Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
File:                     UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json)
Hash identifier:          G4UY7YLHa/Vv2nXlaK13h2IU5eaBwKD/7Et5AimkMAc=
Subject key identifier:   7C:3F:86:C8:A3:35:30:65:1A:6E:E7:B8:5D:C5:8B:BF:0E:20:64:CF
Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1
Certificate issuer:       /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1
Certificate serial:       0B8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
Manifest number:          0B84
Signing time:             Fri 22 Nov 2024 18:46:23 +0000
Manifest this update:     Fri 22 Nov 2024 18:46:23 +0000
Manifest next update:     Fri 29 Nov 2024 18:46:23 +0000
Files and hashes:         1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: zbwuRsxbGR1D053DTGV2jVjABuSgwyT4YXR0mJe869E=)
                          2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: xQYqLjvOPbL1Bc/N9mw4kS03eD5IMDjoeNoamZNcGcQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl
                          rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2954 (0xb8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1
        Validity
            Not Before: Nov 22 18:46:23 2024 GMT
            Not After : Nov 29 18:46:23 2024 GMT
        Subject: CN=6740d17f-e547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2e:e5:70:e5:19:da:95:f3:79:9d:c7:f9:76:
                    ea:5b:ca:b9:60:56:47:54:4e:f2:e8:c0:a9:b2:c2:
                    e8:5c:de:b2:d8:c0:1c:41:80:51:8a:e1:22:25:95:
                    4a:5f:27:d7:99:13:c7:84:af:bc:8b:4d:7f:f9:9f:
                    7b:b6:07:a0:cf:34:71:e2:4e:cf:3d:cc:b7:85:21:
                    79:79:29:f6:78:4d:4c:69:95:e3:ac:3a:d4:b5:50:
                    18:be:20:82:be:96:9c:9c:f3:49:88:be:a8:bc:63:
                    4e:8b:ac:7f:dc:72:ea:8f:89:5c:28:ae:29:f5:2d:
                    da:7a:69:f5:41:7f:da:9e:58:70:c6:58:56:b2:42:
                    7d:57:83:18:3b:c3:e0:c7:e5:fa:11:67:ea:64:e8:
                    3b:0d:c6:7d:5a:14:f3:28:e7:d9:d9:b8:f8:20:60:
                    05:8d:fd:6d:55:dc:49:81:2e:d9:d0:f4:8a:86:19:
                    2c:6b:65:d1:8a:3b:3e:24:23:04:a7:68:33:79:22:
                    3d:c4:1f:aa:fe:7b:fa:ba:cf:4a:7a:7c:4f:26:b6:
                    5e:cd:ff:7a:d9:85:be:05:75:4f:f1:00:c7:ec:32:
                    b0:c2:0e:ff:63:11:19:fa:71:d2:98:40:7a:2d:91:
                    27:f0:97:f1:e2:5c:b3:35:e1:8c:d3:61:11:e5:3f:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3F:86:C8:A3:35:30:65:1A:6E:E7:B8:5D:C5:8B:BF:0E:20:64:CF
            X509v3 Authority Key Identifier:
                keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:2f:e9:6d:e5:36:11:73:99:13:70:14:99:7e:27:a4:d3:
         77:db:14:a9:02:2c:19:2a:69:0c:63:dc:0f:ee:7d:08:be:75:
         cc:d6:a4:65:90:5e:f2:20:53:1d:dc:e7:31:f5:44:14:26:7a:
         3a:22:33:cd:e5:75:f2:1d:34:a1:d8:e3:ae:d5:02:af:80:96:
         37:03:2a:26:42:18:4e:57:6d:82:d7:12:12:08:a3:83:9e:ac:
         77:33:b0:ad:fb:5c:c2:99:96:76:d3:62:3f:e4:cb:25:7c:dd:
         c5:fc:a7:39:c8:07:72:75:6b:59:4e:f5:60:3d:55:51:77:51:
         69:d6:a0:0f:57:4a:1f:88:f7:ef:34:24:22:32:b3:8f:4e:7e:
         8f:da:4f:e7:d8:62:3e:34:b3:bb:c7:cc:1a:df:1f:0d:34:e3:
         19:0c:7d:2c:05:e2:c5:52:ee:7d:42:56:70:67:f1:df:cc:b4:
         21:e3:8f:1e:23:5d:d7:12:b8:d9:0d:10:b0:91:eb:be:b9:0c:
         17:ae:f2:8f:ba:f4:97:86:36:f6:69:b2:64:36:2f:64:ad:3a:
         1b:23:a1:98:30:58:66:3a:df:ba:cf:dd:cb:01:4c:43:34:51:
         62:0a:a3:c8:b7:ce:99:8a:0c:40:b2:29:da:c7:55:93:32:49:
         88:d0:e2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org