Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
File:                     _dkd0w6bH-o7t-Eq73YhZigSmyM.mft (raw, json)
Hash identifier:          NX86j4wjI+kv2VNY8oVTmgtRkJIP8LrPHhx/E+9//cY=
Subject key identifier:   6C:49:38:D3:2E:F3:6B:46:F1:79:91:AD:BA:09:4A:D5:C7:1E:3E:0B
Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
Certificate issuer:       /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
Manifest number:          AC
Signing time:             Sat 23 Nov 2024 04:12:27 +0000
Manifest this update:     Sat 23 Nov 2024 04:12:26 +0000
Manifest next update:     Sat 30 Nov 2024 04:12:26 +0000
Files and hashes:         1: _dkd0w6bH-o7t-Eq73YhZigSmyM.crl (hash: /1aUFsCPxhygPzTKlUm25ZdfCaf/dn+ryPW5hda3t9I=)
                          2: DECE1662A87D11EE882D7B6EC4F9AE02.roa (hash: C77jJoshdfxzPcbWVGuVdmC/Yt4X5b0+J8bsZe99ndM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
                          rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
        Validity
            Not Before: Nov 23 04:12:26 2024 GMT
            Not After : Nov 30 04:12:26 2024 GMT
        Subject: CN=6741562b-db0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:81:d3:a6:80:6a:83:87:a4:16:25:d0:12:af:
                    71:e1:30:4e:a3:2a:a5:20:de:ba:58:26:26:22:00:
                    d4:a8:6e:c8:85:7f:bf:c4:be:9e:4a:33:a1:e1:fd:
                    f2:5e:dc:0b:b7:ad:c8:fc:c9:5b:82:b5:ad:07:4d:
                    5c:17:fe:ab:64:d8:f4:4b:5f:53:b4:62:48:eb:92:
                    b5:1c:f7:49:59:46:7b:05:8d:06:82:31:ad:87:df:
                    e0:07:cf:25:1a:1a:9b:a3:45:af:96:6e:ad:47:f1:
                    79:ee:2e:e8:dc:ca:e9:d5:44:e4:0c:55:a5:6e:ea:
                    5c:79:0a:31:bf:23:c1:79:5f:15:3c:da:3f:45:31:
                    6c:16:36:de:ab:50:c7:17:37:5e:2e:24:ef:e2:87:
                    f5:04:73:89:27:16:5a:b6:51:42:f3:6f:f6:6e:7f:
                    b7:c6:1a:d4:e7:ad:8c:04:7b:49:80:a6:53:7e:84:
                    7a:ba:71:06:91:ea:4d:54:51:91:1b:dd:f1:ee:be:
                    b3:d4:87:98:9b:94:1c:8c:0c:e9:19:58:3f:88:a5:
                    ad:b2:87:4d:23:84:5c:a1:e0:35:a1:04:c5:e8:2f:
                    86:f5:0a:11:72:3f:03:b4:f1:01:2a:97:ce:ad:cf:
                    6c:f8:30:43:bb:bf:96:63:1b:f3:4f:a6:ae:37:3f:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:49:38:D3:2E:F3:6B:46:F1:79:91:AD:BA:09:4A:D5:C7:1E:3E:0B
            X509v3 Authority Key Identifier:
                keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0f:6c:87:3b:5a:1a:a8:5f:92:25:2e:6c:0b:6f:68:eb:f3:
         87:c5:a2:87:d8:5d:e6:67:8a:ec:11:40:4c:80:96:9d:b2:79:
         68:2a:bd:3c:1b:4c:a3:c0:e2:e8:08:ff:24:74:22:65:d8:74:
         47:aa:f7:71:5e:46:19:20:2a:df:4c:01:2a:49:ac:a2:c0:0d:
         c2:ce:fe:c1:a8:d9:55:97:bf:9c:e1:b0:f6:af:6c:d6:f7:d9:
         c9:25:b5:c3:fe:4c:16:a6:17:02:b4:56:08:d6:08:92:49:c4:
         03:8e:4f:e2:a7:88:f4:3f:dd:dd:a6:84:83:1a:54:0a:3a:02:
         a7:55:66:a7:d1:8c:61:d4:88:b9:b3:64:4b:50:dd:af:b8:ba:
         67:fd:d2:56:b4:de:3c:bf:6d:88:1c:80:99:42:a0:4c:64:a3:
         a8:52:5b:6d:ed:7c:7e:7d:29:48:b1:ac:3a:d7:d5:69:68:b0:
         43:07:8f:32:47:ee:c7:6b:e6:3e:26:f3:2c:06:83:7c:75:c5:
         b8:76:45:6e:2d:eb:89:4b:f7:04:99:4a:16:c5:cd:32:08:21:
         00:47:80:0d:f7:1c:a5:60:59:77:13:db:fb:b0:2c:c0:19:fa:
         38:2b:27:e7:b5:dc:8d:1d:b0:dc:ff:5d:2a:a3:6d:18:39:12:
         ce:03:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:14 2024 by rpki-client on console-ams.rpki-client.org