Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
File:                     IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json)
Hash identifier:          FqmsOT4q5xXQhG8K0xni2sLdSip2U0H3PHkDSZWN4LA=
Subject key identifier:   7A:3C:C4:6F:F4:1C:4A:82:18:93:76:CB:EB:98:AC:19:1A:A6:F9:7C
Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Certificate issuer:       /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Certificate serial:       346B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
Manifest number:          3441
Signing time:             Sun 24 Nov 2024 14:19:43 +0000
Manifest this update:     Sun 24 Nov 2024 14:19:43 +0000
Manifest next update:     Sun 01 Dec 2024 14:19:43 +0000
Files and hashes:         1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: m9JVR7INwP855DbyuigAOO9Ka1Sg2pNJZlxIh34G4XQ=)
                          2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: T96snG6T3ksqfKF7mowlYs05xmmtsddFbccqyfqSTxQ=)
                          3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: aiAqLVoZ6cEM6hY/DjBukcfxFi5I+NxU4FFn5k2CPUQ=)
                          4: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: XONO8AScATR8p+dgN33QWapfnhUPZs7VGzeHh0uX4pc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
                          rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13419 (0x346b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
        Validity
            Not Before: Nov 24 14:19:43 2024 GMT
            Not After : Dec  1 14:19:43 2024 GMT
        Subject: CN=674335ff-0463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:76:59:d7:8c:9f:a1:1e:e0:be:88:3d:3e:04:
                    8d:1b:53:d6:a5:37:17:36:4e:2f:67:7b:01:c3:03:
                    ae:5d:3d:9a:d9:0c:6a:2c:11:eb:1a:3d:72:0d:b5:
                    d8:6e:6f:70:45:aa:41:d3:33:93:fc:03:77:50:bd:
                    b4:65:8c:44:03:c6:7e:63:26:e2:ac:ab:26:fb:bf:
                    56:30:20:4d:dc:71:b8:5a:c5:66:a2:63:df:12:23:
                    00:35:8d:f4:0b:09:ae:99:03:fe:1a:02:0e:42:b7:
                    67:33:7e:01:16:f2:01:5c:f8:33:a8:dd:dc:b8:bf:
                    76:1a:89:47:2e:76:16:7d:77:8f:aa:1d:af:2f:ea:
                    0e:9c:1d:f6:49:c8:fc:a3:12:66:90:36:60:10:a5:
                    4f:dd:e0:31:5b:29:c4:62:e3:d3:c2:48:3c:16:c4:
                    f5:82:02:64:9a:b3:f7:fe:99:e8:2f:04:be:eb:6f:
                    96:54:48:26:f6:8e:ec:58:d2:8d:74:b6:1a:83:c9:
                    64:8e:b5:20:5b:5d:01:9d:4e:df:5d:15:41:a0:0b:
                    48:12:64:c5:6d:94:09:68:ab:0f:a1:87:6e:4b:54:
                    ce:38:10:2d:1b:f1:92:0e:87:92:91:c3:a2:56:d1:
                    19:2e:e7:b8:b3:80:dd:8f:7f:1f:83:b7:91:b3:3f:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3C:C4:6F:F4:1C:4A:82:18:93:76:CB:EB:98:AC:19:1A:A6:F9:7C
            X509v3 Authority Key Identifier:
                keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:05:fb:13:fa:8c:c3:a1:68:2a:e5:21:6b:28:2b:66:55:7d:
         92:05:6a:e0:de:3d:c0:46:ec:f0:aa:e1:b8:3b:65:08:79:11:
         a7:23:f8:1d:c1:7f:ee:f3:5e:8e:6a:67:28:3c:13:f4:6c:75:
         03:72:cb:c1:e5:d8:35:3f:27:35:5e:70:7b:f0:3d:15:29:3c:
         68:fb:b1:b5:7d:1c:ea:a5:52:b4:d3:c3:61:46:1a:b7:64:f7:
         d4:81:31:0c:0f:52:b2:8b:a3:ec:18:3d:c3:db:c8:31:2d:24:
         98:9c:71:67:f4:ef:ba:27:c6:77:ac:1a:7d:9f:d7:01:40:b5:
         7b:61:c3:78:d2:17:16:23:19:f7:31:69:80:19:5a:a5:30:87:
         33:1d:15:f3:95:e2:ed:08:47:47:19:53:7c:61:43:8d:1a:43:
         dc:7c:fd:8c:28:3c:b1:41:0b:4a:d2:da:c5:e9:e8:c5:61:2d:
         b3:c6:9e:03:2e:19:ce:df:42:62:a3:1b:fb:0c:08:98:57:9f:
         56:2b:ba:20:9e:f5:7d:2d:b8:80:f9:ef:1e:8a:95:af:d7:2d:
         f5:0e:25:dd:0e:26:14:24:ee:d0:33:b6:43:83:e5:b9:c3:4a:
         e2:ca:1e:0c:e2:99:47:b9:c9:59:b2:d4:14:7b:ce:20:48:d3:
         a4:b9:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:14 2024 by rpki-client on console-ams.rpki-client.org