Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
File:                     eDj_-XHbpCvN2NjzdFXwsoSbedc.mft (raw, json)
Hash identifier:          uYlaAkV5CZncJpxIpi3taDBj/ZU6hgNof6HZlBVr/nQ=
Subject key identifier:   06:23:A8:B9:41:4F:41:24:E7:8C:0D:F9:7F:B3:67:01:9E:2E:E0:03
Authority key identifier: 78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7
Certificate issuer:       /CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
Manifest number:          B2
Signing time:             Sat 23 Nov 2024 04:08:48 +0000
Manifest this update:     Sat 23 Nov 2024 04:08:48 +0000
Manifest next update:     Sat 30 Nov 2024 04:08:48 +0000
Files and hashes:         1: eDj_-XHbpCvN2NjzdFXwsoSbedc.crl (hash: tMp8UfjIyUgol2Q0STUcojnDqOFS7WPdfhQAEPGyem0=)
                          2: 0D0118A89A4C11EEB7AE8812C4F9AE02.roa (hash: dBxphccrDtHWBtP4mox7vNoz0R+Ag/oTU8vRZmA2QGw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl
                          rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
        Validity
            Not Before: Nov 23 04:08:48 2024 GMT
            Not After : Nov 30 04:08:48 2024 GMT
        Subject: CN=67415550-cd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9a:a2:31:0e:46:75:b8:7a:f3:5d:eb:c4:82:
                    e8:79:54:b9:4e:78:45:90:ae:1e:1e:b5:06:b2:d4:
                    8f:23:80:37:58:da:45:6e:83:53:2f:25:ba:90:49:
                    48:12:48:13:1a:53:af:4d:35:ba:17:67:ee:f8:25:
                    0a:80:f1:e3:36:28:34:25:c6:00:db:82:3f:e1:7f:
                    3b:d1:c9:d1:14:9d:80:ef:85:89:17:da:0b:35:08:
                    d0:1a:1b:68:30:7d:1b:54:2f:76:05:11:e0:07:68:
                    f3:3e:6d:b8:1d:63:d3:39:12:0c:61:6f:e5:4c:69:
                    12:16:f1:d4:86:49:13:d2:1a:c3:c7:b5:3b:94:33:
                    24:9b:50:63:11:2d:96:29:13:65:7d:47:ea:46:95:
                    97:26:bf:7c:fb:e4:0d:1f:05:7d:e7:d6:ff:42:e5:
                    3f:e0:2d:ec:1f:81:0d:90:c8:a3:54:db:69:df:a4:
                    c7:36:dd:41:df:5b:00:41:da:2f:24:dd:94:73:f7:
                    48:bd:12:21:00:59:e0:f9:a4:05:06:2e:5b:b5:86:
                    f5:30:6e:7f:bc:ae:e5:e0:32:66:9a:5b:12:db:95:
                    06:b7:40:d5:88:2b:f5:ea:d7:93:8d:1d:34:89:17:
                    97:30:71:af:64:73:8d:86:1b:24:72:26:a3:2c:93:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:23:A8:B9:41:4F:41:24:E7:8C:0D:F9:7F:B3:67:01:9E:2E:E0:03
            X509v3 Authority Key Identifier:
                keyid:78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fa:4f:36:54:08:be:5b:d9:6d:b4:13:c9:56:8a:f5:78:47:
         4b:ba:93:fa:f9:e5:51:6c:2a:c8:d9:e4:82:65:72:a0:90:34:
         6d:dd:00:fa:6d:d5:f0:8a:97:32:a0:df:4f:72:14:fd:14:7c:
         54:a6:03:f1:fd:26:4b:61:89:4f:ee:e7:8b:11:62:4a:40:ce:
         db:3f:f3:c3:26:a3:0e:f9:2d:5f:8b:8b:bb:92:ee:e9:44:a3:
         d4:b1:a6:be:5f:cc:e7:e1:24:5c:e8:39:7a:2a:3a:ff:06:7c:
         e3:ce:2e:ae:4c:3d:66:3d:02:ef:df:24:07:ed:9e:14:16:89:
         28:fa:bf:a8:bc:59:f7:48:ce:e6:0e:4a:89:13:be:ff:ec:00:
         52:8c:40:c5:f6:23:c9:7a:f6:45:cc:59:d8:9e:cb:0f:ba:e6:
         1b:7f:0c:f9:ec:a2:d4:12:4c:5f:41:5a:7a:3c:4d:89:f9:7e:
         b5:71:40:d4:e4:44:ac:cf:6d:16:a8:54:99:68:7c:e6:30:3d:
         be:d2:aa:93:ef:47:84:32:76:e5:73:30:49:f0:bb:cd:8f:c6:
         bc:09:45:53:6f:ae:14:cb:03:c7:ba:e9:9f:dc:f0:b3:b1:64:
         06:9e:9a:bf:7a:32:ad:e4:5d:68:9e:83:1c:72:21:b6:c8:9a:
         cc:cc:d5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:16 2024 by rpki-client on console-ams.rpki-client.org