Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft
File:                     eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json)
Hash identifier:          i6f5wqn41J1/h/bJs2F1C+vucB6A5YMFrprJr7Qjm+o=
Subject key identifier:   AD:F6:36:53:37:B0:7A:E7:14:21:39:5F:76:BA:3D:54:4C:48:63:F2
Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22
Certificate issuer:       /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22
Certificate serial:       059B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft
Manifest number:          0596
Signing time:             Wed 20 Nov 2024 22:45:15 +0000
Manifest this update:     Wed 20 Nov 2024 22:45:15 +0000
Manifest next update:     Wed 27 Nov 2024 22:45:15 +0000
Files and hashes:         1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: OlHDwtLy/uMIaKXQ0Wo4A/fcMWD7ONUsIht661pR1Vc=)
                          2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: 6T0bGam9Fz3MuC3/hi4HGnadBCMddUZ6zt+H3AVBHfo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl
                          rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1435 (0x59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22
        Validity
            Not Before: Nov 20 22:45:15 2024 GMT
            Not After : Nov 27 22:45:15 2024 GMT
        Subject: CN=673e667b-6c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:47:02:29:40:df:7f:7f:79:3f:e2:3a:97:9e:
                    94:f4:cc:97:d6:4d:bf:35:31:cb:5f:ab:dc:d6:67:
                    bc:b2:ae:4b:cf:25:25:0f:90:bd:4b:3d:d7:86:c2:
                    a3:e0:15:40:b1:a1:55:40:47:e0:12:1c:8b:e9:23:
                    24:38:00:eb:3b:eb:ea:7b:1b:31:b3:77:b6:a1:2e:
                    72:89:2c:82:09:ea:8f:ce:a7:72:7c:98:3b:f1:c6:
                    1a:48:9b:4a:5c:12:0d:ef:4a:b4:d6:89:1a:af:b1:
                    76:58:1b:cf:65:0b:68:46:89:37:f0:5e:e3:a2:c7:
                    ef:24:6e:81:e1:4a:7c:f8:f7:b9:86:0c:f8:c2:0a:
                    7a:cf:38:ec:9f:bb:2d:3e:8d:82:90:47:79:da:a4:
                    19:dd:3c:aa:da:1e:b6:9d:1a:fb:16:80:74:ce:1e:
                    ea:2c:e7:78:5f:a3:3b:89:7b:35:1a:55:16:5a:dd:
                    d8:4b:06:60:d0:13:1a:9a:fb:a4:1d:99:64:52:83:
                    7d:4a:37:02:2e:06:b7:f0:14:e8:6f:01:c4:a9:01:
                    c9:b9:42:e5:85:75:89:bf:68:38:84:5f:86:9c:77:
                    56:3e:d0:78:c7:46:51:81:e9:06:36:9e:99:32:4b:
                    4b:7a:d8:4d:37:4f:d7:09:7d:fb:9d:fe:50:e0:cf:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F6:36:53:37:B0:7A:E7:14:21:39:5F:76:BA:3D:54:4C:48:63:F2
            X509v3 Authority Key Identifier:
                keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8d:dd:bc:5f:d5:f3:27:29:40:18:8d:4b:6d:76:90:0b:45:
         66:56:89:cd:a7:a4:f1:50:ff:08:26:1a:38:0d:b7:64:19:7e:
         14:3d:5c:2f:36:2a:f5:b7:03:e5:91:58:a2:8d:dd:f3:5a:69:
         e8:41:e0:a2:cd:5b:18:47:67:00:07:11:bf:01:4e:52:4c:01:
         63:da:6a:b7:56:94:c4:f5:dc:eb:19:0b:3e:22:8e:ab:66:66:
         3b:89:79:8a:6b:c5:4a:7d:e1:f9:9d:fe:02:d8:25:0c:a5:ec:
         e9:62:5d:53:96:85:eb:28:80:3e:0e:c3:61:e8:6f:f6:e7:d7:
         6c:e0:4c:d7:6b:14:9e:a5:17:07:eb:19:b7:9d:b7:58:8f:5a:
         7e:e9:ae:7b:b0:d3:3d:b0:4d:71:96:a6:87:88:0b:1a:dc:81:
         ff:fa:f5:23:9e:30:6b:80:9a:eb:cb:c0:e1:d3:55:c6:0b:13:
         1e:8d:25:fd:9d:b2:ac:d2:19:f5:76:bf:59:e8:38:22:b0:98:
         0b:6e:14:4d:8f:4d:c1:e8:d0:b0:8f:e0:21:7e:42:cc:b6:67:
         e3:f0:6d:cd:d9:3f:5d:a3:9a:b5:a3:ee:c3:1c:e5:d3:5f:05:
         4f:e3:4f:16:d8:ee:4f:38:de:b7:0f:9c:3e:fc:97:17:98:74:
         99:e1:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:35 2024 by rpki-client on console-ams.rpki-client.org