Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
File:                     bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json)
Hash identifier:          kiooJREW0oj2lwJiqERx/LoqR+QCyhGGwcl8KefjxNA=
Subject key identifier:   6B:49:88:A4:C0:2D:2A:DF:2F:CC:AB:A3:34:8B:BB:60:3B:F4:EC:BB
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Certificate issuer:       /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
Manifest number:          15
Signing time:             Wed 23 Oct 2024 06:49:51 +0000
Manifest this update:     Wed 23 Oct 2024 06:49:51 +0000
Manifest next update:     Wed 30 Oct 2024 06:49:51 +0000
Files and hashes:         1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: CFHxptIzUY+u0l8H/0CmoGhMTKxFKL9A+0sR4lq3kRU=)
                          2: 8FDE887E870311EF9138602FC4F9AE02.roa (hash: W0l9fs0T4x84rNQMrO5Y6xdjZAeEJaqMpnS2kjtsEjE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
                          rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
        Validity
            Not Before: Oct 23 06:49:51 2024 GMT
            Not After : Oct 30 06:49:51 2024 GMT
        Subject: CN=67189c8f-a192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:a4:0c:44:1e:a4:f6:95:d4:99:f3:f7:b9:
                    fd:55:3a:18:58:8d:d3:f4:5a:db:53:46:42:73:c9:
                    b1:bc:06:55:65:05:5c:22:1c:3c:5f:bd:db:f6:60:
                    06:af:c8:f1:6e:6f:b9:36:0f:4c:37:bd:6c:86:da:
                    2d:30:4f:43:e9:31:bb:3e:e0:71:64:58:74:f0:f9:
                    90:3f:92:2e:a2:40:28:75:02:0c:d6:de:b9:a3:aa:
                    d6:74:73:10:2f:62:0c:74:4f:b5:b7:03:64:ce:e2:
                    3e:20:cb:38:98:54:aa:63:6b:f4:94:0f:16:39:e7:
                    64:85:23:a9:f3:d5:5c:95:ed:1c:c6:34:82:27:54:
                    a7:00:fd:77:d3:63:54:00:d9:41:0a:79:f9:06:fc:
                    c3:5b:21:9a:b0:64:9d:66:5c:be:33:04:62:a9:ab:
                    6f:58:dd:d7:1e:ec:44:8a:d3:d1:15:c4:30:fb:01:
                    72:fe:4e:a9:a4:47:7d:78:85:05:ca:63:31:a2:a0:
                    3b:79:8a:06:70:93:3d:67:40:ce:e6:04:ad:a0:a6:
                    85:f1:ce:86:f7:fb:2b:4b:b9:2f:ef:c6:ba:47:0d:
                    d9:f2:73:ff:1c:2b:74:0c:9a:16:4f:01:f8:65:d3:
                    27:2e:2f:20:28:2a:02:74:8a:60:a6:fb:39:c3:ae:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:49:88:A4:C0:2D:2A:DF:2F:CC:AB:A3:34:8B:BB:60:3B:F4:EC:BB
            X509v3 Authority Key Identifier:
                keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a0:49:0f:92:94:88:47:6b:e2:47:85:c3:54:27:8d:a2:b1:
         67:26:56:c0:0a:9a:30:f9:73:3c:3f:13:89:46:f0:e4:ae:b2:
         93:bb:1b:d3:7b:1d:03:8e:67:3b:76:d9:8d:db:ba:03:12:63:
         02:6b:78:2b:38:18:ed:63:be:40:b2:2f:63:be:ee:58:20:32:
         00:93:36:cd:fc:bc:91:08:fd:8d:9b:4d:6f:e3:e1:54:d3:27:
         b0:0a:63:ee:82:7c:f8:5c:c9:6c:23:37:a2:f0:4b:e4:14:d5:
         93:bf:e6:21:55:4d:2d:f9:61:6c:ed:e2:f7:bc:9b:59:e5:99:
         8d:b2:44:a6:8e:6d:c1:25:7c:f5:81:a7:54:62:26:cd:6c:fe:
         99:90:08:53:72:30:a9:41:34:51:f3:ae:c0:5e:df:0c:c7:68:
         13:54:ec:01:07:7e:1c:d2:59:74:09:45:98:bc:b7:87:cf:55:
         2e:32:cb:89:04:3f:d4:58:84:12:ba:dd:69:ea:a4:74:47:fc:
         79:96:5e:19:8e:5a:5c:4a:01:de:d6:dc:a7:85:62:d5:43:90:
         bb:2f:c3:65:94:85:1d:74:d7:01:01:35:ef:69:80:db:cb:9b:
         1d:8c:e0:d5:c7:99:c1:d0:76:2f:cb:86:50:f3:05:08:0d:03:
         07:07:bf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:45:48 2024 by rpki-client on console-ams.rpki-client.org