Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
File:                     vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json)
Hash identifier:          seXAYmxCTYKEoUq4c5ulwT9NgXS4l2EVpjlXEV3wZsY=
Subject key identifier:   61:AA:7B:4D:90:80:EB:05:CF:E4:CE:34:2A:B2:C7:ED:8C:75:27:3D
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Certificate issuer:       /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
Manifest number:          0191
Signing time:             Sat 23 Nov 2024 01:52:25 +0000
Manifest this update:     Sat 23 Nov 2024 01:52:25 +0000
Manifest next update:     Sat 30 Nov 2024 01:52:25 +0000
Files and hashes:         1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: xG5yIy6EZ7tdRf0M9aVJw/bnpSlubwWfZNEZXNEzNCg=)
                          2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: us+hXVbT4+IxuDXf1t8Zy0IqvnZFy688N7EVgUtl4FA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
                          rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
        Validity
            Not Before: Nov 23 01:52:25 2024 GMT
            Not After : Nov 30 01:52:25 2024 GMT
        Subject: CN=67413559-0dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:13:8a:8d:40:5b:8c:f8:3c:04:5a:eb:be:b1:
                    4b:14:67:b8:fa:25:50:e2:f9:e3:c0:4f:77:82:44:
                    18:bc:52:05:8d:0b:9d:35:95:e6:4a:2a:a3:20:ae:
                    49:d6:56:a3:9b:52:ac:3f:89:d8:ca:76:7f:6c:65:
                    d1:3e:99:d4:f8:92:85:ed:4d:bc:01:0f:b2:3a:49:
                    aa:d6:3c:40:fd:7d:b1:2b:fa:7c:ee:8b:03:ca:68:
                    3d:4b:20:88:11:bb:00:3a:4f:59:cf:94:dd:eb:a0:
                    41:6f:a8:1f:4f:9c:9b:cc:7b:88:7d:83:ac:66:4d:
                    ad:ec:c2:60:fa:f3:cf:f8:c8:d6:ad:42:b9:a2:54:
                    e3:7f:2d:98:c2:b1:66:a4:3d:12:e3:2a:d1:12:c1:
                    1e:f0:02:a7:ac:44:19:ef:7d:7b:57:b0:59:5b:34:
                    a3:98:4f:b3:14:17:2e:8b:cd:6c:03:c9:60:7e:c9:
                    06:a7:f2:38:1f:2f:e6:b3:f7:10:b2:bf:43:73:f7:
                    5d:16:05:af:95:95:32:16:30:16:a5:a0:24:10:c6:
                    c6:3b:65:22:e2:32:df:cf:4c:2f:39:93:49:59:f7:
                    e2:12:dc:b6:e0:a4:92:08:89:ee:fb:42:aa:c4:c9:
                    41:d6:d6:7b:20:25:8a:81:82:ef:78:e3:48:50:ee:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:7B:4D:90:80:EB:05:CF:E4:CE:34:2A:B2:C7:ED:8C:75:27:3D
            X509v3 Authority Key Identifier:
                keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:83:10:33:8b:4e:cc:90:03:4c:a0:a7:25:26:0b:b5:3a:
         b0:e1:ec:1a:0b:06:76:4b:a7:a4:43:11:65:86:f3:20:12:ad:
         91:37:5e:c1:f9:d3:f4:cd:32:51:67:f9:18:ab:3f:3c:1c:e1:
         04:3b:a5:40:25:68:6b:40:37:78:00:45:44:f4:9f:01:8a:ba:
         6c:43:1c:90:95:3c:b8:38:7c:2e:bd:e6:31:4e:ba:f9:34:f7:
         62:bc:36:b8:12:f9:43:9f:01:57:49:97:56:ce:16:65:7b:77:
         d2:74:90:ef:1a:94:d7:54:d5:8f:b1:9f:1b:f6:d8:63:16:76:
         41:1f:85:12:5d:cb:25:e5:83:42:dd:2b:3b:02:d6:f4:95:cb:
         03:c4:8c:bb:4f:09:9c:6f:03:9a:2a:aa:94:93:60:8d:1a:83:
         e9:dc:d5:43:f0:43:5f:70:a7:d8:ab:e4:0a:0e:6a:40:2f:ad:
         86:56:4f:aa:87:73:bb:03:52:56:23:9b:9a:ca:9a:7a:a5:18:
         27:42:c3:14:cf:a8:2c:0f:d9:e3:ff:9d:81:a5:10:99:50:a6:
         af:e6:d7:ed:53:10:18:61:d2:a6:75:0a:a9:1e:c9:44:b6:6f:
         e9:ca:92:e4:23:01:aa:bb:7e:b9:17:1b:8c:3e:2b:c5:88:32:
         75:05:00:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org