Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
File:                     4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json)
Hash identifier:          IJTO32yxAdUIXmJZIRMTFM1Gq+ebTP6eQf6SVvu7bm4=
Subject key identifier:   25:F7:FF:D4:91:A4:1B:06:2D:9E:27:F2:5A:B9:E0:45:38:5C:96:1A
Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
Certificate issuer:       /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Certificate serial:       088C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
Manifest number:          0873
Signing time:             Fri 22 Nov 2024 20:24:36 +0000
Manifest this update:     Fri 22 Nov 2024 20:24:36 +0000
Manifest next update:     Fri 29 Nov 2024 20:24:36 +0000
Files and hashes:         1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: 53WTdCHiu3EzyJzaeNB3zjGUwJ8aSs4e4bXDUS3iw+w=)
                          2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: YmROt2RnH3UdNIAXBylk68JRdbwoGmgzkhxTYT8yZZA=)
                          3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: jI9GJ3mUj7/g+UDfOOrVVqKbgOohmwcRp94iSUpENxA=)
                          4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 65R5M+eBFk+Sri4/ilXTe6yj4G3UYq+q394nSZKR7qQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
                          rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188 (0x88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
        Validity
            Not Before: Nov 22 20:24:36 2024 GMT
            Not After : Nov 29 20:24:36 2024 GMT
        Subject: CN=6740e884-abf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:13:8f:56:2c:35:f1:db:cb:8c:35:dc:da:0a:
                    56:b3:6e:ba:14:9d:56:69:cd:4c:b5:b2:5c:03:38:
                    6b:61:5a:c1:e9:dd:21:92:b1:23:ef:93:dc:d0:45:
                    4b:db:f5:8e:c4:e7:4a:39:a3:7e:68:59:06:76:e6:
                    fd:08:3c:19:14:5a:6c:b0:ea:26:df:d9:18:5f:19:
                    ec:3c:b2:92:27:21:12:69:bc:d0:d1:f0:7e:f4:51:
                    72:c9:bd:6b:e4:7a:c6:db:64:f5:3e:91:48:0a:75:
                    f9:4f:4f:2a:a8:3e:23:38:ca:50:72:72:f7:d8:ce:
                    37:a9:0e:9c:89:4e:af:0f:8c:ae:e8:c7:c1:98:44:
                    72:d7:6b:c4:d3:fb:14:2a:32:81:6d:80:85:2b:24:
                    35:df:e1:74:b1:7c:f7:e2:95:3b:f5:52:d8:9b:59:
                    0e:0f:90:69:ed:af:89:72:ab:ab:17:67:f1:09:87:
                    4a:42:3f:85:36:5f:64:f7:a3:ea:ed:f2:af:12:82:
                    b1:9d:3a:15:44:e7:93:5f:b4:45:8d:a7:36:78:74:
                    b1:17:30:3e:8a:2e:b6:a8:2e:ee:f3:96:f7:cf:d2:
                    b3:7c:24:b7:fa:92:70:2a:5d:67:87:ab:cc:ca:07:
                    02:6d:e6:99:15:b2:28:98:fa:29:fe:9c:fa:91:7b:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F7:FF:D4:91:A4:1B:06:2D:9E:27:F2:5A:B9:E0:45:38:5C:96:1A
            X509v3 Authority Key Identifier:
                keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:bd:ff:1a:69:3c:c3:ed:4f:09:11:dc:8e:54:00:f4:ad:03:
         a2:52:76:3b:44:6c:cc:58:2f:d8:43:12:34:5f:64:d4:6e:4f:
         c0:7e:70:35:7c:27:c8:79:1e:f5:53:2c:88:f2:ba:6d:53:7a:
         54:9c:28:fb:a6:42:80:87:a4:e5:4f:5b:04:8c:35:2b:0b:cc:
         88:13:9d:54:90:74:f7:a8:ae:78:58:51:dc:b9:57:45:b3:0a:
         fe:99:6a:87:77:ae:60:74:f2:32:ad:ac:6b:d5:51:8d:5c:b0:
         52:f7:f2:52:7d:e4:f3:8d:e6:80:d8:cc:bb:90:ce:ee:21:c0:
         83:7c:a3:61:4f:3b:a1:e2:8d:7d:cb:9e:85:5a:f0:98:64:21:
         e1:74:6e:e4:40:88:74:90:06:8f:33:7c:2e:6a:3a:f6:0b:e3:
         64:24:d2:99:0c:8e:81:4d:d7:fb:8f:1d:d4:91:34:29:e3:4e:
         d6:d4:74:12:33:41:9e:bf:09:fa:6d:18:3d:ed:25:28:8a:75:
         e5:d2:56:90:cf:ce:e1:8d:4b:22:28:cc:4d:64:5c:16:f7:82:
         d4:a0:5b:32:e2:77:91:e4:51:c9:20:71:3c:6d:29:98:28:45:
         82:e3:b2:d3:ce:90:d4:fa:c0:d6:2e:ca:7c:ea:3a:86:ea:ed:
         9c:94:a5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org