Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
File:                     IgUecf7QG75bnNYkR2DObpAwevc.mft (raw, json)
Hash identifier:          KgVGWGewVxUJbl4YoFDkifBwc3S9Xffp9Xp04eN4p0Y=
Subject key identifier:   45:A1:82:73:CD:42:34:1C:22:73:0E:4E:D8:D4:74:71:01:3F:25:87
Authority key identifier: 22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7
Certificate issuer:       /CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
Manifest number:          0186
Signing time:             Sat 23 Nov 2024 01:59:25 +0000
Manifest this update:     Sat 23 Nov 2024 01:59:24 +0000
Manifest next update:     Sat 30 Nov 2024 01:59:24 +0000
Files and hashes:         1: IgUecf7QG75bnNYkR2DObpAwevc.crl (hash: /TnzpBnkQy7gjGXZhgPX0DluAXdbM5rb2rFFuRZGBDA=)
                          2: AF9BA1D2717111ED8518666EC4F9AE02.roa (hash: lr+IV3E8IbLUZRr7dcIaxmNZ6ecPXYlRygnmNCQ86Iw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl
                          rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
        Validity
            Not Before: Nov 23 01:59:24 2024 GMT
            Not After : Nov 30 01:59:24 2024 GMT
        Subject: CN=674136fc-d01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:ce:b2:8a:1e:6f:40:48:b5:bc:25:a1:0e:
                    84:78:e8:45:84:03:32:4a:2a:01:5d:d0:0f:56:5b:
                    65:90:40:de:88:29:96:69:4d:b9:6a:fb:47:f9:80:
                    1d:2c:46:33:c1:03:3d:f5:86:92:2b:dc:79:12:05:
                    3d:4d:32:1a:fd:b6:eb:5f:7e:ba:d5:8b:5f:ec:48:
                    3f:02:ae:f3:3e:18:99:54:17:2b:f3:c8:ed:34:ae:
                    bc:9a:57:1b:e3:fc:b0:f6:d2:90:b4:26:e0:ca:4d:
                    b4:b6:03:c2:42:cc:42:8d:d0:d2:38:d4:1b:2c:47:
                    6f:f0:bc:41:21:f2:a0:ab:14:aa:e6:c2:a3:35:e9:
                    af:7d:f2:d7:00:d4:4e:4b:65:f8:11:63:a8:97:61:
                    ba:0a:62:44:83:44:8d:18:1a:6b:7a:53:2b:00:69:
                    30:e1:16:43:b4:54:6e:89:54:e5:84:cd:3f:97:37:
                    c5:46:96:08:eb:25:fc:f3:e7:50:ef:2c:99:0d:45:
                    8c:56:4f:ac:8c:85:12:43:46:e5:fb:51:17:eb:79:
                    db:5e:ae:c0:c6:28:67:a9:d2:30:78:48:4f:07:e6:
                    40:7d:36:5c:b5:15:5f:3c:f8:b6:19:1d:d1:e9:ae:
                    4e:d7:22:a2:82:45:80:7b:82:47:1d:87:ce:d0:d0:
                    8e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A1:82:73:CD:42:34:1C:22:73:0E:4E:D8:D4:74:71:01:3F:25:87
            X509v3 Authority Key Identifier:
                keyid:22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:2c:77:29:13:c7:76:78:31:ac:c4:f0:f0:40:29:a8:81:
         37:36:b1:14:f8:c1:c5:7b:5a:f4:8c:7c:08:ec:97:ff:30:00:
         e1:d3:b2:3b:86:50:d7:c7:12:9d:b0:ce:c4:19:0b:f3:b4:ba:
         3d:cd:1a:df:9d:c7:99:75:dd:e9:ee:f7:23:48:72:54:98:b2:
         e2:e8:29:0e:e3:df:8f:39:e9:6f:bb:2d:14:7e:dd:78:00:75:
         9f:34:11:ac:6e:31:44:f4:13:91:f1:0e:33:dd:86:0a:25:1f:
         17:d4:a0:8d:f5:1a:3f:0c:53:fe:ed:ac:c9:00:70:46:ec:c4:
         7c:89:6e:f9:69:86:7e:e3:98:8c:6e:0b:02:76:be:b8:e8:c4:
         4f:b1:aa:c2:b5:b6:33:5e:50:b3:4f:89:b1:31:a6:e9:98:2d:
         33:f0:9e:d9:cf:a5:99:97:2f:6d:fa:de:13:96:ac:83:19:85:
         39:5a:84:27:25:f3:8b:19:2d:fd:49:f3:a3:0e:b5:ad:9f:87:
         8d:c0:b6:3d:79:d2:cc:36:8d:96:03:82:ba:e2:41:95:b3:4c:
         44:ba:51:b3:26:95:4d:8e:69:b9:85:bf:eb:ec:61:e7:81:ac:
         b9:9a:70:e3:3b:45:17:37:6b:a2:0e:59:36:61:ba:80:b2:86:
         58:52:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org