Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File:                     NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier:          T8Pnz7QAoxL5caxl+a8zEoMqgIXO6NVJj+HHxaI+JEA=
Subject key identifier:   C0:67:A0:4E:D2:62:BC:A8:E5:A8:EE:B7:A0:51:47:F9:E1:98:78:4A
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer:       /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial:       05DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number:          05D9
Signing time:             Fri 22 Nov 2024 22:30:56 +0000
Manifest this update:     Fri 22 Nov 2024 22:30:55 +0000
Manifest next update:     Fri 29 Nov 2024 22:30:55 +0000
Files and hashes:         1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: bTJUZySqIool8DLjI9A9rcOq02ADHAI3LRDqjyMnVuk=)
                          2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: XhabguNmfoaoaLydzPCMcINuMUCMOCq7nXAwub1uejA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
                          rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
        Validity
            Not Before: Nov 22 22:30:55 2024 GMT
            Not After : Nov 29 22:30:55 2024 GMT
        Subject: CN=67410620-4595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:d3:0f:37:97:bc:19:0c:f1:0d:51:79:fb:
                    25:dc:7a:46:7c:b3:1e:a7:a3:6d:98:bc:87:73:96:
                    76:89:38:aa:4f:2f:11:20:59:de:4b:79:3a:d0:75:
                    17:2e:e2:9a:bc:1c:2c:31:93:a1:fd:4f:b1:4c:ca:
                    be:a6:4c:fc:db:fa:64:c4:91:d9:2f:3a:b3:85:f4:
                    4b:17:fc:35:0c:dc:a1:43:18:18:4c:4d:46:df:26:
                    18:9a:91:96:00:fe:0c:f0:c9:17:35:38:39:26:93:
                    50:d0:ec:9d:0f:cf:18:bf:d4:e4:44:6f:c3:60:bc:
                    56:fe:10:cd:86:3b:24:cd:34:42:73:b1:d9:30:bf:
                    74:a6:03:79:27:ed:42:e9:f5:ad:f4:6e:ec:48:1f:
                    9e:7a:7f:b0:61:92:67:79:58:61:52:98:4f:ad:d9:
                    86:ce:16:5b:d3:a2:9e:e1:df:d7:71:91:e7:00:3d:
                    da:34:af:2b:0c:96:3b:d9:af:84:92:3c:8e:9a:2d:
                    f1:12:f2:55:76:92:9d:f2:ca:89:3e:9a:2d:e1:c6:
                    17:04:b8:bb:42:fe:15:7f:9d:60:4b:b2:07:2b:22:
                    e6:8f:0c:d1:f5:23:4b:39:69:cd:5a:36:b7:59:ea:
                    da:2d:25:52:c3:c5:78:f8:59:38:8e:72:d1:03:59:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:67:A0:4E:D2:62:BC:A8:E5:A8:EE:B7:A0:51:47:F9:E1:98:78:4A
            X509v3 Authority Key Identifier:
                keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:93:15:52:e4:75:41:c3:bd:8f:9a:e6:a0:46:0c:1d:5e:f2:
         9a:4e:02:dd:e4:fe:f6:01:5b:84:82:ea:8e:bf:aa:e7:b6:cf:
         f0:59:66:4d:81:be:b8:a5:15:84:16:16:6c:85:31:7d:b3:35:
         2b:e4:b9:1a:b4:7b:e1:9c:f3:0c:00:0d:8d:60:83:41:37:3b:
         ec:1a:13:4b:f6:1d:c8:56:f8:60:3b:a4:17:64:d7:08:ac:fe:
         8f:13:f6:63:8a:2b:e1:ce:c1:15:0e:db:f9:87:02:6d:bc:f3:
         1b:22:4d:80:65:84:96:5e:5a:42:6a:d4:53:1c:ea:54:ec:24:
         a5:7a:38:bc:0c:66:ae:da:75:fe:c3:ed:86:a9:0f:ac:b7:0d:
         0e:eb:00:24:cc:c4:44:38:68:7f:b4:83:22:27:cd:5c:7a:43:
         00:2e:6b:ff:64:e8:d8:7e:a5:d4:5c:28:dd:85:f2:24:d8:51:
         82:8a:87:f5:5c:38:3d:70:0a:ee:5e:62:56:9e:56:14:b2:23:
         e6:2b:5e:ce:5e:ce:b4:cc:df:41:48:9e:36:ab:3d:3f:e0:ed:
         a5:a7:a0:20:bf:20:f2:c4:7d:06:50:07:b6:3b:3f:31:27:89:
         35:dd:ef:50:8c:83:c3:cc:fd:6e:a9:3c:91:fe:40:b3:07:9a:
         d6:72:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:24 2024 by rpki-client on console-fra.rpki-client.org