Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
File:                     nPMspRGaIvijMFkQ1ANfaLP8IUw.mft (raw, json)
Hash identifier:          5EGGEfwRZeY4yzx8WoM85rixvxzbcj0Cw40ZvRuO8Gs=
Subject key identifier:   DF:77:96:3E:CB:8D:98:F6:4D:C9:43:B6:0F:A0:61:7E:C5:70:F7:05
Authority key identifier: 9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C
Certificate issuer:       /CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C
Certificate serial:       0494
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
Manifest number:          0490
Signing time:             Fri 22 Nov 2024 23:33:17 +0000
Manifest this update:     Fri 22 Nov 2024 23:33:16 +0000
Manifest next update:     Fri 29 Nov 2024 23:33:16 +0000
Files and hashes:         1: nPMspRGaIvijMFkQ1ANfaLP8IUw.crl (hash: 46dQlSF07WiOSL9Q1NzlOr0Chxn2/oeQhssYIOiKmUY=)
                          2: 55D5848813E411EC9BE4C87FC4F9AE02.roa (hash: IhuzHy2i1HilFEQnpW2ccDVOUFu06otCgruwg3LwU+w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl
                          rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C
        Validity
            Not Before: Nov 22 23:33:16 2024 GMT
            Not After : Nov 29 23:33:16 2024 GMT
        Subject: CN=674114bc-516b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:b2:84:a5:f9:b6:70:45:3d:8e:e8:3c:ae:
                    f6:33:8a:43:81:b9:82:04:48:40:b3:c1:9f:a1:8d:
                    1f:d9:d3:77:a4:57:6f:86:98:db:76:16:c4:ae:c1:
                    1c:a4:0a:f4:1c:86:8a:13:50:4f:e4:1d:33:2b:bd:
                    fc:60:55:23:80:b7:58:9a:18:31:33:d4:08:73:50:
                    4e:5f:62:80:e3:72:1c:68:12:5e:a5:4c:df:cd:79:
                    1c:19:fd:49:1a:1e:73:dd:5e:a4:fd:4b:47:bb:af:
                    74:4f:2a:a4:fb:ee:ea:b9:f7:e3:72:f2:c9:39:8d:
                    3d:61:16:e7:df:a2:41:60:df:bf:e8:e0:9d:99:a1:
                    d1:eb:ae:80:27:45:15:42:64:89:08:a8:c0:64:22:
                    1b:65:31:47:0d:f8:f1:81:b6:e0:ca:04:71:40:6e:
                    31:d8:18:f3:fa:23:00:64:66:9d:a8:2c:ca:0a:26:
                    45:a8:fa:b4:0c:82:58:9a:04:ce:ea:ee:fd:eb:2a:
                    e0:11:40:96:34:c1:5a:f3:4a:54:02:03:bf:fb:25:
                    de:c9:ba:56:82:69:b8:ba:f7:f0:fb:ff:67:9c:04:
                    07:48:de:5e:a8:6c:f4:63:b4:3f:d5:d7:a9:4b:ae:
                    dc:5d:14:6d:2e:85:bd:f0:80:9e:7d:8e:fc:c4:c2:
                    e3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:77:96:3E:CB:8D:98:F6:4D:C9:43:B6:0F:A0:61:7E:C5:70:F7:05
            X509v3 Authority Key Identifier:
                keyid:9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d5:1a:54:79:3f:ce:3d:47:ca:8e:97:b7:df:d4:a2:73:19:
         31:b8:2e:b2:cf:ad:69:8d:3c:d3:1b:f1:a9:95:23:b9:15:71:
         dd:47:5b:7d:01:f2:7a:27:8b:ae:2c:f5:d8:e0:82:d0:76:6b:
         a0:63:ba:ef:7d:91:31:7d:42:30:67:df:83:4a:1f:c5:4c:df:
         93:72:58:99:d8:5e:fc:99:a9:05:79:4b:43:1a:fc:6a:32:d9:
         41:42:19:83:60:6c:89:72:2b:2c:fb:84:1f:af:87:49:c0:23:
         fd:fe:28:b1:9e:a1:14:21:30:03:14:11:b9:b1:c3:ca:79:c4:
         e6:f5:b8:53:11:6a:00:cb:18:49:64:a0:b8:2a:b5:e8:dd:d6:
         07:25:a3:84:c8:4c:e3:cb:38:06:fc:98:e7:77:8c:78:6a:ec:
         0c:f1:97:02:27:d5:f7:a4:cc:0f:fa:c5:21:88:2a:16:44:53:
         fd:74:6b:a4:37:9a:77:59:a1:86:42:6e:a1:2f:a3:2a:54:45:
         c9:81:d2:13:2c:0c:37:1c:e9:42:25:3c:3f:36:3f:a6:5a:8b:
         f2:c9:4c:3e:63:d9:27:8c:84:73:23:dc:ca:24:e2:bd:9f:2e:
         14:02:85:86:ab:2d:4a:97:e2:5f:8b:29:d0:d2:a2:2f:62:6a:
         43:8b:82:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org