Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
File:                     51IOJIn_YDiw2HmwRxcPnFGs984.mft (raw, json)
Hash identifier:          LfBYzQI7nIuMvlnn+6J93Pl9h5v7pNKIXMkzb1vCoU0=
Subject key identifier:   5A:66:A4:12:E2:30:57:9B:14:28:A0:C8:5B:88:88:FB:D2:5A:0A:CD
Authority key identifier: E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE
Certificate issuer:       /CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
Manifest number:          0182
Signing time:             Sat 23 Nov 2024 02:04:44 +0000
Manifest this update:     Sat 23 Nov 2024 02:04:43 +0000
Manifest next update:     Sat 30 Nov 2024 02:04:43 +0000
Files and hashes:         1: 51IOJIn_YDiw2HmwRxcPnFGs984.crl (hash: x9vbZKLIy16W14vwZAaWgoA4+SFlhEIcP8UkxjulsPA=)
                          2: 27C38AF4C0C111EE84A55128C4F9AE02.roa (hash: krChI2Ncs7taBptMzXF+aTStVwnzaxOAnu3OmU8IMMo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl
                          rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
        Validity
            Not Before: Nov 23 02:04:43 2024 GMT
            Not After : Nov 30 02:04:43 2024 GMT
        Subject: CN=6741383c-ee0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:24:65:a2:23:2b:a0:c4:dc:54:a4:7a:52:ea:
                    d9:02:d9:c6:71:35:83:98:2f:76:78:6b:21:69:f4:
                    81:e7:25:7f:10:1f:fe:59:2f:9c:6a:be:b7:e0:29:
                    4c:bb:5d:c7:0d:2c:50:17:ea:50:23:0d:69:dd:c1:
                    27:fb:7d:66:f1:fe:27:8f:7a:50:58:2d:34:e4:e6:
                    5d:9e:b2:3e:b6:ef:08:d4:b3:b0:c6:22:84:bb:ec:
                    fb:43:70:4d:c4:0d:15:c5:a3:ec:21:e4:b2:26:67:
                    e4:de:e0:f4:6f:5e:97:28:80:dd:44:22:bb:a5:73:
                    32:e0:99:39:ef:c6:2f:88:47:f9:82:60:66:a6:b2:
                    cf:fe:ad:97:56:ed:9e:6e:2d:ac:9f:e4:08:e2:80:
                    ff:c9:30:73:61:59:69:a6:62:dc:02:0f:80:78:f1:
                    9a:ca:b4:d4:02:02:c1:6c:16:f7:ff:72:d3:7f:2f:
                    99:39:1e:84:09:42:e8:39:81:43:95:28:66:64:01:
                    5c:85:09:8e:75:74:a1:4b:06:e6:9b:79:55:30:b3:
                    08:d5:23:9a:6c:c7:07:e3:62:bc:66:44:ef:ea:8a:
                    8b:58:f7:2f:26:78:86:15:61:a6:35:19:64:24:32:
                    78:a4:84:4f:a5:c3:a0:54:ef:9c:fa:cb:e6:9a:83:
                    3d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:66:A4:12:E2:30:57:9B:14:28:A0:C8:5B:88:88:FB:D2:5A:0A:CD
            X509v3 Authority Key Identifier:
                keyid:E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:45:2c:87:86:0c:f3:b3:79:1a:31:c5:43:c6:48:b3:4c:3b:
         c6:bb:69:b3:a4:b5:0f:86:e0:c0:97:4d:f7:1b:c8:96:6e:54:
         50:c1:dc:65:da:a6:cf:5a:b4:03:23:b4:08:43:50:ea:e3:48:
         fe:bd:29:20:3f:7b:cb:da:97:3e:1c:3f:85:d4:9b:60:63:44:
         07:23:da:65:22:c7:87:31:86:77:ca:0e:1f:2f:30:0b:af:34:
         23:35:fa:fb:81:44:8c:61:c5:0c:fc:3e:7a:d1:59:70:42:d9:
         4b:2a:2d:3d:64:31:dd:22:0d:d9:64:bf:b3:8a:d0:51:9d:3d:
         7a:51:b0:22:9d:dd:44:19:ad:32:bf:30:5a:21:8d:47:59:ec:
         ff:c9:ce:82:ff:05:e1:f9:f5:83:f0:09:c3:15:1c:4e:c1:04:
         bd:63:c0:78:95:1a:f7:38:6d:53:f8:58:fd:a9:40:6c:10:80:
         c1:00:54:11:43:28:27:2b:f1:fc:2c:f4:ad:6f:9b:87:aa:af:
         a7:07:5d:6e:26:d3:91:e4:1f:76:99:16:0a:4a:f4:97:28:c0:
         d3:e5:b5:26:bb:06:b2:03:25:57:a2:1a:30:b6:e3:44:d8:d8:
         21:c1:be:5b:71:14:31:ee:4a:5b:a7:cd:ee:4b:1e:3f:4f:5f:
         35:1c:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:44 2024 by rpki-client on console-fra.rpki-client.org