Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
File:                     pK73BplO997sjIomg0NykQSEsbA.mft (raw, json)
Hash identifier:          bn+PaWvRoCOxiBY8WD1cXfOU32uHAQOU6OzFclxhW0g=
Subject key identifier:   D7:44:26:AE:35:E8:39:EB:70:A1:3D:A7:E9:C5:6F:53:ED:7B:63:55
Authority key identifier: A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0
Certificate issuer:       /CN=A9196412/serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0
Certificate serial:       0649
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
Manifest number:          063C
Signing time:             Fri 22 Nov 2024 22:04:59 +0000
Manifest this update:     Fri 22 Nov 2024 22:04:59 +0000
Manifest next update:     Fri 29 Nov 2024 22:04:59 +0000
Files and hashes:         1: pK73BplO997sjIomg0NykQSEsbA.crl (hash: 6jQa0BCSsbTK96cQ0NIT+u1WhsaLacHlKYcSUTNcCE0=)
                          2: 7568D85E731211EBAFF0B481C4F9AE02.roa (hash: SELYIISzgBI7zrtRFkV2ypEgCIX/db0xuNfofQR/Qs0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl
                          rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609 (0x649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196412/serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0
        Validity
            Not Before: Nov 22 22:04:59 2024 GMT
            Not After : Nov 29 22:04:59 2024 GMT
        Subject: CN=6741000b-8997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:7c:90:b5:0e:2f:92:71:6d:9b:fc:5d:a6:
                    22:28:29:be:80:43:8c:e0:d0:59:09:03:10:ca:e6:
                    bd:3f:ad:9a:f2:b2:60:51:04:5f:89:27:9e:76:d7:
                    b6:39:76:39:67:60:7c:25:b6:b0:6c:ea:60:25:6a:
                    0e:5c:a5:01:a9:ff:a7:61:ac:2c:2a:3a:7a:ed:5a:
                    c7:03:0e:61:e4:66:cc:c1:45:fd:78:e1:52:e8:f7:
                    ee:e7:ce:0c:68:34:7c:53:bc:84:bd:e8:85:ec:6f:
                    f3:25:81:4b:e7:79:41:ab:6a:af:17:68:db:37:70:
                    5b:98:d2:65:73:b9:05:da:f7:56:a5:f7:ca:20:8f:
                    10:90:f6:b6:66:7f:2e:3e:90:37:3b:6c:ab:78:d4:
                    7e:a8:6e:81:ca:27:65:fb:3a:ff:ee:a8:b5:6f:81:
                    23:78:a1:b7:0a:5c:af:2d:f7:4d:9c:1b:a3:c3:90:
                    b4:0b:03:29:43:5e:b1:5a:d2:12:f8:39:9c:a3:a8:
                    5e:a3:91:d1:81:b1:b2:19:e2:56:6c:11:69:53:05:
                    14:04:42:d9:56:fe:0c:31:21:d3:f1:b6:ff:da:50:
                    96:aa:49:1f:3b:3d:9e:47:7b:c3:f4:00:9a:79:47:
                    61:c2:03:de:83:68:4e:a6:45:05:30:9d:17:0d:26:
                    86:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:44:26:AE:35:E8:39:EB:70:A1:3D:A7:E9:C5:6F:53:ED:7B:63:55
            X509v3 Authority Key Identifier:
                keyid:A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:47:9c:f8:f1:46:db:46:9f:86:52:52:eb:de:5b:c8:14:0c:
         16:1b:0c:70:a3:11:4a:d1:11:c3:e6:a4:ad:4e:e8:68:56:1c:
         71:80:6b:c7:5c:b7:3a:33:26:6f:e7:29:14:98:f9:d9:77:d2:
         97:a3:05:10:69:41:25:73:f2:9d:d1:5c:1f:94:e3:da:72:fe:
         2d:66:df:04:44:82:35:6c:84:37:23:b9:2e:63:ad:ff:7c:f2:
         a4:6b:18:88:e0:0f:96:9e:5f:f6:06:64:8f:7b:ca:12:f0:09:
         bb:91:1f:ff:bd:ae:9d:46:99:44:6b:7b:2a:a6:94:6e:92:e6:
         bd:0d:a6:fd:a7:52:66:5d:06:e3:6a:4d:ed:31:c0:02:b9:94:
         61:e2:d8:bf:6a:37:8f:eb:72:4d:06:dc:97:1d:bb:10:bd:96:
         3c:b2:9e:bb:54:c4:21:45:5d:4b:6a:06:08:a8:4c:75:cb:fc:
         9e:96:5e:be:b2:f9:6d:30:fc:83:b4:c2:ab:0d:1d:5c:b3:ff:
         a4:ba:28:30:54:47:d6:32:bb:37:98:87:89:a5:40:e1:fa:1a:
         8c:24:cb:d6:8e:87:81:d0:be:59:76:31:02:05:7c:73:e8:d6:
         4c:4b:30:49:2e:b2:e9:98:15:a4:35:cf:59:ac:49:36:d6:f4:
         e9:a8:45:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:31 2024 by rpki-client on console-fra.rpki-client.org