Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
File:                     mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json)
Hash identifier:          rfN3TV9qU5w2e0yRit2YteYb3EGidf7QcU0rTNM73cM=
Subject key identifier:   3D:E0:70:8A:F5:BA:23:1A:23:6C:8F:5E:9F:A7:F6:3C:67:B5:4F:2C
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Certificate issuer:       /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial:       036C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
Manifest number:          0366
Signing time:             Sat 23 Nov 2024 00:29:38 +0000
Manifest this update:     Sat 23 Nov 2024 00:29:37 +0000
Manifest next update:     Sat 30 Nov 2024 00:29:37 +0000
Files and hashes:         1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: 3XX4Hck8GJjnX6sGZ8ow4olggaEJry/ArGriJ8bjf5Q=)
                          2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: UrbJsMDvic5k1jmHHB0Ko/WCM+KH522o7MbYuPKrfeY=)
                          3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: wYKDxu1d4XWvT7wP1qJaDnfimZ4e4Sw8zO4waVce/8U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
        Validity
            Not Before: Nov 23 00:29:37 2024 GMT
            Not After : Nov 30 00:29:37 2024 GMT
        Subject: CN=674121f2-e5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:d8:f2:14:15:e3:0c:71:96:3a:45:7f:06:
                    d1:a6:fb:fc:64:c8:ce:94:b4:75:97:6b:34:3f:17:
                    e2:f6:a8:02:72:71:c3:8a:07:a4:7c:d5:54:3f:83:
                    84:eb:29:d3:e4:3b:8d:11:af:06:8e:a9:04:d5:91:
                    33:28:80:a4:ed:5c:a8:50:f3:15:39:fb:17:7d:5e:
                    d4:2c:e7:d1:99:01:c3:99:f5:1a:80:31:40:4f:ad:
                    54:f4:14:61:09:07:bc:bc:de:8a:4a:79:4a:ae:73:
                    fe:e1:6e:2a:26:a6:8f:91:1c:61:e2:ea:7f:59:7d:
                    78:a1:5c:e3:10:3a:63:56:74:9b:36:1c:af:de:7c:
                    41:d6:d4:3f:fd:9b:e6:da:8d:15:9f:d9:29:2b:dc:
                    a8:2c:96:3a:f6:8a:a3:4f:b2:31:f1:a3:85:45:9a:
                    a7:88:e8:d3:fd:b0:b4:57:0b:38:95:15:ba:2f:59:
                    d2:96:66:18:70:32:03:51:c9:f0:86:16:b3:57:66:
                    a7:2a:32:26:01:5d:e6:4b:77:9d:5b:30:b3:c1:41:
                    2a:85:37:e2:cb:b1:56:f3:87:89:9c:af:2e:d0:86:
                    2b:d9:d4:88:e1:5d:ee:7b:50:78:e6:6f:38:ac:50:
                    6a:3b:cc:61:1d:92:87:ac:b0:80:0a:27:77:8c:ca:
                    cf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E0:70:8A:F5:BA:23:1A:23:6C:8F:5E:9F:A7:F6:3C:67:B5:4F:2C
            X509v3 Authority Key Identifier:
                keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b1:e6:e6:98:b4:74:96:96:4f:bc:2f:d9:39:f6:fe:3d:f1:
         11:21:ea:5e:81:bf:33:76:5f:f0:7e:a5:6f:b6:35:26:f5:c3:
         39:37:b4:2a:f1:be:1e:ce:ff:57:7f:5a:c6:d3:60:58:11:32:
         f5:e1:5b:8c:90:4b:9d:e2:95:65:47:ff:79:51:73:36:86:fc:
         8c:4f:8a:47:a1:09:1d:ad:50:d6:6e:71:2e:0e:42:d7:0c:98:
         ab:69:a4:a6:46:3d:0f:c6:17:e3:d7:6e:31:c0:06:cf:e7:60:
         ee:3a:eb:43:a1:e2:e0:ef:f9:98:e5:1b:6b:1b:4a:12:68:d3:
         77:95:74:7b:b4:7a:4a:24:e3:ba:9c:3c:50:77:9f:8d:ba:e7:
         da:98:11:1a:5d:94:fb:bd:cc:3b:47:14:50:8c:96:eb:f4:24:
         dd:2b:71:25:64:da:81:08:df:dc:f0:9a:8a:56:fd:f4:77:b1:
         68:1a:61:be:b7:7a:ba:31:7d:ed:4f:e2:44:6c:a4:7b:53:2e:
         5b:dc:ce:c4:48:60:64:bc:8f:9a:34:98:04:04:b1:56:d9:96:
         76:40:26:07:1d:3f:f8:39:38:88:86:45:f2:6f:4a:27:b1:ed:
         d5:57:af:03:3a:fd:1d:a1:90:8a:1e:94:91:58:7d:fe:8f:01:
         f4:cf:64:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org