Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
File:                     hwrlmks42vxqMavjKcz4eP33Kow.mft (raw, json)
Hash identifier:          nbnm1dL3GdEDRfBmiKnpWPv6sNMmO+TUTNTCcPIoCUA=
Subject key identifier:   2A:51:0E:39:E8:17:45:2C:3B:EE:5F:0D:76:44:E9:42:D0:61:4A:90
Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
Certificate issuer:       /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Certificate serial:       16D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
Manifest number:          16B7
Signing time:             Wed 20 Nov 2024 16:38:22 +0000
Manifest this update:     Wed 20 Nov 2024 16:38:21 +0000
Manifest next update:     Wed 27 Nov 2024 16:38:21 +0000
Files and hashes:         1: hwrlmks42vxqMavjKcz4eP33Kow.crl (hash: NYRe2o2OGF0bYnYNUSY4EBJxA6p9dyzZg3UgdU9B/BE=)
                          2: 5F94C5B814A311EDA489B80DC4F9AE02.roa (hash: BsKKSnHr0K52Pi3Gs6fECGV1MzwDOrglwx2HR/FgK3w=)
                          3: F439D662AAAE11E8B3984735C4F9AE02.roa (hash: qodAy5RnjAfzZLgosnZJG73vlTkoT0WivX1zoqvNDY4=)
                          4: E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (hash: VjRI895oYugQH9o7urGQM7yCU4z51K3U6PIWfPohfHs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
                          rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5840 (0x16d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
        Validity
            Not Before: Nov 20 16:38:21 2024 GMT
            Not After : Nov 27 16:38:21 2024 GMT
        Subject: CN=673e107e-90b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c0:46:7c:0a:2d:4c:2f:12:0b:3c:79:84:f1:
                    55:cd:9b:81:6c:bb:3d:7f:84:74:00:cb:d9:d5:78:
                    d6:42:50:7c:81:0f:d0:72:13:3a:a8:1f:a9:48:50:
                    2f:2b:71:3b:12:af:34:39:c9:25:4c:ae:4c:5a:89:
                    8c:aa:fe:92:b6:50:cc:bf:46:ba:af:ac:c8:31:9e:
                    ad:21:8e:54:53:ae:e4:bf:3b:6e:80:07:1e:b9:c2:
                    66:4a:3b:7d:5f:8a:d8:06:70:1f:41:50:8a:4f:8f:
                    ef:68:e7:46:0f:01:c5:cb:3e:e2:3f:03:c0:c8:0d:
                    53:56:1f:63:f1:0a:54:20:cd:19:35:12:a1:6c:c5:
                    96:f7:44:1f:7e:2f:34:2b:75:d1:20:3a:e4:e3:7d:
                    28:b6:3e:60:19:fc:ad:c9:75:9b:74:98:28:ee:83:
                    41:e0:60:6d:f9:8b:bf:ac:50:d6:4f:a7:44:3f:4b:
                    78:b4:1f:c9:6c:d4:d3:b2:e3:80:ee:8e:45:0a:26:
                    a8:ca:4b:fb:49:6f:bf:ff:07:22:51:02:04:2b:76:
                    1a:ef:5e:14:49:30:db:47:45:6f:aa:f4:a6:24:7e:
                    f1:7b:ea:81:df:1b:3e:7c:e4:72:d3:87:cf:9b:08:
                    7c:bb:d9:0a:f6:bc:bb:35:b6:80:6f:30:29:8b:6d:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:51:0E:39:E8:17:45:2C:3B:EE:5F:0D:76:44:E9:42:D0:61:4A:90
            X509v3 Authority Key Identifier:
                keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:af:9e:51:2d:6d:45:2a:94:65:8f:7f:83:59:01:b9:53:60:
         be:e5:3a:ec:aa:f2:1c:2c:8d:0d:75:a0:16:fb:ac:f2:fd:cd:
         17:69:2b:c1:60:33:ca:b2:7c:f5:77:37:b6:dd:85:b5:04:39:
         f6:27:7e:c5:5e:2d:8b:e7:a7:9b:58:12:46:e6:26:1d:a9:c3:
         1a:7e:62:c7:01:e5:0a:9c:7e:72:8b:bc:b8:d2:64:c2:7e:bf:
         43:09:02:b2:f4:a8:06:6c:6a:d7:70:76:1e:fa:2c:b2:f7:db:
         c0:8d:a1:8e:3b:6b:96:9e:f6:29:b7:b3:08:02:b0:c2:bd:94:
         a4:a5:0f:c0:63:3d:f2:19:5f:03:b4:c0:df:8d:dc:3a:f8:84:
         48:02:a2:1b:71:de:14:a0:30:7b:a7:89:88:41:f5:12:67:6d:
         11:6b:74:2a:19:b4:2b:4e:e0:40:72:3b:01:4b:cd:b2:0f:49:
         e7:8e:fc:90:10:c0:ce:1d:00:0c:da:6b:df:41:75:fe:6b:3e:
         d9:e2:4c:32:a4:76:98:26:2b:70:fe:75:64:c5:77:33:af:a6:
         25:fb:95:07:cb:fd:24:fb:15:49:0f:7e:58:d3:16:bd:51:4e:
         d2:d7:03:86:da:4e:cc:f7:84:42:6a:2a:8e:d7:dd:5e:ec:e0:
         2c:e8:c6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:43 2024 by rpki-client on console-fra.rpki-client.org