Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
File:                     OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json)
Hash identifier:          Qjb4LNnw09eWYqGrlIsWikW1Be8fqTfz0NxEmiOFAfc=
Subject key identifier:   FF:1B:94:36:E5:4D:75:1B:97:43:52:48:8B:5B:A5:14:05:BB:39:87
Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
Certificate issuer:       /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Certificate serial:       25BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
Manifest number:          25AB
Signing time:             Fri 22 Nov 2024 15:42:51 +0000
Manifest this update:     Fri 22 Nov 2024 15:42:51 +0000
Manifest next update:     Fri 29 Nov 2024 15:42:51 +0000
Files and hashes:         1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: bRhojYzmpTzO166moUCpOd+2+j6LIcEywtaOMDrHNUk=)
                          2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: BFYejeG5zuQmOddj66ls1RY8KbJS0CKWjVPal4XkDVI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl
                          rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9659 (0x25bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
        Validity
            Not Before: Nov 22 15:42:51 2024 GMT
            Not After : Nov 29 15:42:51 2024 GMT
        Subject: CN=6740a67b-7b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:76:ea:2a:6f:35:9f:67:6f:03:2f:15:f2:
                    28:2a:9a:34:8e:c5:34:80:b5:d4:d6:bb:04:ff:f3:
                    2f:fa:e4:b9:5d:73:c7:5d:0a:21:39:eb:3d:a3:3e:
                    83:4e:03:9b:0c:bc:c2:8a:80:83:f7:9e:5b:96:21:
                    77:f4:8c:1b:50:f7:6a:79:6b:1c:bc:d1:c7:4f:f3:
                    57:1c:0b:aa:f8:21:70:9b:77:75:40:f9:12:32:06:
                    04:ed:38:13:db:f6:8f:6a:7c:81:2a:2b:3c:5c:18:
                    b4:3b:97:3f:b2:02:38:c3:08:2c:2e:2a:06:1e:46:
                    25:14:de:80:a7:53:ae:9e:0f:4c:72:64:3c:9e:7c:
                    47:0d:c9:6a:10:ca:a9:26:16:5b:ca:0d:0d:dc:a9:
                    5b:d1:58:32:9c:d8:96:c4:80:38:3a:ba:a0:7f:3b:
                    3f:50:c6:cd:8d:3e:25:ea:48:01:44:e2:61:d0:0a:
                    74:67:ae:2d:8e:37:66:b5:04:c7:26:82:02:25:32:
                    01:59:f6:0f:3b:0f:38:6e:fb:46:e8:25:28:60:8b:
                    3f:81:24:13:70:cc:ab:a8:06:48:6d:67:59:98:56:
                    c9:e4:57:59:ad:bc:27:65:5f:5f:38:83:48:9f:00:
                    3d:7b:f7:7b:20:02:b4:d8:cc:ae:28:3a:8e:02:a1:
                    49:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1B:94:36:E5:4D:75:1B:97:43:52:48:8B:5B:A5:14:05:BB:39:87
            X509v3 Authority Key Identifier:
                keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c0:b6:85:cd:db:bc:9e:2d:4e:67:dd:3b:4e:35:23:41:41:
         aa:16:d5:9d:82:b1:6c:24:9a:2a:ef:e6:b1:40:34:46:e9:7c:
         51:ab:57:b9:3c:06:1b:0d:5b:37:5c:fb:2e:bb:e9:93:1d:b5:
         36:a7:7d:9e:38:ca:0a:cd:c5:9b:22:b8:e4:82:54:8f:09:e7:
         f4:91:1b:38:88:27:53:8b:09:b8:a4:8f:5c:a0:37:16:e7:8c:
         d1:18:90:81:e3:d7:c8:9d:00:37:28:48:a6:ed:c3:ef:9b:47:
         f8:0f:73:d9:e0:79:8a:fc:40:b2:33:ab:5d:30:cc:4f:ba:42:
         5f:19:6c:68:31:1a:92:69:51:bc:72:ca:4e:b3:6b:e0:db:65:
         17:99:c3:36:f2:48:29:7c:38:79:80:14:a2:e1:b6:81:36:b5:
         88:2d:01:74:5f:2f:8a:5e:b7:b8:80:97:39:8d:6f:0d:84:cc:
         6c:8e:21:9d:b1:70:dc:f4:51:8d:76:d5:af:bf:93:54:7b:39:
         ab:b6:54:aa:a2:5e:e3:ad:68:93:41:43:a2:75:4f:43:cf:1e:
         88:39:da:23:ae:90:c0:ca:18:00:ce:b9:4f:6f:94:cf:a3:18:
         4f:66:e3:6d:62:11:3d:ac:91:af:5a:ef:70:af:62:03:13:f9:
         95:c0:bd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:51 2024 by rpki-client on console-fra.rpki-client.org