:c0:98:02:88:60:d4:
         66:9f:2a:9f:cd:9f:10:09:c7:bd:a5:47:f3:6e:37:0c:51:fc:
         8e:83:1a:f1:ea:e2:42:c1:19:00:8e:5c:11:90:ae:99:99:2e:
         22:3a:7e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org