Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
File:                     mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json)
Hash identifier:          +eC6Ztn+Erf35upidCzjNLl8Ji7bIOkvF7tSLydNuMw=
Subject key identifier:   52:CB:74:F5:4D:A6:2E:F3:C9:27:94:79:F0:54:B9:21:0C:A7:5C:E7
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Certificate issuer:       /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
Manifest number:          0251
Signing time:             Sat 23 Nov 2024 01:17:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:17:55 +0000
Manifest next update:     Sat 30 Nov 2024 01:17:55 +0000
Files and hashes:         1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: evVPvgo6FBJBDFvjezugcqJ4LqSunUum2QLB2tjFoZA=)
                          2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: UgAj2CxLYzSG9xICUOGQnuTvII7f5bwTJDXx/aWs0m0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
                          rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
        Validity
            Not Before: Nov 23 01:17:55 2024 GMT
            Not After : Nov 30 01:17:55 2024 GMT
        Subject: CN=67412d43-6e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:83:9b:97:f0:a1:20:a7:be:bc:94:c3:4b:
                    7a:7a:7c:80:22:30:9d:70:19:b4:04:83:2e:d6:21:
                    45:b5:0c:aa:14:d2:52:6f:de:d0:02:fe:e2:66:9f:
                    7d:44:0b:b3:57:71:63:60:0c:fd:9e:bb:3a:f6:9f:
                    fd:ec:e7:fc:a8:36:69:5f:8d:09:23:08:27:66:9c:
                    1a:a1:1e:0d:31:4d:cf:96:af:4f:e1:f9:98:2c:4a:
                    a1:b9:0d:c2:1a:de:6d:19:49:58:ce:29:c1:2e:6c:
                    a3:c8:bc:fc:27:f5:8c:be:9b:2e:19:4c:15:4e:25:
                    a1:d0:cc:52:55:6c:d4:09:86:dd:96:9d:d5:92:8e:
                    ae:11:d4:f1:9a:c4:55:27:66:60:d0:26:4b:a8:b5:
                    b6:f0:56:17:ea:12:d6:fa:47:ce:8e:37:07:e1:c1:
                    1c:2b:a3:f6:1c:ab:fb:a1:b4:f8:f3:9f:f1:cc:64:
                    67:9f:ba:22:05:84:1d:76:07:f6:ed:96:e9:94:d5:
                    af:bd:33:1c:f4:66:7f:d4:d7:f0:72:fd:e0:eb:d1:
                    c2:15:13:a7:ea:12:b6:e8:85:23:ff:e0:ea:61:3f:
                    06:c7:c3:09:5f:ea:c7:f0:73:b6:1e:e5:c1:e6:1e:
                    ed:d0:d1:99:98:fd:bd:7e:ee:f2:66:b7:43:ce:49:
                    8b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CB:74:F5:4D:A6:2E:F3:C9:27:94:79:F0:54:B9:21:0C:A7:5C:E7
            X509v3 Authority Key Identifier:
                keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:35:85:fe:b8:dc:93:47:af:c2:29:44:72:c1:5a:d7:ac:93:
         f2:b8:61:9e:9f:f2:eb:5e:bf:c8:8d:0c:ad:a6:51:4b:41:9c:
         ae:22:af:84:dd:f0:1f:41:ff:40:4a:d2:31:b2:5e:94:ba:55:
         7c:6d:94:0b:88:6c:16:ab:e8:6d:57:05:76:fc:df:a3:c2:cd:
         be:6a:01:60:ad:07:2a:3d:8c:85:4f:67:bf:1b:be:57:89:7c:
         f8:b2:29:18:3d:f4:bf:ac:4c:06:f9:09:c3:f5:f2:a7:0b:e2:
         26:59:dc:62:31:75:83:7d:c4:7e:5a:1e:b7:4c:09:a6:3e:4f:
         99:b2:f7:9f:36:5e:9e:92:4f:6c:11:9f:f7:b6:ad:8e:50:e8:
         32:9c:2c:35:e1:51:39:93:d5:f0:ae:59:74:b5:0d:86:a2:e5:
         64:51:05:79:bc:03:1c:f0:4d:88:20:e2:9b:ea:44:25:4d:99:
         f1:5f:1c:9e:21:83:95:61:0d:b0:ac:69:a7:96:49:53:0b:37:
         43:3c:83:8c:f2:cb:8c:e0:01:31:ac:12:fd:93:79:ea:fe:ca:
         fd:87:48:c8:95:d9:e9:36:be:a4:ae:a7:b4:9e:4a:67:14:1a:
         39:03:43:f1:87:ed:b0:5e:5c:8b:51:47:59:4b:9c:9d:5f:59:
         e6:26:cd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:31 2024 by rpki-client on console-fra.rpki-client.org