Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
File:                     fF1W_s9Nolmhwq4euK8HmiqpB7g.mft (raw, json)
Hash identifier:          WEHypKO0R7dyxYzNWphh5AjbBSkfTpFXmzv9Ucb2PmU=
Subject key identifier:   7A:8F:54:57:DB:66:0C:5E:17:83:CD:11:09:46:3B:FB:22:C7:6F:F8
Authority key identifier: 7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8
Certificate issuer:       /CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8
Certificate serial:       1065
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
Manifest number:          105C
Signing time:             Fri 22 Nov 2024 17:21:43 +0000
Manifest this update:     Fri 22 Nov 2024 17:21:42 +0000
Manifest next update:     Fri 29 Nov 2024 17:21:42 +0000
Files and hashes:         1: fF1W_s9Nolmhwq4euK8HmiqpB7g.crl (hash: 7G4/ehIyyISvKRdjWhzLqYCMJTYDlzdSrH1BFL1G+7I=)
                          2: 39D0B1102F7911E9A4F69342C4F9AE02.roa (hash: mvO7yHkevsKcC0ytNQ/yXnGhsAYGTtTZqPPj/+jmmtg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl
                          rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4197 (0x1065)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8
        Validity
            Not Before: Nov 22 17:21:42 2024 GMT
            Not After : Nov 29 17:21:42 2024 GMT
        Subject: CN=6740bda6-848a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:88:33:a8:1f:d3:0c:86:12:39:bb:22:11:
                    0e:4b:28:64:55:ca:5d:e4:8d:bc:61:aa:58:fa:2e:
                    a6:75:5e:93:07:54:0d:0b:06:19:32:a7:06:e3:1b:
                    a8:4b:52:0c:4d:36:a1:25:64:11:12:a8:30:f1:15:
                    dc:37:3a:c2:4e:e3:fa:c5:bd:89:3f:45:4f:ee:7f:
                    0f:1e:68:5b:4d:3e:5a:78:97:d7:f1:85:bd:70:77:
                    7f:b8:5f:1c:92:ab:b9:5e:c7:e4:69:28:b9:d7:4e:
                    25:26:0a:02:37:99:90:cb:93:17:43:e6:93:f4:9f:
                    4b:57:70:1e:11:ed:35:0d:8a:80:58:35:7d:c6:3d:
                    50:13:53:8f:99:07:58:e1:f0:4f:76:f0:92:75:ec:
                    5c:83:36:df:d1:6a:0f:d5:48:cc:33:55:b0:c3:63:
                    0d:cb:bc:41:a4:65:32:c2:ab:63:c6:4f:d6:d5:e7:
                    d4:94:12:1a:4c:b6:80:d8:07:b3:fd:fb:5a:d2:a4:
                    b2:6d:ae:6d:54:31:36:a5:a0:4b:c7:7b:cb:6d:0f:
                    ca:00:48:b5:81:33:6f:80:b6:2e:d7:63:e3:2c:e6:
                    26:24:29:fb:e6:3f:25:f3:26:da:76:64:2d:cf:5f:
                    8a:7b:77:66:14:8f:d9:12:ea:d2:ab:c3:f4:07:92:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8F:54:57:DB:66:0C:5E:17:83:CD:11:09:46:3B:FB:22:C7:6F:F8
            X509v3 Authority Key Identifier:
                keyid:7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:86:5e:9d:56:df:73:c1:fb:65:6a:1b:53:cf:37:97:d1:e0:
         a0:65:8a:40:aa:84:3e:b3:a1:48:ea:d4:fe:f2:79:cb:13:54:
         e1:df:ad:a8:53:2d:61:09:44:a4:da:4f:3d:90:6e:c9:b5:90:
         c0:71:73:82:07:bc:aa:c9:33:f2:e5:eb:74:93:80:d5:1b:28:
         3a:d4:09:dc:76:34:7f:e8:a3:65:04:e9:2a:73:e4:cb:92:52:
         61:80:62:23:1c:a1:cd:d2:04:28:d5:dc:06:ca:3d:db:43:e0:
         9a:2f:89:00:5b:8c:e4:60:6a:46:30:7c:45:ff:4d:27:49:f0:
         8c:8d:0b:5e:e5:b9:7f:25:0d:08:e9:75:f5:17:26:b8:aa:04:
         0c:29:57:ee:06:38:71:dd:e4:b9:75:cd:8a:88:e7:54:7a:5c:
         bc:6f:6b:50:94:78:36:c4:8d:13:49:46:7e:66:8a:6a:7f:d7:
         b5:ef:ef:d5:b5:94:c9:cd:cb:25:87:91:e9:ce:30:76:68:e9:
         54:bb:db:6b:78:d9:31:09:42:e9:2b:1e:7f:4c:dc:5b:ad:3c:
         f0:7b:16:76:c1:3d:2e:f5:3d:58:91:de:a3:0c:c1:95:d2:2b:
         bb:ca:76:f1:81:ca:30:3f:74:55:ab:47:5d:1b:11:ce:c8:8d:
         bf:4d:23:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org