Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft
File:                     k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft (raw, json)
Hash identifier:          ckvNrnk+ivpuO4oADnSm3JUNVXrIVHtE16mOpadOlAE=
Subject key identifier:   4E:19:1F:66:61:00:F4:00:9C:FF:EE:E2:DE:23:2B:C0:3F:60:C4:42
Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64
Certificate issuer:       /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
Certificate serial:       0469
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft
Manifest number:          0464
Signing time:             Fri 22 Nov 2024 23:41:02 +0000
Manifest this update:     Fri 22 Nov 2024 23:41:02 +0000
Manifest next update:     Fri 29 Nov 2024 23:41:02 +0000
Files and hashes:         1: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl (hash: 6JBy+DxeIklhfUDH3X+s5s4Rfg6cnz/Y0GzuZbX1+8g=)
                          2: 1443F7BA200411EE84DAD06BC4F9AE02.roa (hash: zLQo77q+5IMP6DcnXVEpDBCRchvfQ2yuvBtuKyjQHYY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
        Validity
            Not Before: Nov 22 23:41:02 2024 GMT
            Not After : Nov 29 23:41:02 2024 GMT
        Subject: CN=6741168e-ec77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:6e:df:74:2a:e2:ed:0a:a3:80:56:f9:9b:
                    74:20:25:13:31:ce:c8:c6:78:41:40:de:00:bf:83:
                    e8:67:d2:2c:37:6d:19:92:32:95:bb:c7:16:48:b3:
                    9c:e9:4b:5d:6f:05:f9:45:97:52:e0:69:1d:6e:df:
                    92:e0:f5:84:7d:2e:51:aa:01:b2:72:7a:a9:89:cf:
                    24:55:b6:9b:c1:3a:ec:c3:c9:8c:75:f6:32:fa:38:
                    a2:dc:e2:dc:16:55:00:6f:c8:d4:29:3d:df:c2:64:
                    9e:c4:cd:58:ff:81:30:b1:89:7c:c1:dd:c6:29:36:
                    b0:ae:a5:67:da:7a:7c:3d:5e:aa:cc:04:a3:20:23:
                    c0:09:67:02:29:59:66:9a:fd:d5:45:c8:9a:3e:3b:
                    fc:74:1a:4d:f2:10:94:12:05:16:bd:ce:e6:f3:fd:
                    c3:6e:1f:09:4f:0c:0b:6c:01:a3:fa:9b:1b:09:8a:
                    19:63:74:df:51:83:9b:d2:53:ca:d7:67:83:6d:33:
                    ce:c0:e7:7b:a8:a1:c3:69:fd:34:16:ff:64:99:1d:
                    c1:e2:7a:d9:91:07:d8:e2:52:a8:2e:29:6d:fd:d7:
                    35:a2:8a:cb:3f:17:00:0a:44:ed:92:5e:0d:9d:be:
                    1e:4a:85:e4:69:f6:de:74:9e:c7:fb:fc:36:a5:15:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:19:1F:66:61:00:F4:00:9C:FF:EE:E2:DE:23:2B:C0:3F:60:C4:42
            X509v3 Authority Key Identifier:
                keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:08:34:16:42:c1:89:21:88:c1:26:67:9c:07:06:f0:2a:74:
         50:52:d5:cd:71:35:76:a8:8d:56:ab:7d:18:94:d7:f7:f6:38:
         cf:b4:be:88:78:0f:71:5b:e4:14:f7:19:73:26:a0:99:e8:43:
         7d:49:2e:67:2c:31:14:3b:71:3d:0b:9a:04:7a:73:96:d2:77:
         a9:e0:de:7b:ef:df:cd:24:a2:e7:71:24:11:06:ab:f1:b1:35:
         44:4f:59:6d:7e:e9:47:b7:32:0e:34:05:a5:b5:8a:2b:8d:13:
         a3:18:b9:f4:19:5c:54:c8:2c:f4:91:49:1c:cb:a8:2e:78:49:
         b5:c6:58:9c:61:59:aa:95:a1:f7:1e:15:36:28:a5:78:b5:b8:
         a8:dc:19:8c:0d:f0:35:cc:5b:ac:42:47:61:ee:00:34:f3:69:
         3d:55:12:60:e0:dd:79:f1:f8:11:5c:ac:eb:d3:fe:9e:49:fe:
         19:89:f7:85:60:17:78:00:fb:1c:cb:09:cc:b4:43:da:ea:9d:
         f4:a4:fb:9e:65:03:99:d7:f5:98:b3:9e:74:7b:fa:99:13:7b:
         04:09:a5:99:4f:d4:26:f6:90:f2:dd:f1:b1:aa:68:f2:c4:48:
         07:06:01:63:9e:a2:88:44:cf:e5:f0:b0:c5:f3:a9:c4:ca:87:
         97:f1:b1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org