Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
File:                     Mh0Kt4oavjUafbeTINn_03KgjEU.mft (raw, json)
Hash identifier:          yPEKPzl5NCQ8yzuc31q9XTtVyl54NU71bUqh5Ze4FQY=
Subject key identifier:   1D:AB:96:DC:DC:4D:C4:62:76:55:94:9A:0B:60:67:C4:FE:2C:86:7C
Authority key identifier: 32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45
Certificate issuer:       /CN=A9110FEF/serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
Manifest number:          0185
Signing time:             Sat 23 Nov 2024 02:04:30 +0000
Manifest this update:     Sat 23 Nov 2024 02:04:29 +0000
Manifest next update:     Sat 30 Nov 2024 02:04:29 +0000
Files and hashes:         1: Mh0Kt4oavjUafbeTINn_03KgjEU.crl (hash: Xt9Nm1HzZCORIkDZfz2bzN3q+YMjK7tbn40aDzZar0E=)
                          2: 47DA361A3F8F11EF8FA3802DC4F9AE02.roa (hash: J1WS3Wr+Cq+Ya2W/A8acH4GDeK/tNPuqzs+ITQkHcD8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl
                          rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110FEF/serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45
        Validity
            Not Before: Nov 23 02:04:29 2024 GMT
            Not After : Nov 30 02:04:29 2024 GMT
        Subject: CN=6741382d-3b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:40:5e:bf:19:cf:7d:48:88:2e:7a:ea:35:
                    a7:e6:8b:53:39:da:e3:df:b7:54:8b:e1:d6:7d:97:
                    04:4a:89:bf:4b:e6:3f:7f:bb:7f:20:0f:c8:c0:1d:
                    2b:d8:a6:8f:ac:c2:35:23:65:97:b6:8d:ee:8e:e0:
                    36:03:fe:c0:f3:4a:d2:bf:2c:9e:84:20:44:1e:03:
                    bc:0e:bf:8c:41:c2:82:23:8d:f2:de:30:19:a5:13:
                    ec:21:66:46:a7:4a:10:ce:21:9b:20:0a:96:c4:c8:
                    30:a7:48:32:3f:ed:f9:0d:3f:54:fe:0f:c8:7c:a7:
                    5d:e5:d9:60:33:04:b3:7f:00:48:70:6b:78:ba:61:
                    4a:0b:8e:69:59:e5:a4:8a:b9:12:37:51:5b:47:4d:
                    c8:32:c9:eb:13:a8:78:b5:03:38:40:82:bf:e3:23:
                    bb:67:1f:cb:3a:f9:d4:09:0f:f7:92:f0:02:15:c6:
                    3e:78:89:9b:2a:fb:39:b1:1f:ea:c4:b4:63:bb:b0:
                    30:43:4b:3f:b8:c0:5c:5e:9d:4a:74:69:9d:ba:ef:
                    21:ce:29:c8:da:95:f7:75:96:ec:55:8f:37:40:8f:
                    fa:08:65:fe:e2:0b:b8:0b:db:28:ee:1f:99:b2:b4:
                    b1:a5:ac:99:e0:23:d5:16:06:5b:5d:d8:ff:e6:0b:
                    ea:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AB:96:DC:DC:4D:C4:62:76:55:94:9A:0B:60:67:C4:FE:2C:86:7C
            X509v3 Authority Key Identifier:
                keyid:32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:7c:45:94:0f:94:a8:b0:e9:16:9f:5d:11:8a:03:ca:ce:37:
         2c:ea:ab:07:83:a1:12:36:69:c0:88:f8:d3:77:9b:6f:42:ca:
         3e:bd:47:2c:03:db:dc:4f:a9:0f:0a:7f:a3:6d:b7:13:d9:d8:
         10:a4:ac:05:09:ac:55:c6:71:69:81:c5:41:15:95:f1:c0:f3:
         3a:43:21:8e:33:80:36:69:7d:e9:c9:dc:c2:00:d2:21:86:18:
         87:73:27:5c:79:1a:1f:93:85:c7:88:49:fd:7c:e2:64:94:8f:
         34:86:20:c9:5e:23:f3:36:e2:76:ae:f1:a8:b9:2e:7e:89:5c:
         12:92:85:1a:1a:41:f0:50:93:b7:e9:0c:8a:f2:43:08:26:46:
         56:68:df:33:3a:bf:46:95:b6:fe:89:5a:cb:56:4c:0d:7f:cf:
         4d:58:95:8a:c1:16:6f:b1:6f:19:51:85:6b:97:31:39:34:80:
         b7:24:49:8a:a6:e2:75:f9:ef:3b:f1:d2:cf:c3:84:dd:b5:a6:
         fb:4b:9a:49:87:87:ef:14:eb:d0:3f:d8:48:c1:c5:be:2a:d5:
         3e:06:63:10:63:de:af:eb:db:dc:a6:c5:0c:77:67:d4:f5:93:
         81:4f:29:91:d0:ad:5e:d0:50:37:2c:30:b6:cb:83:af:fd:43:
         74:05:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:31 2024 by rpki-client on console-ams.rpki-client.org