Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
File:                     SihlGpSsY59qsTJHTTHrDfzm3Hk.mft (raw, json)
Hash identifier:          EzOiGbRN2szaq/nPodbbLf+WSl2AT86Zyl2U6pfGo6I=
Subject key identifier:   A1:77:1C:C6:DE:E7:E6:7A:1C:7A:4B:F2:4C:D4:4A:C5:BC:D5:CB:4B
Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79
Certificate issuer:       /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
Certificate serial:       046D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
Manifest number:          045E
Signing time:             Wed 20 Nov 2024 23:42:18 +0000
Manifest this update:     Wed 20 Nov 2024 23:42:18 +0000
Manifest next update:     Wed 27 Nov 2024 23:42:18 +0000
Files and hashes:         1: SihlGpSsY59qsTJHTTHrDfzm3Hk.crl (hash: SL8vk9/IihTCdrt1E5JhounS4tga5riTLqgajhXXNZA=)
                          2: A64296622BAA11EC9618D864C4F9AE02.roa (hash: nHCadaN1Xc+Cwq5DpcBPhTIrPdhEpzVlr5N0hOLv0SY=)
                          3: C420EBE06EC911EC8A5A940AC4F9AE02.roa (hash: 7M33YTa8Ps11HunXEcyKgTV4o/04RKVc8VqGhI0g1ng=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl
                          rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1133 (0x46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
        Validity
            Not Before: Nov 20 23:42:18 2024 GMT
            Not After : Nov 27 23:42:18 2024 GMT
        Subject: CN=673e73da-51dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:69:90:4d:d5:47:fa:b8:cf:52:06:1b:de:
                    41:e3:4b:cd:85:d0:b8:7e:7e:25:47:05:1a:1d:d4:
                    41:04:5f:3b:16:0e:da:dc:bf:73:85:71:17:24:6e:
                    63:e7:cd:88:10:ff:ed:9d:b7:86:cb:a6:49:6f:8f:
                    66:37:72:57:6d:b8:ca:8e:ae:ce:d1:6e:2e:05:fd:
                    f9:2f:31:9f:b8:fe:5d:cf:22:03:e5:4d:dd:d9:b0:
                    78:b7:aa:65:84:1d:d5:69:2c:f3:2e:fd:26:1b:c3:
                    c3:3d:b1:a2:73:17:2a:1f:37:1d:d8:c7:8c:96:df:
                    2f:b7:43:1f:0c:b6:9d:9b:2c:60:4f:d0:0a:5b:1e:
                    c6:4d:57:43:d9:2c:ff:7a:d7:f7:eb:9a:2d:a1:ca:
                    9e:c6:fe:76:c1:dc:34:73:12:24:08:75:5b:10:01:
                    ea:6b:01:07:48:29:1e:ac:76:02:17:42:91:db:b8:
                    df:78:c5:b5:42:04:da:fa:f3:29:81:52:9e:94:25:
                    ae:69:b1:d4:1e:ba:5d:26:7a:0a:c9:1b:e5:39:c1:
                    ae:1c:42:5d:f6:00:e4:71:3d:22:c0:b9:22:6a:56:
                    ba:dd:87:9a:c4:f9:15:4e:2d:b0:74:99:e1:c0:80:
                    44:d3:b1:b7:f1:44:2f:cd:e7:a5:f8:61:f4:9c:ad:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:77:1C:C6:DE:E7:E6:7A:1C:7A:4B:F2:4C:D4:4A:C5:BC:D5:CB:4B
            X509v3 Authority Key Identifier:
                keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f1:7a:30:ee:4d:17:f5:ca:81:d7:4b:ea:5d:02:20:48:17:
         47:96:37:e0:65:75:b7:6d:96:a5:d2:6b:4d:bc:af:cd:9f:b8:
         e6:3a:c2:e3:5f:4e:6a:0e:a5:87:98:b3:b2:1c:9b:73:9b:b4:
         ce:9d:f2:bb:c8:17:37:d6:0f:e0:9a:07:42:1b:6b:70:2a:5d:
         fa:d0:02:88:77:80:13:cb:de:6c:04:22:91:39:9a:c3:60:63:
         0c:7f:74:e3:5d:64:67:1a:5d:50:0a:e6:96:1f:98:83:f3:20:
         a3:b3:f6:da:37:94:f4:8b:62:a5:ca:51:78:40:29:32:4b:67:
         62:b1:92:f3:24:f3:df:c7:3e:60:4a:51:39:b4:94:14:d5:6c:
         db:9e:d3:af:bc:67:7e:6d:90:91:c1:71:26:aa:56:73:0b:b9:
         e8:73:01:e1:60:f4:a7:3a:16:18:6e:27:38:ef:15:10:80:b8:
         74:92:5f:3f:78:bb:84:a4:11:34:e9:b1:59:7b:cd:1b:d8:cd:
         b2:40:b7:5a:59:ec:c7:94:76:36:9d:f7:f0:b5:c5:3a:94:21:
         21:8f:a6:b4:14:76:e5:5c:2a:4e:3e:5f:a6:17:e2:af:26:5f:
         ca:60:9e:4c:ac:2c:d4:2e:bf:6c:2c:89:9e:78:5e:19:b4:21:
         e9:53:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:55 2024 by rpki-client on console-ams.rpki-client.org