Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
File:                     9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json)
Hash identifier:          GmAupZEYohLjMTNN9eG1gpjvC2Miz4Zk3ugBRYgy0yI=
Subject key identifier:   C5:D8:F2:12:DF:AA:BC:F9:6C:D3:66:33:2A:1D:CA:BF:71:70:DF:38
Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
Certificate issuer:       /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
Manifest number:          0185
Signing time:             Sat 23 Nov 2024 02:06:55 +0000
Manifest this update:     Sat 23 Nov 2024 02:06:55 +0000
Manifest next update:     Sat 30 Nov 2024 02:06:55 +0000
Files and hashes:         1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: /awt/iIYE1X3M+fl5VqPaBBLDzXd6e/aAgArTFF2VFI=)
                          2: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: +egsiZQuK0DvlIDs69wUvlKJ0oetMgci2jecNO2W5BY=)
                          3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: KlICDI7CttOBxnlmouufoikQHOv6fc+7+U3kFci82ro=)
                          4: C82A0778680811EE88B5527CC4F9AE02.roa (hash: XFCdp8DNBDbwoHKirPz1q3ccOTUpcT1rXY4JK9cysJg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl
                          rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75
        Validity
            Not Before: Nov 23 02:06:55 2024 GMT
            Not After : Nov 30 02:06:55 2024 GMT
        Subject: CN=674138bf-4857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:a9:ac:05:4e:b1:65:ad:75:1a:ec:fb:c6:
                    ed:34:c7:ba:a3:db:f4:3b:1a:21:0f:1b:b6:2d:b7:
                    89:8c:e4:1b:e2:68:86:dd:d7:a3:80:85:10:00:69:
                    5a:65:d0:ec:15:62:06:b4:68:bc:79:3f:9e:87:ee:
                    18:ef:e2:e5:b7:2d:18:92:f6:21:7c:fd:df:90:f2:
                    82:a4:21:b5:96:e8:d0:0f:a1:d1:5f:50:3a:d8:33:
                    2d:76:3c:41:cb:aa:fd:a2:5b:a1:ec:84:06:16:8b:
                    27:0b:bc:9e:7d:42:5e:c3:91:3d:76:a2:97:ec:6e:
                    06:19:90:8a:3b:7b:04:1b:38:ed:f9:b1:13:fc:74:
                    c7:81:0e:04:36:11:10:be:fc:ad:97:7f:7a:59:2f:
                    9d:ee:a2:57:f5:9d:46:dc:68:34:62:5d:4a:8e:3d:
                    d0:9d:5e:1e:4d:1b:db:fd:3c:83:90:f6:cd:2f:45:
                    59:ca:f5:9b:ec:ce:4f:a0:8e:8e:37:99:25:3a:16:
                    d1:99:97:ef:59:b3:d7:e4:27:d3:78:43:e6:2f:9b:
                    f3:b8:a5:2d:f8:a8:18:29:ec:71:db:32:58:ca:ac:
                    92:85:05:1d:65:c8:d0:5d:1a:84:7b:f2:67:ec:12:
                    2c:e3:a5:ea:9a:2d:69:44:bf:7e:10:e7:d8:db:95:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D8:F2:12:DF:AA:BC:F9:6C:D3:66:33:2A:1D:CA:BF:71:70:DF:38
            X509v3 Authority Key Identifier:
                keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:11:08:8e:95:d3:50:b5:76:97:dc:e3:b7:e9:02:4a:ad:86:
         ca:93:f9:c8:5a:22:98:73:db:cf:72:db:a6:47:b3:b3:79:e7:
         95:bd:03:61:6f:a8:56:5d:31:53:c5:a8:a9:a6:c2:69:fc:2d:
         dd:68:a7:76:be:12:8c:8b:ad:ae:4d:00:bd:4b:64:47:bd:16:
         6f:d6:8c:b3:cd:75:d4:8b:22:17:5c:c4:8e:a4:35:0e:df:72:
         d1:72:94:4e:6f:c8:da:8b:52:f9:df:c8:5a:7a:d2:5d:58:ed:
         69:fe:e1:f3:17:99:5e:d4:e2:44:a5:29:42:53:24:51:2d:ea:
         7d:ea:80:bb:24:dd:ab:3d:37:07:1e:13:2a:b2:0c:f2:6f:14:
         75:6a:d3:5f:45:a5:02:27:54:54:89:8c:50:5c:7b:3b:72:4c:
         9b:6c:cb:d8:c4:e5:af:2f:11:f7:71:1a:f1:7a:3c:cf:3e:99:
         f4:32:2f:84:20:e1:3f:79:4e:79:49:65:4e:4c:06:04:13:1e:
         5e:c6:2b:8b:c8:d9:bd:e6:34:79:e7:80:23:26:cd:11:5f:78:
         8f:3a:b4:6c:79:16:2f:dc:41:6b:70:11:ba:43:d8:85:e6:1b:
         3d:5c:dc:6f:89:8e:8a:50:79:43:db:c6:85:7c:04:57:b2:04:
         d7:bc:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:58 2024 by rpki-client on console-ams.rpki-client.org