Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
File:                     JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json)
Hash identifier:          ReLrM2dH3Zu7ZggjSVb2EN04AX3pLx5SvQothkjnqH0=
Subject key identifier:   02:45:E2:11:8B:94:1B:E7:8F:A1:92:46:07:92:1F:14:C1:CA:BF:22
Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
Certificate issuer:       /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
Manifest number:          DB
Signing time:             Sat 23 Nov 2024 03:38:39 +0000
Manifest this update:     Sat 23 Nov 2024 03:38:38 +0000
Manifest next update:     Sat 30 Nov 2024 03:38:38 +0000
Files and hashes:         1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: igjV3xpMVzvZDK3lzmhgnTCWyIEu/jftKqtyA8QjPgQ=)
                          2: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: elKim0+kuVj5n91meyvY+LXLxWJNR5sixE2vqJMQIt4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
                          rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
        Validity
            Not Before: Nov 23 03:38:38 2024 GMT
            Not After : Nov 30 03:38:38 2024 GMT
        Subject: CN=67414e3e-22cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:72:3d:81:dd:26:24:60:9f:4b:20:c0:f0:
                    7c:77:df:ca:b4:36:28:03:62:98:bb:5a:eb:c9:86:
                    b6:93:e5:32:a9:62:a0:c0:8a:46:48:28:68:32:ec:
                    fc:df:d8:71:f9:68:13:57:7e:76:1b:30:28:b9:75:
                    5e:0e:b5:7e:5b:bb:a0:51:cb:12:da:6f:19:50:2a:
                    37:8a:7f:d7:71:53:f5:bd:21:e4:de:c2:1e:ae:28:
                    dc:0a:ad:98:2c:8a:bb:44:9f:11:72:d1:4c:9c:27:
                    7e:1a:e3:69:8c:64:b7:97:67:c1:18:be:0c:be:69:
                    dc:2d:e3:3b:fe:76:4f:bb:9d:55:8b:e2:ec:fb:76:
                    d7:fa:53:1a:9c:50:ef:71:09:ea:1f:88:15:d7:6d:
                    c8:ac:e9:71:c3:4d:29:61:ae:70:3d:34:ba:cb:a7:
                    d0:53:17:52:b6:f3:1d:f1:3c:a8:39:7e:ba:17:c5:
                    04:99:be:ec:36:0d:2e:1b:8f:fc:3e:0d:d7:a8:a7:
                    ab:b7:16:cc:43:40:4f:0b:4c:11:c5:30:c4:8f:80:
                    f7:b7:08:49:ed:b3:4f:51:b9:c9:1d:12:f1:ba:80:
                    f3:63:4b:99:29:e5:3a:24:99:71:d0:4b:fe:fd:7d:
                    77:76:c0:dc:a1:95:14:10:92:cc:76:14:f7:56:49:
                    28:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:45:E2:11:8B:94:1B:E7:8F:A1:92:46:07:92:1F:14:C1:CA:BF:22
            X509v3 Authority Key Identifier:
                keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:36:df:91:36:8c:b0:46:e4:58:9a:69:02:46:fc:d7:fc:29:
         eb:72:2b:03:c4:cb:70:af:7f:21:f6:b7:9f:f2:5b:6a:cd:e4:
         54:49:02:13:ca:f3:ec:e7:1b:44:1a:4d:1b:99:3f:12:37:07:
         cb:7b:47:d5:70:ea:70:9e:3d:3c:fd:8d:84:e8:e3:3a:28:40:
         83:90:26:f2:90:d1:f0:43:9e:02:66:44:2b:79:5c:86:ca:0d:
         af:ed:ba:31:06:5c:d1:51:6f:2e:af:dd:4c:35:b6:a9:fc:90:
         98:d2:92:fc:75:cf:39:88:13:90:84:b2:4f:2d:95:a4:58:06:
         29:a6:a6:42:81:50:8e:f6:63:d6:77:ea:bd:8b:d5:ea:bf:9a:
         8e:a1:04:6f:11:38:52:4d:88:47:8a:96:86:46:ca:44:66:24:
         36:d1:ba:f7:d4:66:08:4d:bb:3e:36:3b:de:64:99:03:0c:e2:
         92:22:50:61:7e:16:7d:66:14:64:9f:32:22:9e:67:f6:d0:f5:
         23:96:a0:1e:b4:b3:66:d0:08:5d:ee:5c:ee:40:42:a1:fe:5b:
         d1:61:10:c6:3d:af:40:00:fd:13:da:cc:32:4e:87:65:79:53:
         37:33:aa:ed:8a:16:97:9a:15:57:ba:e7:f7:7b:2f:0c:54:29:
         14:67:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org