Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
File:                     _hORwLImyM6_pKKtZpauS4K_fic.mft (raw, json)
Hash identifier:          I0a6563jIlOdrLbQGMY1ysg0kaxjo4XRHZ14wbefxNI=
Subject key identifier:   64:9C:2D:E8:B4:15:B3:3D:B1:43:24:6D:61:CD:6B:BE:FA:23:46:C3
Authority key identifier: FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27
Certificate issuer:       /CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
Manifest number:          0166
Signing time:             Sat 23 Nov 2024 02:19:18 +0000
Manifest this update:     Sat 23 Nov 2024 02:19:18 +0000
Manifest next update:     Sat 30 Nov 2024 02:19:18 +0000
Files and hashes:         1: _hORwLImyM6_pKKtZpauS4K_fic.crl (hash: IQqj4SkrC6F7hBnMjJnlEPFQ0wwM1DYbOVcOVfF9dIU=)
                          2: 7369922E680A11EEA25B1D1FC4F9AE02.roa (hash: fXjP05p8ued4HQ6KJnvZ7btsZDNaHLwlJqya0wuGxPU=)
                          3: 7AEB97D2A45011ED8AB8A437C4F9AE02.roa (hash: SQlJaQGpXDcZFHRgAOau+fYoi/5pe0SWyRviImDftQQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl
                          rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
        Validity
            Not Before: Nov 23 02:19:18 2024 GMT
            Not After : Nov 30 02:19:18 2024 GMT
        Subject: CN=67413ba6-6b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:ea:ec:f5:bd:93:03:a2:ff:6d:9b:b4:ee:
                    95:a7:86:d4:46:3c:23:f4:cc:ac:6b:83:22:c2:e3:
                    a2:e2:d3:de:09:d0:22:58:6c:22:fc:6c:35:23:ff:
                    4d:ea:51:7d:8e:82:32:aa:25:0d:94:51:1f:67:ad:
                    3c:66:d1:bb:77:ee:5a:53:41:47:a8:ff:84:25:57:
                    a1:57:11:eb:85:dc:bd:3a:29:97:aa:07:3b:f1:78:
                    9d:7a:36:6f:92:e7:52:00:41:db:86:72:d7:4b:cd:
                    72:01:35:2d:d7:2a:66:79:f4:b8:08:57:f9:fd:4d:
                    14:1f:47:b8:0a:fb:5c:9d:aa:5c:bc:d2:86:61:36:
                    7d:eb:5d:15:77:ac:46:5d:00:d2:9e:d3:51:95:a5:
                    a1:86:26:d4:6e:58:17:d0:96:f5:7d:66:75:66:3b:
                    76:7f:5a:6c:ba:20:98:71:65:1c:59:75:5d:d7:47:
                    1a:ef:6f:06:f6:7c:97:f7:55:a4:8f:40:30:50:a6:
                    8d:77:ec:84:f1:88:ac:3e:da:ab:c8:c5:98:12:48:
                    b0:68:31:f9:aa:72:83:8b:fa:1c:11:40:c8:b9:d4:
                    be:8f:b7:10:e8:a7:7c:18:92:e5:d1:9f:ec:5a:5c:
                    51:2e:cb:0b:b9:a9:9d:bd:d8:83:15:06:d4:47:7c:
                    9e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9C:2D:E8:B4:15:B3:3D:B1:43:24:6D:61:CD:6B:BE:FA:23:46:C3
            X509v3 Authority Key Identifier:
                keyid:FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:26:67:23:7b:9e:ed:da:07:16:21:0a:c6:13:54:c6:6e:
         13:df:bf:0b:bf:df:6b:1b:5f:15:95:8b:a2:44:b5:26:92:ab:
         2d:cd:42:73:36:82:89:bc:66:38:e7:4c:b5:fe:9a:2c:ee:15:
         c0:06:9e:5f:9a:1c:91:eb:cc:bd:44:74:46:c5:a6:df:3f:03:
         7c:f5:92:5a:09:b2:10:73:91:73:c3:cd:3b:bd:4d:ec:04:45:
         d2:9f:54:07:26:4a:36:36:8d:05:bd:9a:09:b5:9d:c3:90:48:
         f0:da:0b:f8:65:09:f5:9e:e9:02:25:81:b0:6d:22:f4:57:56:
         e6:f3:54:63:4f:70:75:ac:7d:f6:cf:0d:b6:28:43:c4:8c:e0:
         89:dc:de:f0:37:9a:fa:69:f9:12:34:c1:06:20:80:45:f7:05:
         75:d0:4b:69:03:f8:8e:79:e4:36:a4:bc:0b:fd:ab:e3:36:6b:
         60:27:76:61:6e:7e:8d:9d:65:a3:33:e2:75:9b:e0:f7:c5:fb:
         5a:88:e8:c7:77:7a:28:27:64:57:fc:6d:3a:89:4e:5d:db:7a:
         4e:fa:eb:98:96:e1:6b:f5:9b:25:89:e8:ab:9d:56:1c:a2:28:
         04:cc:41:a4:43:09:7d:da:d9:f3:f1:ba:67:ce:92:99:71:f6:
         76:7e:5d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:44 2024 by rpki-client on console-fra.rpki-client.org