Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
File:                     18TeE2hvQ1WFNoORXlQd7XU66zo.mft (raw, json)
Hash identifier:          NgEGbT9+P1PY9gJ1SV39DUz0IyWsEeLZSRx9YlULE/c=
Subject key identifier:   E5:F2:C1:FA:49:E5:04:7B:FF:3B:F8:FC:AD:A5:A5:28:23:90:5F:05
Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
Certificate issuer:       /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
Manifest number:          6B
Signing time:             Sat 23 Nov 2024 04:54:56 +0000
Manifest this update:     Sat 23 Nov 2024 04:54:55 +0000
Manifest next update:     Sat 30 Nov 2024 04:54:55 +0000
Files and hashes:         1: 18TeE2hvQ1WFNoORXlQd7XU66zo.crl (hash: cyaINHlDIHZurqprqOA6jKvtwxb3nfe8ueqFOCaU9A4=)
                          2: 35A11C66086C11EFB8BD7815C4F9AE02.roa (hash: jx27R9R8a3ve62AOIqb5E0ou30ap1JUun3eJwYMuDqE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl
                          rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
        Validity
            Not Before: Nov 23 04:54:55 2024 GMT
            Not After : Nov 30 04:54:55 2024 GMT
        Subject: CN=67416020-dc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:c9:6b:8b:c5:c5:f7:e7:14:63:37:83:7b:
                    e5:a2:e5:d8:54:30:9f:19:d1:95:a8:10:11:01:05:
                    67:c6:2f:27:c0:52:f2:d4:78:b5:08:81:65:78:39:
                    40:5b:df:02:25:b9:c3:8d:32:03:9c:fe:02:67:de:
                    ce:ae:5a:72:5f:e5:da:53:28:f1:d6:24:37:b1:a5:
                    a9:3a:44:08:69:52:d3:f9:66:9c:2f:71:70:7e:62:
                    d2:c5:0d:51:15:96:e7:ec:11:3a:f7:50:3f:6c:1e:
                    79:59:b4:c5:c8:db:32:56:62:89:d8:57:ff:db:f6:
                    00:97:8c:b9:79:1b:2e:d2:67:1a:16:16:72:75:7c:
                    8d:c2:ba:5c:8c:41:aa:be:3d:07:4d:e1:2d:f2:91:
                    02:b5:9f:c4:e3:09:06:29:66:be:e5:87:cd:a4:b1:
                    cb:67:c2:d2:dd:8a:5e:8f:5a:8a:d1:75:6f:d3:9d:
                    8a:c2:ee:d8:a8:c4:70:e9:8f:7e:0c:c3:14:66:4e:
                    26:6a:df:f7:70:29:69:82:ac:c9:a0:bd:db:16:b2:
                    ab:f3:e1:c9:1d:2f:8e:56:e8:11:61:77:8e:d7:81:
                    30:1c:1a:7a:ec:e3:ca:d3:87:02:4e:74:f1:56:8a:
                    1d:d2:fe:e7:39:f1:59:2a:df:76:35:26:f7:74:4f:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F2:C1:FA:49:E5:04:7B:FF:3B:F8:FC:AD:A5:A5:28:23:90:5F:05
            X509v3 Authority Key Identifier:
                keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1a:db:7e:2f:da:8c:82:d7:5b:66:44:77:f3:f5:85:bd:42:
         35:65:4a:58:bd:93:d5:25:e0:73:0b:83:db:b5:e2:f1:77:7b:
         bb:70:95:fd:f5:34:5c:9a:89:ba:a3:b2:08:9c:9e:54:c8:52:
         c8:3b:1f:37:60:b5:a4:f9:5d:d6:30:e2:cc:6a:23:b0:01:03:
         e7:ce:16:d0:aa:d5:2b:3e:8b:75:f3:02:07:77:c2:04:4c:a8:
         53:0a:31:94:43:5e:07:9c:7e:6a:81:c0:0c:26:96:b1:b3:94:
         77:66:97:6f:de:03:52:d6:fb:d4:39:ad:7b:8e:d0:1d:7d:ae:
         69:38:8b:73:1b:fe:6f:af:b1:ff:26:74:09:f6:64:39:b1:b1:
         96:16:b3:50:b5:7a:a7:a0:a2:10:21:f2:9e:92:3e:4a:95:c2:
         a1:54:cd:e3:7b:ee:00:79:c4:bb:ee:7f:28:ec:53:b4:41:d0:
         16:36:a3:78:ca:c1:88:82:15:56:08:7f:94:cb:2b:91:e4:3b:
         5c:25:09:68:d4:2e:10:bd:07:42:0e:8b:ce:fe:16:c7:fc:d1:
         49:0d:b6:5c:fa:af:ca:c9:94:74:28:92:74:00:7f:88:c0:05:
         a2:4a:62:3e:76:88:3a:c0:e2:33:da:31:75:3c:d2:28:18:db:
         35:f7:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:17 2024 by rpki-client on console-ams.rpki-client.org