Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
File:                     2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json)
Hash identifier:          ZXjbmCwvHxge4ZsIMwXH6a1oBj9uzWBcBrsZiTm64Xc=
Subject key identifier:   E9:C6:15:56:36:03:1B:14:4B:4E:DC:97:AF:7A:50:F7:47:25:FE:10
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Certificate issuer:       /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
Manifest number:          0131
Signing time:             Thu 21 Nov 2024 02:52:30 +0000
Manifest this update:     Thu 21 Nov 2024 02:52:29 +0000
Manifest next update:     Thu 28 Nov 2024 02:52:29 +0000
Files and hashes:         1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: aIY7ACaeedowlIbiEXihXhbHxF8C4tnjsElTb1wtzeo=)
                          2: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: YZA05NbdXQqTTqp/56l0zqv1K93ANRNuBAfVzKzDIX8=)
                          3: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: U4XP+q4YcB/6cfAS39rgiX5WO5DuizysSejbMFJaGr0=)
                          4: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: U3r7gOdI0y7v58kpvuRKxIkw0qomkyuS/Mmv5pVcbGs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
                          rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
        Validity
            Not Before: Nov 21 02:52:29 2024 GMT
            Not After : Nov 28 02:52:29 2024 GMT
        Subject: CN=673ea06e-c48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:6f:40:3d:1f:32:4b:98:cf:a7:34:6c:25:
                    d9:fa:35:6d:5b:2b:53:34:20:81:a1:25:14:11:c8:
                    da:ad:15:ef:ad:e2:fb:1d:99:9a:26:38:a6:95:32:
                    61:db:57:e4:d3:74:8f:18:a9:a8:90:77:09:9d:83:
                    15:7b:b4:78:28:5b:0c:53:e2:31:9e:7a:ca:7f:64:
                    14:f1:cf:08:92:06:2d:01:89:44:3f:6b:8b:e5:03:
                    8c:c3:09:5c:34:71:81:b6:a7:d9:61:cc:6a:c9:be:
                    b2:1e:fc:7e:a3:44:f6:44:b1:03:62:53:8b:7f:28:
                    e1:0f:6f:34:6c:a9:f3:54:21:8b:cb:6c:e0:78:cb:
                    8a:5c:a6:82:2a:18:93:3b:b0:ca:29:59:e2:22:54:
                    cc:0b:b5:39:b3:63:c6:38:68:be:47:61:d3:b7:c1:
                    30:cd:8e:87:04:c7:e9:e7:17:c8:ab:54:b0:65:1e:
                    18:00:cf:a1:d1:9b:90:7f:bb:3b:62:b2:71:50:12:
                    04:db:4b:9d:0e:9b:3f:4d:4b:1c:57:19:90:db:a3:
                    1b:d3:48:e1:6f:8e:49:63:51:1d:e3:79:3f:55:23:
                    e7:94:67:51:d4:8b:6c:17:89:87:1c:ed:58:50:14:
                    68:35:0b:02:5b:96:b3:c0:4c:ad:81:9c:0e:45:3a:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C6:15:56:36:03:1B:14:4B:4E:DC:97:AF:7A:50:F7:47:25:FE:10
            X509v3 Authority Key Identifier:
                keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:00:3b:e4:f3:60:8c:05:e6:23:95:8f:55:ff:d1:03:4e:dd:
         7b:c6:8c:40:53:ef:b6:7a:64:09:51:d0:e5:80:e6:86:6f:37:
         1e:a7:95:5b:6f:f1:19:f1:c8:c4:61:38:56:63:91:21:04:99:
         c8:5e:95:25:14:a1:b2:5f:aa:3e:46:cb:56:7d:92:2f:f7:20:
         ed:2c:23:26:a8:bd:59:4b:9b:93:74:5e:9e:43:fd:47:88:eb:
         3f:39:57:09:e7:63:50:ee:51:ae:9a:8e:17:f0:b2:e5:d8:bd:
         55:83:38:66:2d:d3:1a:33:c4:75:42:ce:35:a2:8a:82:2b:c6:
         2a:a8:6a:6d:93:41:d6:f2:0a:0b:ed:45:2a:c6:1a:7a:21:fa:
         af:74:b6:dd:2a:4e:86:19:6a:69:8d:5e:3f:a4:fb:74:9a:b3:
         ec:93:a5:97:23:b9:00:58:9f:bf:05:18:b7:e8:92:ce:f6:69:
         21:e8:8f:7f:6f:0d:15:a5:bd:b2:37:1b:f9:cd:08:ec:33:5d:
         60:08:14:f0:5b:6a:14:4a:d7:00:03:ac:8a:c1:e4:79:f1:40:
         2a:5c:d8:e5:49:9e:a6:87:b6:c0:63:21:a0:3f:c9:c6:ea:90:
         40:1a:00:11:73:96:e4:44:81:c6:ce:46:d1:37:61:f2:9a:24:
         6c:12:dc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org