Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
File:                     xpA79e8aQHD8mDw02cUDz0MT_Is.mft (raw, json)
Hash identifier:          kKrKJmE8bD143FgyBhNtecuNitvcSxbXpKxoBplov4Q=
Subject key identifier:   0A:26:B0:91:29:CA:72:D8:39:C0:70:F4:DF:16:FB:C7:D9:D5:6E:43
Authority key identifier: C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B
Certificate issuer:       /CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B
Certificate serial:       04A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
Manifest number:          049F
Signing time:             Fri 22 Nov 2024 23:31:45 +0000
Manifest this update:     Fri 22 Nov 2024 23:31:44 +0000
Manifest next update:     Fri 29 Nov 2024 23:31:44 +0000
Files and hashes:         1: xpA79e8aQHD8mDw02cUDz0MT_Is.crl (hash: R4PlX4HDC2i4INYbULMcN47raLuVH5P/U5pUOdAdwAU=)
                          2: ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa (hash: n4qbIc5i3kLkXS9yMK9sKanURu/yHl+PFiYDGaralVA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl
                          rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B
        Validity
            Not Before: Nov 22 23:31:44 2024 GMT
            Not After : Nov 29 23:31:44 2024 GMT
        Subject: CN=67411460-64b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:90:8b:2e:e3:0c:a7:05:e2:2c:7e:4f:de:
                    69:9f:5c:de:a5:ac:07:4c:24:7b:fe:4e:a3:0a:ec:
                    bd:5f:e1:54:94:9f:fc:6b:00:58:70:3c:74:1e:d8:
                    50:82:1d:52:2e:53:13:bf:be:61:10:0f:e3:b4:02:
                    53:79:0a:1c:09:a0:4a:f1:9f:0f:01:67:6b:89:de:
                    3a:2c:b8:3b:79:42:3f:4e:bf:9b:3e:f9:b5:97:08:
                    49:cf:52:ed:06:95:a4:88:2a:fe:42:6a:a5:49:b4:
                    96:eb:35:98:3a:59:ba:ad:e2:a0:92:a5:8d:d4:78:
                    12:81:cc:27:06:97:cf:75:93:4b:a1:0f:62:3f:36:
                    d8:d9:79:d5:b7:9a:2f:2c:08:e1:d3:b2:d0:30:a2:
                    0d:e1:a3:c9:a3:e6:16:23:74:8a:2c:97:0a:c2:af:
                    b2:51:e4:b1:ad:bc:2c:87:df:05:0c:8d:47:7c:b7:
                    e0:94:72:99:37:c3:26:df:92:93:ca:52:83:0e:75:
                    b3:86:6d:02:54:68:1b:11:fc:cb:69:48:26:cf:18:
                    5c:cb:fe:20:8b:76:83:d8:06:d7:c4:d9:48:28:e6:
                    95:bf:7f:8a:58:07:9d:9c:d0:e4:50:11:99:e0:b8:
                    aa:33:bb:1b:93:e3:6a:d4:d1:c1:5e:90:f3:a0:ce:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:26:B0:91:29:CA:72:D8:39:C0:70:F4:DF:16:FB:C7:D9:D5:6E:43
            X509v3 Authority Key Identifier:
                keyid:C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:62:59:82:b8:c7:99:61:6a:51:92:05:03:fe:35:6b:bf:13:
         4f:e8:9d:fa:7c:3d:20:8e:fe:54:55:f6:0b:ae:34:d2:74:4a:
         b2:ec:a6:5e:b1:05:ae:fd:6b:e5:04:86:e2:61:73:0a:a8:cb:
         51:79:67:34:0a:51:2e:a4:60:53:fb:97:49:80:d0:6e:ea:a5:
         28:0b:b2:8a:0a:57:eb:15:c9:a6:6f:f4:7e:03:d7:be:f9:91:
         20:9f:c3:e3:a4:04:d4:7e:5b:76:03:fd:48:d9:3e:3e:4d:24:
         9e:c5:a6:9f:2c:13:46:51:da:89:c5:86:4b:e6:2a:06:60:2c:
         0f:e4:01:64:1e:fe:1f:06:37:e4:7e:39:b7:d5:e3:18:d2:4d:
         35:6d:43:b7:d5:77:6e:79:23:88:87:be:10:69:79:94:88:05:
         97:72:33:76:2e:95:7e:cd:47:93:a3:25:99:ae:be:e3:e5:bc:
         0f:e1:40:91:ca:7f:4d:d4:a1:4b:63:6d:91:38:1f:29:c1:ab:
         14:c0:ec:5e:c7:a3:a9:df:8c:52:c7:dd:de:3a:db:08:92:64:
         56:ff:e6:d7:a4:4a:8c:c3:27:b4:c0:23:09:bf:f5:e9:db:e7:
         93:1b:0e:ce:25:df:f3:17:30:a0:a0:2e:3a:fc:fc:de:31:2d:
         a5:1f:0b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:31 2024 by rpki-client on console-fra.rpki-client.org