Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
File:                     nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json)
Hash identifier:          4BP50/+QyBCp2HER9ot/xzXxZFH0dbHlfw0nb46B7is=
Subject key identifier:   5F:54:C9:05:4C:40:2B:D7:B4:CE:BB:B4:8F:EA:27:0B:FA:1A:98:AB
Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
Certificate issuer:       /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Certificate serial:       0970
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
Manifest number:          0969
Signing time:             Fri 22 Nov 2024 19:54:28 +0000
Manifest this update:     Fri 22 Nov 2024 19:54:28 +0000
Manifest next update:     Fri 29 Nov 2024 19:54:27 +0000
Files and hashes:         1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: 8G0oHsYBhTrytK4hhyMlarARKNU+OHB50KKbz6k7ilE=)
                          2: 95A08652730D11ECAB074439C4F9AE02.roa (hash: 8SZ9w1bXpjgmgqCHhkJA4hqFkmJXaJwJe1y4R5qoWpI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
                          rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2416 (0x970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
        Validity
            Not Before: Nov 22 19:54:28 2024 GMT
            Not After : Nov 29 19:54:27 2024 GMT
        Subject: CN=6740e174-393b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:84:78:0f:a8:35:ce:4e:5e:80:21:25:d0:
                    2d:fb:a8:50:d9:e9:07:ca:38:cd:65:97:62:19:3e:
                    e7:54:13:7c:cf:a4:0a:b6:ff:07:20:26:6a:f1:98:
                    86:68:60:47:43:8a:78:38:7c:72:30:a9:5d:e2:ef:
                    bf:5e:d2:a7:ba:51:9f:c3:05:f1:61:cd:3c:33:b9:
                    78:d2:34:56:fd:f1:7c:a8:50:93:ca:b3:f5:85:6f:
                    e7:05:fe:7a:8b:fa:7d:29:72:5b:19:cb:a2:52:1f:
                    ce:ee:e9:1f:4b:08:f9:1a:82:35:65:23:fc:77:c5:
                    17:9a:ca:28:10:17:fd:0f:0e:78:ee:0d:13:c8:e2:
                    4c:87:b1:31:1e:e1:be:4c:d1:c8:ed:61:ab:fe:3b:
                    9c:a5:90:27:33:f6:60:f1:0c:93:a4:66:4c:fb:6f:
                    ce:53:7c:39:37:f2:bd:18:45:48:f9:ab:f3:90:49:
                    59:fe:ed:68:60:06:60:87:04:30:c6:24:77:a2:3a:
                    f7:18:03:53:76:7c:60:87:8a:c9:3c:79:95:48:a0:
                    bf:5d:76:42:ec:24:67:a3:aa:57:75:db:31:cd:8e:
                    50:b8:e5:8f:27:1e:eb:b1:ea:3c:3e:c5:f7:3e:32:
                    bd:7f:fb:41:32:4f:95:ea:89:a6:80:64:93:94:3b:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:54:C9:05:4C:40:2B:D7:B4:CE:BB:B4:8F:EA:27:0B:FA:1A:98:AB
            X509v3 Authority Key Identifier:
                keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:86:02:76:5c:14:c5:07:4d:45:6c:ed:0a:e2:ff:69:f0:b6:
         8d:72:d3:91:a9:f8:49:5d:7f:5a:46:82:61:44:02:e4:42:cc:
         94:dc:a5:61:86:ac:29:36:44:c3:dd:59:55:c0:03:73:c4:f9:
         f7:8b:87:b9:e3:ac:44:33:78:a4:ac:45:35:f3:9f:0d:e2:d6:
         b4:4c:b6:f4:a0:b8:f7:b5:71:f6:45:39:f1:b2:de:2c:38:0e:
         10:55:1d:08:a2:9e:82:61:8d:23:59:66:44:dd:1e:b4:85:14:
         aa:66:99:07:f5:b6:05:c8:68:8e:f0:f6:6c:c8:57:30:7c:ec:
         5a:63:93:68:94:7c:18:ac:e9:19:35:1b:3c:97:57:06:3e:81:
         f9:8a:18:89:85:02:f1:67:7a:a8:7f:e0:43:e8:b2:6b:31:f4:
         90:64:0f:2a:f4:4c:95:66:14:b7:37:7d:71:3a:9c:93:da:ac:
         f1:64:b1:86:a1:a4:83:b4:ad:dc:ed:11:e1:54:aa:da:a9:13:
         6a:3d:b8:ba:d4:6a:63:cc:b4:62:d8:7f:81:5b:90:2b:1c:54:
         fc:51:0e:62:88:fc:56:34:58:f1:94:34:eb:b9:ba:d6:07:bc:
         ed:69:4b:3e:9a:9f:9d:cc:57:c9:7b:c0:ce:77:b0:d0:ee:02:
         6a:c8:d3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org