Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
File:                     MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json)
Hash identifier:          cTN4GuvunRznybfOdaP5oImbNYR2d1xSl7iVyOHmB/I=
Subject key identifier:   74:20:F0:31:8F:E4:E5:46:80:7F:27:D2:77:DD:DF:DF:85:19:6E:85
Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
Certificate issuer:       /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
Manifest number:          DB
Signing time:             Sat 23 Nov 2024 03:39:58 +0000
Manifest this update:     Sat 23 Nov 2024 03:39:57 +0000
Manifest next update:     Sat 30 Nov 2024 03:39:57 +0000
Files and hashes:         1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: MIkMrIPUaNDEgOfFl6IFROvUnFCRK1W/vD7X9aEi474=)
                          2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: 7H/o9WVNvbIAlbhkr+4Ry+kOFXKkHNIKo5p7Mvq+8NE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl
                          rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
        Validity
            Not Before: Nov 23 03:39:57 2024 GMT
            Not After : Nov 30 03:39:57 2024 GMT
        Subject: CN=67414e8e-d021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:4e:12:86:59:61:06:ec:95:1e:6f:36:a2:
                    8d:ab:c0:69:20:5b:db:ea:31:05:2d:e4:e8:1c:d4:
                    d6:af:5f:0f:ee:1b:de:b7:f2:9a:9b:2e:05:71:f8:
                    26:f7:14:87:26:10:51:b0:ba:d7:9d:45:b0:c3:87:
                    d6:49:e9:d6:40:93:54:ce:ad:2c:77:ab:ae:1d:cd:
                    be:26:a5:5a:02:6d:69:ca:3d:8d:51:6b:f2:ad:03:
                    55:21:d3:a4:38:7a:1b:8d:9b:4c:8e:f6:84:c0:0e:
                    c9:e6:f2:b7:fe:26:89:e1:e4:99:e2:a9:70:e0:e1:
                    95:48:91:19:c5:00:5d:af:f7:d2:03:fe:a8:61:54:
                    9f:37:3c:c9:c1:cb:19:6a:78:87:2a:f0:16:a0:b7:
                    f7:79:a5:15:06:44:9f:3f:fe:90:8c:58:76:64:26:
                    02:2f:02:09:f6:30:42:34:71:d2:15:89:c2:b9:c0:
                    e1:db:ba:c0:46:da:7c:d0:3e:51:e3:8a:fb:c4:c0:
                    3c:a5:b1:60:9a:12:6e:f6:f3:a7:b1:dd:a8:af:85:
                    87:5a:da:b8:9f:38:b5:40:0c:ad:0b:f8:c5:4b:45:
                    af:8c:0b:67:e1:f7:b6:ad:0d:e4:62:ac:59:23:8b:
                    fa:12:5b:5b:62:2f:c0:41:fa:e5:29:ef:df:8d:03:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:20:F0:31:8F:E4:E5:46:80:7F:27:D2:77:DD:DF:DF:85:19:6E:85
            X509v3 Authority Key Identifier:
                keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e4:5c:cc:53:5a:fa:8c:a1:16:b2:e1:e1:b6:58:10:19:b3:
         71:d3:20:f8:89:41:2e:2e:de:e7:77:48:9e:d0:7c:80:67:86:
         cf:df:55:44:1a:a7:6c:3d:41:b3:39:c6:a9:83:76:8f:7e:ca:
         1e:60:21:34:b0:e5:1c:f2:11:08:39:81:68:2d:c2:75:79:83:
         8d:f5:0b:2b:1a:04:90:9b:a0:ec:97:f5:47:c3:79:ea:de:e9:
         2f:05:09:02:44:56:62:62:52:30:f8:59:a2:7b:6c:c4:b2:ab:
         c2:ea:d5:b5:a2:93:39:9b:dc:61:02:3a:97:33:a5:fc:03:8d:
         16:5c:c8:e3:2f:64:69:b5:7f:b0:87:a6:ea:97:ef:5f:a0:31:
         58:1a:55:ba:fc:8c:34:7a:45:bd:2e:27:e1:13:99:fa:cb:b4:
         b9:15:96:41:2b:36:c8:9d:03:1a:89:27:88:b6:a6:75:93:49:
         38:57:cb:ea:15:85:56:e8:41:6d:be:87:d5:42:2e:66:3c:e7:
         f6:50:3c:01:ae:48:33:d6:cc:ad:be:17:23:2a:e8:0c:26:9f:
         9d:13:dc:2a:a0:e9:91:e7:a9:8a:b3:8d:f7:99:06:b8:c8:a9:
         6c:5d:8b:d5:1d:28:f4:7b:9d:6f:b2:10:64:68:92:03:a2:14:
         87:04:4f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:09 2024 by rpki-client on console-ams.rpki-client.org