Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
File:                     HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json)
Hash identifier:          YSFqIwUJOR9CvJT2nDVcEF49LrKxhCJzQF6AZ2MfdPs=
Subject key identifier:   51:4B:EC:77:37:34:02:F3:C6:43:14:00:22:F4:9A:A2:31:3D:A8:EC
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Certificate issuer:       /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial:       181D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
Manifest number:          1805
Signing time:             Sun 24 Nov 2024 16:24:39 +0000
Manifest this update:     Sun 24 Nov 2024 16:24:38 +0000
Manifest next update:     Sun 01 Dec 2024 16:24:38 +0000
Files and hashes:         1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: td196iSk4TOrbw0bT3ptxS/p9c2YcCiCNgrwp1GseAw=)
                          2: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: c8eXvMsfFA7Ytf2InKLX8jw3aUNTnVG1lQg01oaNTHw=)
                          3: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: ytFM1wPJb+ZhqA3+BNReAuRWiZPk0aQTwlVWywjJ0c8=)
                          4: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: wfXqeuO++f5A3YBGSiIBBPBFFyOKEJbFfKtCHF7f7hI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
                          rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6173 (0x181d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
        Validity
            Not Before: Nov 24 16:24:38 2024 GMT
            Not After : Dec  1 16:24:38 2024 GMT
        Subject: CN=67435346-8c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:e1:34:65:87:a2:1d:e1:e0:ce:62:f5:b4:
                    7d:cd:1d:11:89:ed:53:60:c4:f4:f0:62:a2:26:01:
                    ad:d8:d3:26:42:73:77:42:74:ba:9f:f0:65:21:b5:
                    b5:96:73:f3:33:fd:7b:be:0c:31:a3:5a:67:1f:8c:
                    a2:40:f6:19:c0:a9:7d:a0:28:06:9c:30:ee:fe:95:
                    ac:b3:c1:7d:df:3b:d9:a5:c6:51:f6:1d:05:62:42:
                    94:cd:50:bb:e8:61:60:0b:18:26:30:1b:f4:45:19:
                    00:bd:7d:9c:50:86:0c:bd:73:ed:55:56:1b:60:4d:
                    5f:00:48:9f:e2:a6:f6:d1:b3:72:ef:fd:93:90:79:
                    21:c0:2e:3c:9f:8b:8a:93:12:54:51:4d:c2:f5:ac:
                    5d:67:5d:01:04:43:0f:9a:c9:68:63:de:c1:c8:0a:
                    d7:83:93:8a:6a:db:d7:77:93:11:ba:0b:a2:5b:6b:
                    84:67:8c:d1:af:a5:da:95:8f:0f:d7:ef:9a:23:7c:
                    c6:1e:01:1f:95:21:00:6b:11:6b:29:e6:ef:b8:3c:
                    92:78:4b:c5:5d:33:56:e5:dd:ed:ab:04:d5:0f:35:
                    53:e3:21:d1:0d:31:31:64:3d:4c:31:78:83:6d:52:
                    71:a8:ba:0a:14:02:f8:8d:c2:d8:67:10:8b:6f:6a:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4B:EC:77:37:34:02:F3:C6:43:14:00:22:F4:9A:A2:31:3D:A8:EC
            X509v3 Authority Key Identifier:
                keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1c:4a:3c:29:16:81:2f:04:49:73:69:9a:c6:2a:7a:31:53:
         4e:cb:1f:cd:68:8d:9a:47:17:c5:bc:e7:73:73:62:10:2a:07:
         8d:db:65:f4:4c:bd:8c:fa:d7:bc:99:c1:69:35:9d:0c:78:f9:
         ff:c5:3a:d7:0f:e1:c7:51:14:7d:1d:8a:bc:6f:0b:13:67:f0:
         14:b7:b9:76:e7:2f:90:65:22:f7:1c:9b:dc:fe:c0:30:64:e6:
         0f:05:40:34:8b:3a:c9:9c:b3:0b:0a:ed:5e:4b:8d:98:a2:31:
         85:a5:97:e5:ec:94:5b:b1:b6:a8:22:08:75:34:58:32:ff:3a:
         db:c7:31:98:4e:e1:54:0b:f5:bc:0d:42:cc:00:f9:6d:2a:36:
         da:9e:25:89:b7:b5:62:d4:52:aa:e2:78:62:87:22:b1:df:59:
         6b:ce:cc:4a:cb:2c:8d:2a:39:46:25:8b:84:3b:c3:6a:2a:01:
         43:68:1c:cb:b5:9e:4b:46:fe:3c:7f:e3:52:ab:5e:ab:c8:87:
         a0:c0:b8:22:b8:bc:4a:49:61:6c:d7:b9:52:9d:e0:1d:97:51:
         bb:2d:5d:b3:e6:20:2d:33:e7:0a:29:7e:6c:a4:15:b3:fe:bc:
         b2:7f:59:b6:09:22:97:91:5a:4b:b2:cf:8d:3f:50:ae:e8:64:
         94:a7:8e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:19:59 2024 by rpki-client on console-fra.rpki-client.org