Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
File:                     nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json)
Hash identifier:          yd/StgkSiPWsVya4uMgd/LQvm8YwNohokkJWJ35W+9Q=
Subject key identifier:   48:F4:DE:E6:DE:BB:5E:A9:0C:43:D6:CA:C1:CE:2D:90:32:C9:23:2F
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Certificate issuer:       /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial:       0B9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
Manifest number:          0B93
Signing time:             Fri 22 Nov 2024 18:44:58 +0000
Manifest this update:     Fri 22 Nov 2024 18:44:57 +0000
Manifest next update:     Fri 29 Nov 2024 18:44:57 +0000
Files and hashes:         1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: yMQXx1fDFDEBc1CepL18t4YhPXFiH4AtMOTmaAm8Jbk=)
                          2: 554D5B96098B11EE8E1F3382C4F9AE02.roa (hash: NNFk73eup6xDD5/Xe8XjuQFVJp+1cwXSTmmDOM53J3A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2974 (0xb9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
        Validity
            Not Before: Nov 22 18:44:57 2024 GMT
            Not After : Nov 29 18:44:57 2024 GMT
        Subject: CN=6740d12a-1fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:b8:14:fb:75:c6:06:cd:cc:d3:e1:d2:ef:
                    78:18:24:6b:e3:a6:0a:e1:4d:ef:eb:51:85:fe:79:
                    9b:41:f1:dc:49:5e:58:4e:f5:4d:75:40:37:e4:0e:
                    03:00:f2:66:92:cf:5b:bc:ad:de:8b:38:9e:a2:06:
                    c0:3a:2c:f8:c5:97:82:bd:4f:c1:20:6a:08:46:ca:
                    4f:01:f4:c5:fd:70:ab:c3:01:60:0f:10:2a:51:a5:
                    c4:f1:d7:2b:d7:ef:b5:12:04:e0:f0:ea:62:fa:08:
                    b2:62:27:2a:b9:cb:bd:a5:0a:6e:56:ee:9b:cf:f8:
                    d1:8e:d2:1a:f1:03:66:c9:4e:24:50:1b:eb:a0:fc:
                    22:a9:57:86:c8:91:bd:f3:f0:ce:ba:c6:53:ae:2f:
                    ad:7b:6f:2e:68:1a:4d:fe:ba:b5:98:06:99:95:69:
                    b1:21:67:6c:7b:69:ee:46:c2:8a:fb:d9:55:0f:20:
                    0c:75:b2:e8:e2:08:5f:58:9e:f2:4c:47:2a:5e:63:
                    3c:36:af:5a:f8:20:29:aa:66:98:8a:99:2c:31:cb:
                    aa:24:3d:fe:c8:16:05:5a:fd:97:dc:33:6f:17:b7:
                    97:aa:77:25:87:ef:7c:5e:9f:3c:ee:aa:73:cc:d6:
                    35:48:14:5f:77:e7:3f:ee:69:e2:a9:2c:b3:36:13:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F4:DE:E6:DE:BB:5E:A9:0C:43:D6:CA:C1:CE:2D:90:32:C9:23:2F
            X509v3 Authority Key Identifier:
                keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:dd:e2:59:2f:c5:3b:a2:53:58:ec:d5:01:c4:ac:d9:bb:1d:
         04:3c:be:47:76:d7:35:74:1f:2a:16:96:ef:03:8c:f3:69:68:
         54:46:dd:8c:eb:97:a0:95:9a:b0:96:c7:02:7e:29:12:53:57:
         ef:1c:90:05:4c:d3:97:49:6b:17:bd:02:3c:ba:4c:d7:af:1a:
         07:e8:c8:38:ff:7b:49:82:8d:74:de:02:9d:6f:e2:cd:93:71:
         e2:5d:3f:3a:69:e5:55:e0:21:41:5f:65:a8:82:9a:b8:59:26:
         f1:59:5c:bb:31:4a:f9:79:9c:b7:a1:2c:7c:d6:9e:e6:53:46:
         43:3e:80:3d:5e:2a:8b:e3:1b:fc:b8:94:0f:05:72:ad:fb:e8:
         11:5b:c9:73:2d:08:d2:bf:1f:54:4b:59:ee:a0:eb:6e:17:db:
         4c:d2:d6:93:c7:6c:31:e1:e4:a4:e6:fe:bc:fc:81:08:0c:e5:
         bb:1f:ff:10:6b:80:be:c6:21:bd:07:c2:3b:be:67:24:37:c7:
         59:7b:c6:11:64:0a:6a:64:46:79:e2:b4:44:68:b3:69:a6:43:
         46:d8:80:cf:9d:56:c0:19:4a:ac:80:ec:0e:66:8a:34:d2:46:
         a6:a5:e1:e8:db:c3:c9:17:97:c7:d2:ad:04:c3:c8:1e:ed:7a:
         dc:2a:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org