Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File:                     aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier:          ifwgeMCVFzkLY4FTukWlB7WvMqOQ/kkIIzgJMAzmi3U=
Subject key identifier:   A8:44:D9:85:3F:8B:DD:86:4A:7F:58:62:F9:FE:A6:5E:18:2C:4F:CC
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer:       /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number:          14
Signing time:             Thu 19 Sep 2024 06:18:48 +0000
Manifest this update:     Thu 19 Sep 2024 06:18:47 +0000
Manifest next update:     Thu 26 Sep 2024 06:18:47 +0000
Files and hashes:         1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: dDgZxQsH4zRkrHxyLTjXzadvQsy3qTXEHLOz1pmfieA=)
                          2: 444375E25B9C11EFA181A044C4F9AE02.roa (hash: cZUk0GjwHyhCgvrA9p0spIEgaP2VdUy22G42gnbqnlc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
                          rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 06:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
        Validity
            Not Before: Sep 19 06:18:47 2024 GMT
            Not After : Sep 26 06:18:47 2024 GMT
        Subject: CN=66ebc248-99b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:41:51:30:b4:b8:28:5c:48:73:ce:7d:6b:
                    e2:54:d6:01:d9:47:ad:72:14:39:fb:b6:41:5a:20:
                    ed:d9:c0:7c:3a:82:99:54:a7:a4:0a:c3:32:9e:1f:
                    35:75:e7:e9:98:1b:6a:3f:f5:d2:41:ef:d4:e3:11:
                    c1:12:eb:d3:7f:28:3e:d9:b0:58:47:1c:98:6e:ea:
                    af:96:7a:19:08:d2:ab:fd:2c:8d:9b:3f:64:f4:8a:
                    f7:1e:17:c0:e0:4b:78:e0:4f:24:fc:83:53:b2:92:
                    36:ca:b3:3b:39:95:57:01:96:26:a9:54:17:99:f2:
                    2b:d2:d9:06:6c:4e:ed:e6:25:dd:ca:ad:cf:61:c7:
                    85:28:97:b2:95:0e:b7:b5:01:af:85:6a:ef:cf:de:
                    bb:df:9b:04:f0:67:3c:5b:1c:01:cf:25:fc:ff:e8:
                    4f:66:d7:89:81:13:66:c9:9a:e5:cb:eb:3d:41:da:
                    7d:26:21:62:ba:3d:33:1a:97:63:2d:a8:b1:a3:ff:
                    9f:c9:a9:56:20:92:4b:86:f5:ac:58:e8:97:e2:f3:
                    9c:22:84:59:96:de:c8:02:d3:91:0b:a9:ad:b3:fe:
                    de:ce:a8:c2:6e:6a:6e:f6:e1:3f:fb:ff:47:45:77:
                    22:05:a4:9f:bf:16:a8:10:ca:c4:a0:e3:ec:6e:6b:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:44:D9:85:3F:8B:DD:86:4A:7F:58:62:F9:FE:A6:5E:18:2C:4F:CC
            X509v3 Authority Key Identifier:
                keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0f:a0:ab:f0:86:12:2b:56:29:39:c8:64:2c:1d:b9:e9:e6:
         8f:0d:06:26:de:37:a2:20:e6:50:c5:16:7d:c6:75:ff:c7:2f:
         b4:26:11:dc:e6:0b:fa:80:82:6d:b1:3f:6c:d5:aa:26:91:e8:
         38:d7:b9:87:a9:a1:fd:73:6f:88:fb:73:23:40:94:18:73:9c:
         b3:34:83:ff:43:5f:14:98:41:95:78:aa:83:82:22:e6:d6:32:
         24:42:2c:f5:3f:e2:5f:0e:19:0e:b9:92:c3:41:99:10:9b:64:
         d0:ac:01:75:3d:c6:77:d9:3b:0a:20:2e:f5:32:9d:1d:00:96:
         96:22:a6:09:ce:6d:87:e2:85:54:c5:c4:36:9e:b6:70:7e:13:
         e5:13:5b:03:13:a4:94:54:90:01:c0:8f:bc:02:c7:8d:41:ae:
         6b:78:63:e1:73:61:d7:16:d7:b5:ba:a3:04:c6:4f:69:95:b8:
         40:64:b7:e2:2f:f5:67:94:22:d8:1f:b3:14:97:26:c4:ff:f6:
         ca:94:b9:6f:ef:01:9d:0c:0b:00:9f:2c:41:19:40:ab:09:bf:
         7b:cd:9e:43:2b:db:7a:fc:94:fd:50:a4:f5:64:8a:d0:17:1d:
         e9:a8:a7:cc:0a:04:fa:85:b9:6b:05:2b:25:b5:5b:99:ee:65:
         99:b1:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 07:13:43 2024 by rpki-client on console-fra.rpki-client.org