Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
File:                     KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft (raw, json)
Hash identifier:          AQVGpdfQ8Jv+7OwMt34yaaMg+a3rWueKUd5fMgbNqcM=
Subject key identifier:   C9:7B:D7:13:1D:F2:5D:BF:37:58:5D:E3:66:6F:BE:60:ED:89:7B:07
Authority key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
Certificate issuer:       /CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
Manifest number:          014C
Signing time:             Sat 23 Nov 2024 02:36:36 +0000
Manifest this update:     Sat 23 Nov 2024 02:36:36 +0000
Manifest next update:     Sat 30 Nov 2024 02:36:36 +0000
Files and hashes:         1: KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl (hash: 0H803Azw6UANsrD8R3Hu2FX35X7kxiaW3nGKl7YPgtc=)
                          2: 6AA5FC16905211EE840DED1DC4F9AE02.roa (hash: MC0BNQ8WSdb9k6lw5PW7hJBMQ3Zo5Nq5ihUjlKmX1lo=)
                          3: FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa (hash: RACB3YknB3cdpFyJZW5lQ48vMsl9eTtZug3dtaWvByM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl
                          rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
        Validity
            Not Before: Nov 23 02:36:36 2024 GMT
            Not After : Nov 30 02:36:36 2024 GMT
        Subject: CN=67413fb4-18a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:d3:74:8c:b1:b5:8d:50:fc:34:f1:a5:47:
                    83:80:97:15:82:21:b9:ad:29:27:9f:56:9c:e5:ff:
                    70:c3:da:0c:eb:d4:ca:d3:0b:c6:ec:30:f0:3f:42:
                    31:25:23:5d:5c:f5:b5:44:14:47:9f:1d:a4:86:3d:
                    a1:6a:53:0b:15:a4:af:78:21:d0:9f:55:b6:ac:19:
                    4b:66:fa:ef:e2:8a:28:03:f6:45:00:1d:24:7e:73:
                    2b:a1:93:10:40:ae:c7:25:85:19:d8:13:18:f9:ea:
                    c5:9f:86:d5:55:f8:37:b1:e8:4d:36:9d:e3:b6:28:
                    c2:26:95:47:a7:d8:13:a6:8e:34:66:3c:cc:1a:36:
                    ee:a7:97:7f:65:56:16:9d:39:2e:df:91:58:07:d4:
                    1d:bd:0c:05:89:28:5b:6d:91:e4:89:fd:c8:08:94:
                    6d:a2:51:45:b0:e4:9e:fc:73:e3:13:aa:1d:7e:e1:
                    22:2d:dd:aa:e8:a0:4a:a6:f4:14:64:75:a4:62:f6:
                    38:b6:ce:d4:01:4d:07:ea:77:68:d5:1f:09:81:ff:
                    3d:c9:92:34:48:80:de:c2:49:76:13:dc:2b:17:75:
                    df:fd:8b:7a:4a:5b:34:fe:86:2f:36:ad:96:97:a3:
                    f8:e3:13:dd:3b:15:1f:92:c5:98:61:a8:a6:11:b4:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7B:D7:13:1D:F2:5D:BF:37:58:5D:E3:66:6F:BE:60:ED:89:7B:07
            X509v3 Authority Key Identifier:
                keyid:2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2d:a8:b4:cf:5b:fb:b5:7e:7e:c5:e8:f7:bd:1a:7b:66:d9:
         37:d4:ef:8a:88:02:6b:78:c6:6a:46:3f:67:28:6c:4c:d0:ed:
         eb:c8:74:c8:b6:df:c0:77:d7:b9:ec:57:5f:86:20:3e:4b:b3:
         cc:a3:04:a5:d7:e5:f3:6a:9a:a1:5a:08:f8:c9:05:85:ad:88:
         c6:96:c5:42:ec:0f:3f:ce:8d:66:07:e7:5c:77:6b:05:43:e2:
         4d:d5:52:c5:fe:7d:38:d7:42:23:3c:39:56:4e:b0:e8:67:82:
         15:3e:ef:15:a9:5a:db:aa:47:7b:88:ad:71:8e:af:d2:37:1b:
         bc:5f:62:31:ee:7e:d2:68:ee:d3:0c:88:38:7d:36:d3:e0:c0:
         ab:99:fb:88:ef:15:da:73:33:7b:80:c2:2e:21:b5:dc:4b:1d:
         c6:fb:8e:b0:87:aa:df:a1:0a:ba:15:2d:2b:96:d2:79:33:78:
         14:3b:1a:1b:40:2a:65:fd:5c:10:2b:d6:2c:88:01:53:db:27:
         15:81:ef:88:6b:85:c0:c6:46:7d:87:61:2c:8d:80:d3:e7:b8:
         b3:d0:0b:79:c4:b4:97:a4:77:a3:7b:2c:cb:3f:01:3b:10:24:
         bd:32:51:4d:b1:3b:22:fe:2e:d4:85:0e:ad:ec:6d:c9:12:d6:
         14:d9:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:41 2024 by rpki-client on console-ams.rpki-client.org