Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
File:                     Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json)
Hash identifier:          uGNcQ1vraX7QMV66gKahgjLXjL7ZyEKqKRPjzHEQrQE=
Subject key identifier:   0A:2D:F5:48:3B:7F:FF:B4:F3:67:B0:CD:67:9E:3F:6F:15:1E:D7:F6
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Certificate issuer:       /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial:       0479
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
Manifest number:          045C
Signing time:             Fri 22 Nov 2024 23:50:41 +0000
Manifest this update:     Fri 22 Nov 2024 23:50:40 +0000
Manifest next update:     Fri 29 Nov 2024 23:50:40 +0000
Files and hashes:         1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: LXWLGY/ETnW1vs0OTRS69xIT7MYO4ANJ2hkmUyDuRPg=)
                          2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: 56lDQTojCNW8t5p2f63q5FwFibB38CMURQ2CquumMII=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145 (0x479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
        Validity
            Not Before: Nov 22 23:50:40 2024 GMT
            Not After : Nov 29 23:50:40 2024 GMT
        Subject: CN=674118d0-2be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:3f:c8:9b:ab:71:f3:4a:20:8b:a0:de:7b:
                    ba:98:85:f5:29:cf:49:90:28:bb:af:8c:c1:d7:7b:
                    85:6e:5b:aa:cc:70:af:78:53:c3:6e:0c:e1:98:84:
                    79:76:28:e8:f2:fc:e3:d4:7d:6e:5f:c2:ac:3c:11:
                    2d:fa:7e:53:bf:97:2e:3a:cf:7d:bb:13:fa:fc:32:
                    78:06:27:24:44:9d:3b:e5:4b:43:d4:ad:56:4d:a0:
                    8f:51:42:7c:ac:e5:fc:1a:66:b9:08:d9:2b:eb:2d:
                    25:b3:37:21:15:45:16:22:ac:50:54:0b:95:1d:93:
                    a5:12:63:93:e0:ee:bc:1d:2d:8b:ed:a0:0e:5d:d1:
                    18:c5:fc:30:4c:ec:0f:2c:5a:67:5d:03:1a:0c:42:
                    18:5a:a3:ca:ab:ba:c7:30:01:b5:c1:44:82:c1:0b:
                    34:b7:d7:1e:e1:06:89:ae:7e:75:72:b5:77:59:1a:
                    b6:d3:0a:02:fb:12:a6:16:45:8e:95:4a:cf:da:f4:
                    57:4a:ac:8e:42:36:2d:31:73:21:80:b6:0c:ae:fa:
                    92:02:76:52:41:c6:98:02:06:e7:58:a5:4d:b4:b2:
                    a9:c3:b1:86:c5:02:39:9f:5e:26:2a:4e:38:92:cb:
                    38:bc:68:dc:94:59:fe:24:e9:6a:a7:c0:88:8a:f0:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2D:F5:48:3B:7F:FF:B4:F3:67:B0:CD:67:9E:3F:6F:15:1E:D7:F6
            X509v3 Authority Key Identifier:
                keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:8c:73:1c:46:54:c3:22:ef:2f:4c:ce:41:f2:02:ea:67:a7:
         a8:ea:d8:65:7f:41:8d:b9:0d:17:13:81:37:4b:e3:e4:b2:b4:
         b4:e0:ac:91:95:a5:f0:e5:25:c0:61:c8:5b:13:b5:5a:f3:9a:
         11:ba:0e:9a:0e:6a:7d:58:ae:0e:97:4b:a0:29:e7:04:ed:c7:
         44:eb:ba:66:a0:f8:9c:67:b9:6b:50:88:2d:09:1b:3a:f6:d6:
         ce:1d:16:5a:0b:05:b7:25:51:78:67:ed:1f:ca:e0:8c:e8:a5:
         e8:e6:ac:4b:e0:13:ad:05:90:b3:3f:cd:62:dc:c8:8f:d5:96:
         bd:3b:fe:b0:7a:29:b2:39:72:c9:04:55:f2:29:15:14:32:9f:
         1d:7b:b4:37:62:f9:91:ce:00:0f:b1:70:62:d8:11:da:3d:a8:
         e6:7b:58:03:d1:c7:e6:ac:63:4a:dd:99:f4:3e:9e:96:66:95:
         68:43:42:31:54:fa:25:d7:80:3d:83:29:5d:f2:e4:c7:84:75:
         66:8d:4e:3b:9b:a2:db:69:51:3d:b2:ec:9d:ca:a6:38:d9:a0:
         e0:76:ac:88:0c:11:df:a6:5a:34:a3:3e:2f:e0:8d:49:1f:16:
         d2:82:71:91:7b:72:bc:2e:94:1b:3e:5b:3b:4e:6f:73:a3:ca:
         60:09:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org