Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
File:                     xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json)
Hash identifier:          KP2IhglbVctmZ07fGZZwBiVUoIokvNfy86X3eoVRPk8=
Subject key identifier:   BF:20:3E:75:C4:8D:1C:88:0A:EE:1D:3A:A1:79:AD:1D:BF:39:65:5E
Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
Certificate issuer:       /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
Manifest number:          78
Signing time:             Sat 23 Nov 2024 04:46:11 +0000
Manifest this update:     Sat 23 Nov 2024 04:46:11 +0000
Manifest next update:     Sat 30 Nov 2024 04:46:11 +0000
Files and hashes:         1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: WsYGWwe07acGGB+ipOtoZAGK0R0TpBt+gWZMFqVEc70=)
                          2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: JP9Pvfyfa3vW7gxEOqKzfjawNJzZLQs3btJhigzzzxQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
                          rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
        Validity
            Not Before: Nov 23 04:46:11 2024 GMT
            Not After : Nov 30 04:46:11 2024 GMT
        Subject: CN=67415e13-332b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e9:71:fa:f4:78:6d:55:ef:19:2b:b7:2d:b3:
                    06:80:0b:a8:12:f6:59:6a:bd:76:c0:11:b9:89:ee:
                    a2:06:52:c3:85:96:f6:d0:1e:c0:c8:58:5e:91:40:
                    97:30:66:6b:39:1f:ea:1a:8f:d7:9b:80:27:49:64:
                    04:d3:c1:2b:79:b8:2d:e9:b6:89:65:6b:a7:23:f0:
                    f4:09:5f:af:30:39:ad:4a:a4:57:34:14:bd:69:5e:
                    c0:dd:32:b0:89:dd:32:6d:88:82:b0:e7:c8:ea:29:
                    1b:b1:e3:5d:66:6e:6f:02:a3:82:65:85:55:11:2b:
                    f8:19:2c:cd:b1:c5:32:63:5c:9a:08:5f:7a:c5:83:
                    fb:42:88:a2:bb:c6:86:ec:f3:89:f5:8b:f0:da:f3:
                    62:38:8f:33:14:aa:e9:f0:d8:5e:32:a7:6d:fb:b7:
                    47:97:d9:b9:fd:23:e3:e0:3f:d5:84:3a:de:ca:7c:
                    5e:1e:eb:8c:b7:40:1c:46:87:e9:cf:33:dd:e3:91:
                    6d:99:df:20:dd:f2:88:0b:ed:5f:f8:ed:26:76:13:
                    66:82:84:60:fd:3b:88:78:dd:7b:c1:da:79:55:58:
                    af:37:a6:df:48:08:cd:5e:c1:55:0b:b7:8c:1a:e7:
                    fe:24:79:1f:56:94:07:cb:d1:70:42:d4:b6:63:2d:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:20:3E:75:C4:8D:1C:88:0A:EE:1D:3A:A1:79:AD:1D:BF:39:65:5E
            X509v3 Authority Key Identifier:
                keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c4:85:a5:e4:29:b3:1b:79:da:c1:4e:9e:8b:eb:24:9a:73:
         21:88:13:c1:3e:be:31:f7:61:57:13:2a:25:fd:3f:44:8a:e5:
         fa:cb:2f:15:54:50:9a:76:85:b5:27:c4:b6:c5:11:d8:79:12:
         37:55:79:c6:62:f1:eb:ce:64:f8:73:de:52:1c:7b:44:b5:3a:
         f9:75:ca:89:66:52:1d:43:0b:d7:13:eb:7d:81:ee:45:0d:ed:
         0c:6c:57:23:36:c2:ee:31:1a:98:58:27:25:2f:87:4d:fb:3d:
         4c:31:f7:5b:d8:cd:39:e9:25:08:1b:22:58:6a:6d:c1:df:f1:
         b5:b9:af:b4:04:26:3b:c8:e3:5e:62:61:b4:09:c4:34:c7:ff:
         d1:f5:82:0f:14:8e:12:1f:c0:b9:8a:de:b1:d8:1d:4b:69:65:
         a3:10:75:84:76:ba:c5:8e:dc:2f:f0:e2:d2:30:19:1c:db:8a:
         4d:5f:a2:37:34:1a:e2:f4:d5:39:83:f3:d9:3d:65:e5:7d:45:
         50:90:47:50:99:35:85:1e:9d:bf:cf:50:69:e3:cd:89:f0:8d:
         03:f1:62:bb:bc:aa:0a:9b:85:90:16:8a:2a:95:95:ec:bd:f1:
         ad:fc:a6:af:7d:44:4e:c7:ce:6c:3f:68:c8:2b:8c:73:70:01:
         35:6e:0c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org