Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
File:                     0KOmnirBDCwQU_cvdJlH7CK5w80.mft (raw, json)
Hash identifier:          zSkkeRodevlwYceKz5wQ3qSWML1z2JVFdTVoapYNqJ0=
Subject key identifier:   E5:B7:F4:C3:F2:E0:6C:03:C4:60:B8:86:A7:33:50:10:D5:90:35:8C
Authority key identifier: D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD
Certificate issuer:       /CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
Certificate serial:       099F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
Manifest number:          0993
Signing time:             Fri 22 Nov 2024 19:50:10 +0000
Manifest this update:     Fri 22 Nov 2024 19:50:10 +0000
Manifest next update:     Fri 29 Nov 2024 19:50:10 +0000
Files and hashes:         1: 0KOmnirBDCwQU_cvdJlH7CK5w80.crl (hash: N76aOCwDKb1UI5WchUkHSRYQeePLGa2BRaK5IQOuPFk=)
                          2: 077A609E183911EB9C11C27CC4F9AE02.roa (hash: lHNUn3qhCDMLjYun5pZyzjQa0Wgz5yYNFudFtXTHv5s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl
                          rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463 (0x99f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
        Validity
            Not Before: Nov 22 19:50:10 2024 GMT
            Not After : Nov 29 19:50:10 2024 GMT
        Subject: CN=6740e072-1d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:1d:17:59:18:24:89:21:93:be:cb:d9:06:
                    68:a9:00:32:08:4e:47:e6:ae:7f:81:3f:9b:b5:f2:
                    cf:cd:ff:6d:e1:91:ba:bd:65:8d:eb:94:d8:77:80:
                    3e:7a:48:a1:fa:f7:d8:e6:79:a6:e8:8c:d9:88:46:
                    9f:7b:4c:15:38:0b:cb:39:85:f9:22:fd:33:80:75:
                    73:a9:fb:8e:4c:f5:f2:c4:d1:5a:e0:0e:e8:5c:95:
                    87:df:42:87:bd:ab:28:79:b5:b7:c1:85:ac:1e:c4:
                    03:3b:49:4b:32:86:cc:34:f6:67:1a:cd:5d:60:a4:
                    b6:9c:cf:c5:9b:1a:37:4e:e1:7a:d7:e7:08:f3:07:
                    4d:a6:14:53:f9:bd:5d:7a:f7:e3:c2:78:a9:3e:73:
                    07:bf:5d:76:61:c2:33:ef:f8:60:2e:80:1d:f2:02:
                    fb:86:57:77:01:0e:ec:28:ae:23:c9:78:ad:7f:7e:
                    19:8c:21:db:3e:2a:83:e9:5d:5e:27:1f:4d:fb:30:
                    54:d5:e3:10:13:7a:50:68:c8:0f:03:a6:69:7d:96:
                    b0:9e:13:67:52:63:82:ff:7c:26:28:4b:c0:a3:63:
                    5d:ff:20:75:84:5c:d9:fc:2e:bb:99:e7:14:6e:01:
                    f9:c1:3c:f6:ad:f9:ab:46:7f:fd:ab:ec:18:4d:e8:
                    3e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B7:F4:C3:F2:E0:6C:03:C4:60:B8:86:A7:33:50:10:D5:90:35:8C
            X509v3 Authority Key Identifier:
                keyid:D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a3:ad:11:60:b8:38:79:db:8b:47:43:fb:cd:ee:27:99:bd:
         82:8d:09:74:7b:66:fb:f6:c0:42:c8:c6:98:0b:21:d9:97:cd:
         42:6c:e2:90:a7:8e:e1:59:7c:2b:23:26:ff:9e:ca:93:80:f1:
         88:8d:3f:df:75:f4:18:52:06:20:22:16:ab:e1:a9:19:02:db:
         fb:e7:31:d1:90:e6:df:fe:3f:7c:52:ed:96:3e:cd:0b:fb:0d:
         a0:4a:d9:bd:26:fa:63:cc:09:b8:5c:ec:bd:e6:2c:1f:3f:2c:
         d7:38:48:a9:01:6e:aa:1a:2d:bb:85:96:5b:09:57:8d:e3:ef:
         9e:9e:f2:8f:9a:2e:2e:2b:15:6d:a4:8d:fd:81:9f:d3:c0:05:
         8a:d5:80:21:80:ee:0e:60:fd:17:da:b4:2e:a2:72:47:e0:88:
         72:17:ea:4b:a0:57:98:87:70:ef:6d:ba:fd:90:87:5b:73:b2:
         7c:cb:1d:ce:ce:56:86:ff:e1:63:ec:aa:8f:ca:1b:e4:44:08:
         32:f2:cb:c6:a7:1a:21:fd:d0:5d:7d:04:01:47:77:9d:b7:95:
         2f:1a:3e:5c:bb:a2:68:e2:fa:2b:eb:dd:f0:73:67:5e:3f:e4:
         70:89:77:be:c2:0c:ce:57:95:99:97:39:71:7e:dc:d3:7d:18:
         d3:59:44:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org