Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
File:                     hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json)
Hash identifier:          BZ+/viVs/SmV+8TrwsDnP/WI3SjO48PQeT6MAU9LpJg=
Subject key identifier:   6E:9F:49:D1:AA:55:5C:92:2D:36:31:B5:50:22:0C:0A:F1:EA:B8:0D
Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC
Certificate issuer:       /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
Certificate serial:       033F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
Manifest number:          033C
Signing time:             Sat 23 Nov 2024 00:36:50 +0000
Manifest this update:     Sat 23 Nov 2024 00:36:49 +0000
Manifest next update:     Sat 30 Nov 2024 00:36:49 +0000
Files and hashes:         1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: MKf9h4RjfjCW7IieqifRVOy2D3jPy9vv7SjBtxAu6JU=)
                          2: 162108BA9A5A11EC951D391BC4F9AE02.roa (hash: hUshbpYhNh9vhjlUeV7gU/px7/jJpf/a6PfKWwWwlPs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl
                          rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
        Validity
            Not Before: Nov 23 00:36:49 2024 GMT
            Not After : Nov 30 00:36:49 2024 GMT
        Subject: CN=674123a1-ea80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:1f:4e:20:7f:5f:9d:ef:bc:b4:55:fd:ab:
                    94:5e:e2:aa:e6:83:79:8c:09:ac:ce:45:49:eb:57:
                    49:52:16:bf:32:c7:b7:2c:09:69:4a:6f:d6:c8:48:
                    ef:99:01:37:ed:dd:d5:3b:a4:39:99:f0:56:4e:16:
                    c0:28:d5:48:55:02:71:94:f8:10:aa:2f:6a:b8:52:
                    e9:21:16:74:78:44:7f:1f:c0:6e:9f:c0:c0:2c:5a:
                    65:10:39:56:e8:35:d1:1f:e5:ec:8a:27:8f:d3:3f:
                    b2:cd:90:e7:28:84:fb:64:ef:c7:b2:d4:12:eb:f9:
                    c8:2d:93:36:44:b5:07:f3:ec:7b:4f:b6:5b:80:a1:
                    26:f3:0f:e1:7a:7a:2c:8a:16:6d:cf:42:90:80:df:
                    01:69:15:c7:74:da:28:e6:26:90:ae:0a:3f:f5:f3:
                    23:0b:45:c8:b9:47:a3:9b:33:8b:eb:3f:fa:2e:51:
                    0a:a0:da:46:0b:47:66:93:be:98:1b:92:e9:26:fb:
                    de:0b:57:8d:d8:d9:58:6a:94:ed:9e:0f:2c:79:31:
                    e5:eb:51:cf:59:fb:d4:bf:b5:c1:a8:a7:58:6f:bb:
                    42:64:ed:33:cf:b8:ca:83:c9:ed:b6:fa:f3:5b:6c:
                    ea:51:3f:54:4a:26:47:cf:51:ad:80:42:86:f9:4d:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9F:49:D1:AA:55:5C:92:2D:36:31:B5:50:22:0C:0A:F1:EA:B8:0D
            X509v3 Authority Key Identifier:
                keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4f:82:bc:6e:5d:ca:f2:b9:a0:67:70:c3:e2:17:1b:bd:4e:
         99:5a:d5:64:e4:4f:2a:b8:8c:5b:0b:1b:68:ff:b2:0c:9e:b1:
         d4:fd:84:81:6e:c7:89:b6:c6:aa:50:69:ea:74:cf:76:4b:c6:
         5e:2e:32:46:dd:97:2f:00:86:7d:c6:aa:d7:03:50:c5:cb:a5:
         95:55:94:35:ab:ec:d9:ad:69:6f:f7:aa:5c:8d:af:17:b9:07:
         c9:87:36:9b:5b:18:f1:b2:b9:a3:6f:19:b1:52:34:5d:23:94:
         5f:99:e4:61:ca:80:a6:66:67:fc:c3:be:47:02:82:97:51:8c:
         8d:1a:a0:30:4b:b5:a2:16:37:bc:17:9b:d3:dd:bb:41:81:81:
         ef:88:40:b9:3e:24:6e:27:a1:14:f7:30:e3:82:77:7c:d3:94:
         e5:03:7c:03:64:51:d8:0f:50:0b:85:46:f7:bc:e2:b4:76:f4:
         05:0c:e5:d5:1f:67:b9:18:34:78:1d:2e:43:ed:fb:57:41:af:
         bf:bb:2b:e1:4f:18:02:08:5f:8c:5f:1b:59:b2:cb:bc:5e:e8:
         a6:63:e1:c0:0d:bc:f4:ca:a5:2c:52:2a:fe:76:2f:08:d4:5a:
         28:bd:95:e1:9f:f7:c0:1a:53:99:6e:df:2b:68:ef:02:4e:dd:
         ca:f3:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:30 2024 by rpki-client on console-fra.rpki-client.org