Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
File:                     S7gN2OW27S9XRVhQcDM-9KFdcis.mft (raw, json)
Hash identifier:          68smoD3hk4vGQR1yHdBH2eQflRqEZF8aih9FaZRqDgA=
Subject key identifier:   F7:1B:DD:33:C1:C1:7B:B3:0A:4F:2B:83:2B:FB:1F:73:F3:AB:2C:23
Authority key identifier: 4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B
Certificate issuer:       /CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
Manifest number:          B9
Signing time:             Sat 23 Nov 2024 04:02:58 +0000
Manifest this update:     Sat 23 Nov 2024 04:02:58 +0000
Manifest next update:     Sat 30 Nov 2024 04:02:58 +0000
Files and hashes:         1: S7gN2OW27S9XRVhQcDM-9KFdcis.crl (hash: eOt1RvLymgqGFqn0OowZf+9RBFUJcNH3hZPzkz+ASQs=)
                          2: 2B752026906B11EE8F088143C4F9AE02.roa (hash: pmbJAheNFOhxQQhbXBEozs5HvMW28O8cu4rrDKnfYtY=)
                          3: BBCD5340CDCF11EEBFF83067C4F9AE02.roa (hash: HqTtrPpk2fN7Y95oT4OWfNkqpwA2777ymgSvu6SieTk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl
                          rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
        Validity
            Not Before: Nov 23 04:02:58 2024 GMT
            Not After : Nov 30 04:02:58 2024 GMT
        Subject: CN=674153f2-56f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:02:b9:4c:62:73:8e:0f:ab:d4:5b:40:a1:
                    16:2f:25:8c:17:e4:d6:d7:0b:c8:cd:50:bf:69:94:
                    c2:53:b6:2b:b7:b9:43:4a:ca:ec:2e:81:b2:a1:b6:
                    e3:da:ab:de:2f:78:1d:f8:55:30:7c:b2:72:f1:ed:
                    bc:4f:27:d5:f1:65:87:f8:b4:55:2f:7c:47:1d:ab:
                    c2:63:76:82:ad:6c:01:2e:6f:cd:68:95:03:92:e6:
                    ff:0b:b4:7d:a3:aa:57:36:36:cf:8d:3d:cb:2a:94:
                    ed:68:4d:ce:47:8a:10:7d:ca:f4:ee:59:9d:a6:d4:
                    bf:a9:f6:36:70:60:4b:56:1c:04:0a:a7:13:ec:c5:
                    7f:7f:80:05:56:a7:ce:8d:4a:48:73:7e:78:f7:15:
                    d4:0d:69:4c:8e:0f:22:df:b9:16:ff:e9:c1:d9:1e:
                    61:65:67:72:68:5c:49:cc:e5:e3:c4:32:98:28:69:
                    01:62:f0:ee:43:ab:8c:78:cc:9a:98:ee:40:6b:4a:
                    3d:66:37:f8:ba:35:ba:12:03:b9:19:96:07:b6:40:
                    32:57:54:f3:c4:16:d3:31:9b:96:c3:ba:76:8f:b0:
                    c8:ce:bd:2d:82:fa:40:23:db:bb:92:89:9e:84:44:
                    35:59:27:63:65:64:a9:e5:6f:1c:53:fb:e5:37:a8:
                    b1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1B:DD:33:C1:C1:7B:B3:0A:4F:2B:83:2B:FB:1F:73:F3:AB:2C:23
            X509v3 Authority Key Identifier:
                keyid:4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:92:23:2f:ce:ea:6f:1c:08:59:6f:6a:9d:40:9a:0b:df:
         cb:cc:d4:4c:2a:7d:ab:85:94:a3:74:dc:ea:34:67:ae:05:54:
         3a:30:79:07:89:90:32:66:51:53:52:5b:1e:93:e8:33:26:35:
         84:ac:33:10:a3:2b:e1:5f:e7:92:b3:fd:9e:41:55:9e:16:38:
         3b:b2:fa:53:a3:e1:82:a6:cb:8c:2e:b8:68:b9:d6:13:22:9b:
         a8:9d:76:6e:f8:3c:1b:fe:96:76:a3:a7:65:d3:e6:89:ba:07:
         18:01:da:be:7c:54:a3:52:d4:8d:8e:64:a0:3b:b0:86:c2:09:
         19:3e:8c:af:4b:6c:f5:a1:24:e5:e0:c9:e7:c7:0c:70:ef:86:
         78:60:f4:18:07:5c:a6:19:ce:d6:f4:54:4f:bc:d9:02:1e:cc:
         28:52:aa:8e:21:8b:6a:30:f6:ce:08:da:14:46:b5:16:b2:2f:
         a5:94:99:2c:e4:6a:ee:72:e0:4d:93:23:7f:5a:95:f7:50:12:
         06:57:22:9c:1a:91:1e:6d:05:29:31:3c:5c:94:99:02:61:58:
         4f:d4:b3:6c:c3:91:3b:d7:be:ea:cf:34:1c:4e:c1:8e:cb:69:
         3a:87:95:1d:9c:fb:5a:54:de:b0:1a:5f:4a:4b:76:4a:e3:b3:
         f2:be:7d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org