Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
File:                     mZujdBECimL7UV3PAozaLcmrydE.mft (raw, json)
Hash identifier:          Bh2FG9fMsqJwHnXu4BQNH9ARpy21dE2rqPpvU0a8rlk=
Subject key identifier:   54:AB:59:66:32:65:FF:55:AD:A9:DA:06:E1:94:6B:00:DE:32:F8:EE
Authority key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1
Certificate issuer:       /CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
Manifest number:          0128
Signing time:             Sat 23 Nov 2024 02:51:42 +0000
Manifest this update:     Sat 23 Nov 2024 02:51:41 +0000
Manifest next update:     Sat 30 Nov 2024 02:51:41 +0000
Files and hashes:         1: mZujdBECimL7UV3PAozaLcmrydE.crl (hash: rErBJFQjyKD9WvGeG13mVsztvJvu2w66cXk8ANVJJ4Q=)
                          2: F27BE0E2E4CC11EDBAFF045BC4F9AE02.roa (hash: xsK374JtB2Fn6v7KyIaFk4fFls1uJkzIqMoTEXrm80Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl
                          rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
        Validity
            Not Before: Nov 23 02:51:41 2024 GMT
            Not After : Nov 30 02:51:41 2024 GMT
        Subject: CN=6741433e-bbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:ff:55:86:6c:4c:2d:aa:5c:b4:93:7c:7d:
                    83:40:d1:44:a7:82:30:ac:66:e8:75:f3:f5:a7:a7:
                    94:d4:c6:18:43:48:07:cd:96:77:cc:35:7c:53:e7:
                    1c:83:06:8c:85:2b:f5:2a:ab:18:d3:21:5d:da:d2:
                    46:31:98:59:4e:9e:dd:38:cd:71:08:c3:37:32:44:
                    f5:5a:da:9e:82:ae:78:6a:59:a8:aa:71:be:42:4c:
                    3e:17:07:98:c2:43:d8:d7:08:b2:d1:a9:71:a8:b4:
                    d5:0e:89:ec:bd:d4:89:f0:74:8e:56:42:9f:41:93:
                    16:b6:7a:5d:44:1d:b8:cc:06:15:3a:f3:6b:49:5d:
                    82:48:e0:d5:47:b0:10:09:24:01:79:25:17:09:73:
                    61:3e:f7:ca:45:0a:8f:6b:7d:6f:a7:c6:ba:4a:ed:
                    1f:17:ff:28:2e:d3:f7:5f:36:10:74:82:d5:e5:18:
                    c5:84:ef:ef:92:69:c1:de:02:87:91:53:58:1f:a8:
                    ee:c2:3e:23:fa:6d:80:a9:3a:9a:67:ab:4c:28:87:
                    1d:4e:97:b2:d3:6a:5b:a2:f2:2f:60:6b:be:a7:cc:
                    f1:b5:d4:16:ce:c3:cb:16:bb:c7:bd:91:95:64:e2:
                    24:63:5a:8c:35:33:bd:01:d0:a5:83:22:1f:f3:5a:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AB:59:66:32:65:FF:55:AD:A9:DA:06:E1:94:6B:00:DE:32:F8:EE
            X509v3 Authority Key Identifier:
                keyid:99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:61:aa:38:ee:72:b8:2a:c2:0b:46:ea:97:e3:80:28:97:30:
         2f:8f:27:a5:76:30:6e:0a:bc:27:53:7a:0b:f6:b8:db:82:69:
         ef:44:41:fa:e2:df:b3:17:4d:6e:dd:82:62:63:b7:62:66:25:
         fb:a8:84:08:5d:7e:21:46:10:e0:aa:3f:21:3b:04:92:26:9c:
         19:3d:c7:76:c6:38:c1:ff:62:94:15:52:dd:e8:9b:db:f1:f7:
         fe:93:b0:94:88:40:a0:52:09:1e:6e:88:79:e7:d2:92:7e:05:
         c7:ab:67:11:7f:c0:6e:67:97:75:f0:a4:cb:51:95:b8:2c:20:
         8f:ac:72:e8:ed:a5:46:c0:57:9d:73:05:0f:d5:97:46:7f:d9:
         57:9e:e5:b1:dd:3b:e3:76:52:1f:9a:c1:47:72:87:4e:39:df:
         2d:51:b9:b3:f9:63:dd:22:82:05:cf:10:20:ca:a5:5f:47:53:
         48:f8:b7:5e:38:d1:68:d4:3f:f0:17:35:7c:50:d4:c9:62:47:
         1e:06:06:7a:f7:17:79:12:7b:3a:f3:f5:7d:7c:36:be:ba:01:
         ed:30:05:c1:7e:44:12:06:b8:70:a5:0b:5a:9b:de:0f:52:01:
         2f:92:2a:a0:d8:eb:9f:ad:56:ca:e4:d6:4e:69:aa:5b:c2:48:
         d7:4a:4d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org