Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
File:                     lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json)
Hash identifier:          Wtb61uPPk17twCjkv/gpMEyO3uNbuSS7X1Iq6XY8NW0=
Subject key identifier:   F6:0F:5F:3F:49:11:9A:6C:E4:DC:6C:23:F6:79:F3:AD:66:60:FD:5A
Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
Certificate issuer:       /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
Manifest number:          016E
Signing time:             Sat 23 Nov 2024 02:18:56 +0000
Manifest this update:     Sat 23 Nov 2024 02:18:56 +0000
Manifest next update:     Sat 30 Nov 2024 02:18:56 +0000
Files and hashes:         1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: WSWx7NrHCDCFTrBcpdaaKaVVwHGn6mVug4NiNKc8KZ0=)
                          2: 778B9FACE86411EEA020E37AC4F9AE02.roa (hash: UV7m9UL6VQkCLJOeRN4XING/h7wyzD1/+qKh16w25VE=)
                          3: 2E03458EA14211EDA566785DC4F9AE02.roa (hash: X4f4JpNrLXW6Kc1FSQUgNny44PNWQc3+/3wUXFRNjBI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl
                          rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
        Validity
            Not Before: Nov 23 02:18:56 2024 GMT
            Not After : Nov 30 02:18:56 2024 GMT
        Subject: CN=67413b90-970c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:d0:a0:63:0b:78:0d:7c:c3:56:e2:83:32:
                    62:b9:d6:d7:25:7c:27:9d:b4:6e:08:08:05:88:ff:
                    c0:7a:82:dc:6f:c2:0b:0d:c1:ae:6b:0c:30:72:d1:
                    de:fb:1b:99:5c:00:47:92:36:8b:96:28:a4:17:41:
                    41:4f:24:df:7f:c0:cd:37:cf:15:3b:7a:65:57:0f:
                    b5:bd:ae:9d:75:ba:e1:f3:cb:8e:f2:df:e7:56:f9:
                    e4:1c:20:5a:85:1e:4f:cc:de:09:57:ac:49:08:b9:
                    fc:c4:99:37:e1:9f:0b:9c:78:eb:27:bd:0b:af:14:
                    ef:01:26:2c:38:91:de:c9:d0:d3:84:73:85:9e:b2:
                    df:f7:a1:5c:49:ea:1b:2f:32:53:a3:70:54:c5:9c:
                    ef:22:cf:5f:66:2a:ff:e3:30:66:ff:5d:ef:5c:fe:
                    da:12:88:dc:c1:85:d7:a1:df:03:da:16:1f:28:26:
                    03:0b:68:0d:30:82:1b:23:d9:e1:64:d2:4f:90:03:
                    d8:d8:c7:48:eb:5c:1b:92:85:22:41:ea:0a:fa:b2:
                    3d:85:22:ae:d8:75:37:fd:eb:4d:e9:32:7e:53:73:
                    40:75:aa:c5:05:eb:4e:c5:5f:b3:d7:8b:6a:90:29:
                    58:9c:57:5c:e9:cb:32:24:94:2e:35:05:b0:46:93:
                    b0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0F:5F:3F:49:11:9A:6C:E4:DC:6C:23:F6:79:F3:AD:66:60:FD:5A
            X509v3 Authority Key Identifier:
                keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:61:54:66:78:c5:79:65:1b:9b:d5:f0:87:d1:05:7c:d0:77:
         06:34:a7:b4:f2:be:5f:ef:81:1a:3b:99:af:8b:81:65:9e:1a:
         5a:bb:9c:64:d1:e7:4e:e5:77:d5:a3:cd:83:46:ca:2c:29:09:
         3d:d8:5c:92:f1:fb:be:0e:77:6c:95:7a:ff:2c:c8:94:06:65:
         28:d3:c7:b1:d6:be:51:2c:1d:bb:61:ff:46:11:b5:86:69:90:
         43:4a:e4:cc:5f:21:ea:ea:77:8b:ef:31:cf:ca:97:87:ce:92:
         7f:7d:43:2a:33:67:ee:c2:e4:26:57:b7:a4:58:03:e6:8e:9c:
         16:3f:e1:d9:55:5d:9e:42:10:bc:dc:0a:06:2b:de:90:ab:b0:
         dd:ef:00:b4:01:9a:f2:58:de:ec:e4:df:47:61:73:a7:88:30:
         42:70:cb:12:ad:3c:c3:96:c8:55:28:41:c7:a8:c0:d0:53:ff:
         89:d7:8e:34:19:82:02:0a:5e:c0:47:a6:7f:1d:6a:e1:c7:79:
         51:c7:1b:44:d9:d4:1f:8b:69:0a:2e:e8:05:e4:d1:e9:b1:6c:
         5b:80:4e:83:37:99:72:fc:e9:5e:3e:cd:0e:85:d6:8f:9f:ca:
         0f:1d:60:73:75:3c:f8:fc:52:c0:17:10:da:43:57:5b:96:f8:
         76:86:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org