Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
File:                     OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json)
Hash identifier:          It9tuSv5WIhR65JhkkycYetS4uNVZg3Rw/wTPIeOSgk=
Subject key identifier:   76:E0:B9:B2:24:D4:39:9D:28:1C:98:2B:A7:66:D9:08:F5:B2:85:97
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       0FC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
Manifest number:          0FA7
Signing time:             Fri 22 Nov 2024 17:29:38 +0000
Manifest this update:     Fri 22 Nov 2024 17:29:38 +0000
Manifest next update:     Fri 29 Nov 2024 17:29:38 +0000
Files and hashes:         1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: CA69q2UI/WsIiLw9jfh43kToMk6R+EXODkcLSz7dp5U=)
                          2: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: iALHLd+5YzK5LOstQ6oyhDwQQiSLhkDuBZ6ChxP5zKU=)
                          3: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: ZuWowoqTwj07kawexIZVSZlZASaou8/UbzARaJNqUWU=)
                          4: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: qGCSs4YlLcFTHUk34r2BgsBt3+2ieINlcsMRB+6cYZo=)
                          5: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: 1qW8PqOKetCMk2x9xmkWWa9Gzva1wDC2Cgrt+Bc+QO8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4034 (0xfc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
        Validity
            Not Before: Nov 22 17:29:38 2024 GMT
            Not After : Nov 29 17:29:38 2024 GMT
        Subject: CN=6740bf82-77c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:9f:ea:c5:bd:da:00:18:0d:f8:d2:98:b6:
                    6b:c4:31:0a:8f:f6:14:27:6c:4c:c3:5d:15:7d:9b:
                    ab:b5:94:bb:42:c6:2e:1f:9e:b0:b8:80:50:ac:8d:
                    7d:99:7f:cb:95:b3:97:2a:d9:f0:8b:c4:5c:30:97:
                    b7:cf:a5:67:53:02:0c:b6:5d:49:00:29:24:a5:ce:
                    8d:82:73:ce:89:b0:f7:eb:03:f0:22:74:bb:83:c6:
                    ff:aa:79:af:4c:31:84:f7:45:69:7d:73:4f:33:cb:
                    3a:d8:5d:b0:40:99:cd:84:69:af:62:8d:5f:b9:ec:
                    10:66:3d:4b:8f:95:2f:40:e3:00:38:b3:9d:5a:07:
                    68:cb:c0:52:45:98:62:a2:a8:8f:d7:7b:c1:d5:6d:
                    d9:5b:dd:63:d5:13:3b:a7:32:82:f4:d8:31:dd:dd:
                    12:fc:cc:12:d1:9b:91:44:d9:3b:47:d7:af:1f:fc:
                    c8:f4:e1:30:43:e3:26:1a:fc:19:63:12:c2:f6:73:
                    0b:5b:fc:65:df:2f:6a:af:30:f1:dc:26:59:c2:8b:
                    e9:38:44:e3:3a:dc:81:9c:fb:5b:ed:37:3e:17:01:
                    81:41:b2:fb:9b:bc:ff:e4:46:ef:06:24:1b:90:be:
                    8e:bd:11:78:9c:96:86:12:c0:07:be:0a:e0:10:e4:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E0:B9:B2:24:D4:39:9D:28:1C:98:2B:A7:66:D9:08:F5:B2:85:97
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:0e:36:bc:58:bf:07:15:43:b5:ef:d7:90:a0:37:7b:38:bb:
         0f:c5:30:bd:b3:13:58:bc:b8:b8:14:93:5d:e3:c1:ca:58:58:
         dd:e4:59:4d:df:a0:f4:5b:b4:b7:c8:97:13:d3:e6:f1:b5:3d:
         70:21:f9:bc:e8:fe:ad:f2:0c:da:03:7a:0e:cf:62:55:95:f2:
         e5:86:c6:7f:5e:58:84:6f:e0:63:d3:f8:c4:6a:16:9b:09:6e:
         71:53:4b:a5:8b:d7:6b:b8:fd:ec:fc:ac:e9:b5:82:ec:6d:90:
         34:a6:d9:6f:64:ad:6b:92:2b:bc:39:92:2c:67:b3:ef:9b:5c:
         a3:01:35:c0:f6:4b:b5:0a:92:94:cf:03:7b:e8:47:97:65:f9:
         02:51:ae:a7:26:a2:cd:a2:15:6a:ec:aa:8d:24:25:1e:d9:41:
         3a:14:98:cc:44:0f:bb:02:14:54:cb:60:1c:66:d4:ea:4d:e8:
         2b:c6:82:68:51:8f:42:69:3c:55:c9:aa:f0:35:4d:3d:b7:e4:
         7e:34:57:da:3e:ff:6f:c2:6c:78:4f:99:90:e4:3d:03:49:0e:
         fe:b3:20:a2:ad:57:5d:8a:a8:97:64:c7:49:d3:35:30:2b:05:
         3f:83:70:cd:f6:71:b1:50:ef:8d:4b:d8:32:a4:61:b1:1c:a4:
         58:ee:3e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org