Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
File:                     w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft (raw, json)
Hash identifier:          G2wRkSB6IkeNsLga1JDH7Fcc0QcFpyuEmFWUa4DHkrM=
Subject key identifier:   F0:1A:6E:D4:75:0B:2E:3A:83:E1:3A:8D:DA:A2:3D:63:F0:1B:21:14
Authority key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
Certificate issuer:       /CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Certificate serial:       06A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
Manifest number:          069C
Signing time:             Fri 22 Nov 2024 21:47:49 +0000
Manifest this update:     Fri 22 Nov 2024 21:47:48 +0000
Manifest next update:     Fri 29 Nov 2024 21:47:48 +0000
Files and hashes:         1: w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl (hash: E1QSs3fr/ZUXzVC6CaafXhxCK3QSMy7ZREs9om/Ao3g=)
                          2: 43854B4044D411EB85615640C4F9AE02.roa (hash: CB1GFrJ7tsJbFUks8uu9Gdd9FZeKLh0J1F3T+doC6dY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl
                          rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1697 (0x6a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
        Validity
            Not Before: Nov 22 21:47:48 2024 GMT
            Not After : Nov 29 21:47:48 2024 GMT
        Subject: CN=6740fc04-1bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:ec:11:8a:e6:09:2c:90:0b:c0:99:47:cc:
                    eb:30:38:1a:c0:62:c0:56:e0:32:ac:83:15:b6:f7:
                    7e:17:43:db:f3:04:2f:58:66:21:b7:c3:05:b8:77:
                    ac:00:73:5d:e6:b4:74:bf:1f:f4:1e:e7:8b:20:02:
                    62:d5:0e:a9:70:6f:a9:06:9f:f9:51:3f:0f:86:f2:
                    7a:70:61:5e:33:bb:d4:a7:b5:46:fc:cb:ad:d5:61:
                    4d:8c:78:02:b5:ca:4e:38:28:32:12:ff:69:36:ef:
                    1d:4b:f0:44:3f:9a:54:94:ee:d9:1d:ef:d6:38:8d:
                    ab:1d:b7:22:ae:ad:97:70:92:ce:04:98:df:1e:e8:
                    67:82:76:11:2d:2f:26:a9:bf:37:6d:e7:26:a4:1b:
                    f7:fe:c8:bb:0a:71:47:5b:6e:81:b5:34:1d:fe:d5:
                    33:f4:1c:f0:9d:b4:b0:d7:36:7b:9f:ba:48:8a:4f:
                    16:cd:74:ea:d5:ea:cc:b5:d8:a1:e5:a7:f8:7d:40:
                    6b:c2:49:7f:c6:1b:39:bc:3a:21:5d:74:44:97:a2:
                    bd:28:e5:ae:26:5f:3c:74:10:f6:56:69:77:1d:60:
                    4c:f4:9e:53:3d:1d:c6:4c:4c:b9:1c:bd:9b:30:06:
                    14:a4:3b:e2:ca:6c:bd:6d:70:ad:02:fa:0d:56:79:
                    92:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1A:6E:D4:75:0B:2E:3A:83:E1:3A:8D:DA:A2:3D:63:F0:1B:21:14
            X509v3 Authority Key Identifier:
                keyid:C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:cf:ba:a3:82:2e:6f:d7:d7:4a:a4:c1:9b:01:62:e5:e4:57:
         41:a6:0c:e5:53:cb:bc:96:cc:c3:19:77:c8:5e:aa:97:33:46:
         74:32:3c:6e:dc:ef:cc:cf:46:91:5a:5d:c8:ff:fe:68:f4:72:
         24:01:33:de:52:d4:8c:16:cf:1d:4b:f7:53:96:b2:35:f2:b0:
         0f:8b:f8:0b:68:c1:2d:5f:6a:c4:35:81:b1:af:7e:af:bb:4f:
         59:2d:57:c7:fb:b0:5a:2e:aa:fd:e5:aa:65:60:09:c9:57:23:
         1f:04:dd:6c:07:c0:fe:29:d7:30:a0:54:1b:80:5f:dd:ef:77:
         9b:28:b0:4a:73:61:cb:82:5f:5c:97:82:e3:4d:5e:77:7b:d0:
         30:9a:c9:ec:0d:06:5f:dc:e8:27:04:0e:36:1c:b4:b1:be:64:
         9a:be:78:39:78:28:65:8a:38:fc:da:59:aa:c2:9d:85:a8:78:
         30:05:a6:91:aa:c5:8f:12:a4:9b:be:75:60:18:91:0a:db:5b:
         58:63:1b:9c:7d:c5:4d:1a:a3:1a:75:12:03:72:dc:b6:3a:b4:
         8b:47:2a:68:b4:16:ad:48:07:8f:fe:e6:6a:e0:76:d8:9f:64:
         cc:d0:ec:ff:cc:74:07:f7:d8:49:80:e9:c8:4d:97:da:31:d6:
         4a:c9:11:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:26 2024 by rpki-client on console-fra.rpki-client.org