Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
File:                     lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json)
Hash identifier:          uIqp1ClEGXARGTI0P59uPIWIRvYIOU1WEzIIX7YxXaI=
Subject key identifier:   1C:4F:DA:8C:96:E0:43:11:CE:19:9D:D3:E9:33:88:9C:0D:31:EE:C6
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Certificate issuer:       /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
Manifest number:          DF
Signing time:             Sat 23 Nov 2024 03:38:04 +0000
Manifest this update:     Sat 23 Nov 2024 03:38:03 +0000
Manifest next update:     Sat 30 Nov 2024 03:38:03 +0000
Files and hashes:         1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: i0RqHHkVadGPptF1hte/ODbWFmxN88mC84+myOvlLJs=)
                          2: 322FAB6057B911EEB3EFC969C4F9AE02.roa (hash: T3vVeNXbYgEGmYA3wiUKCvVB4B5Ys6P3LpVlvVXOPaI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
                          rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
        Validity
            Not Before: Nov 23 03:38:03 2024 GMT
            Not After : Nov 30 03:38:03 2024 GMT
        Subject: CN=67414e1b-ae02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:91:0e:9d:d1:4d:03:54:5d:dc:ad:03:10:
                    54:02:c4:32:af:4d:9c:14:a9:0f:a6:83:9d:e7:17:
                    7f:13:0c:59:c1:ad:30:bb:53:2b:fe:00:bc:68:df:
                    2d:ae:3d:de:49:6c:06:0d:cc:c3:2d:cc:8f:d6:2f:
                    e3:cf:5d:9f:8a:c0:44:73:b8:6d:2e:b7:fc:c3:2a:
                    e9:d2:ab:9e:0b:84:78:73:00:a7:4a:a1:33:7a:a5:
                    2f:6f:af:bc:72:3a:1f:c6:4f:5f:69:96:39:98:1c:
                    88:65:57:eb:56:27:d3:e7:dd:48:46:37:66:48:0f:
                    0b:8f:27:b5:12:3a:35:b5:e4:83:1a:30:a7:77:f7:
                    6f:4a:b0:40:53:88:35:b1:9b:40:b0:bd:66:2e:dd:
                    45:cb:51:a7:a9:95:fb:e1:7b:20:b3:bd:b2:7a:b1:
                    d2:f0:65:f1:bb:16:be:85:84:1b:0b:58:08:b0:09:
                    69:b5:26:6d:c6:9d:78:2b:67:d9:3b:7c:82:65:29:
                    ed:e6:4a:4e:be:dc:32:c9:68:da:73:12:2f:e9:a3:
                    98:b4:e5:82:a7:70:bd:2e:96:ab:1b:27:a3:df:88:
                    9d:c7:7b:ed:ba:6b:83:33:1c:b3:0f:0b:8b:17:5d:
                    cf:91:06:60:cd:a3:02:40:12:4e:11:4b:68:69:83:
                    27:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4F:DA:8C:96:E0:43:11:CE:19:9D:D3:E9:33:88:9C:0D:31:EE:C6
            X509v3 Authority Key Identifier:
                keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:16:d9:7a:8c:51:ff:a8:e5:5b:1a:24:6a:64:de:1c:53:26:
         7e:3c:33:98:8a:40:52:5d:1d:5e:5d:7e:62:8d:fa:d3:02:be:
         45:e3:11:d2:77:cb:ba:4f:d3:33:1d:ac:2f:92:34:d8:b8:ef:
         fd:60:f9:e1:37:52:01:f3:f0:12:18:ef:10:b9:60:91:ee:c7:
         70:4d:ea:72:bb:bc:d2:d9:2e:bf:bd:8d:06:ed:83:17:34:1e:
         da:ce:6f:c8:e1:cd:5e:9f:80:5e:ee:9a:7a:a9:d5:4e:5a:61:
         1a:f2:0b:f7:42:49:f8:58:66:e5:1e:e7:ac:11:ab:d4:05:cf:
         4a:82:bd:0d:4b:bc:41:9a:e1:1f:b0:19:e4:b3:b2:89:7a:e1:
         af:ff:37:c2:03:43:26:e7:9f:0d:7d:c6:3f:0b:05:6d:e2:ee:
         26:10:ea:21:23:36:c7:3d:44:82:0e:d2:9f:8c:0d:8b:18:7a:
         56:ec:95:e4:4b:1d:a1:69:a9:cb:cd:31:a7:3e:3b:8c:f9:6b:
         eb:7a:0d:b4:cc:55:3e:0d:6a:86:fe:cd:f7:8a:0c:65:9b:40:
         d5:d9:5d:66:4e:f0:2e:17:e2:ec:fe:ae:34:3a:db:ed:46:17:
         2f:96:c6:bc:78:3b:65:26:e7:c2:8d:a8:08:9f:22:df:25:dd:
         40:8c:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org