Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
File:                     rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft (raw, json)
Hash identifier:          f5LJIkRgx/uaCzRz2CDrymdveslUETaNF06LTdCoxAc=
Subject key identifier:   AA:6F:97:B5:58:FF:D6:69:78:57:05:00:A7:4B:8E:A5:46:62:88:34
Authority key identifier: AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
Certificate issuer:       /CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
Manifest number:          48
Signing time:             Sun 03 Nov 2024 05:13:43 +0000
Manifest this update:     Sun 03 Nov 2024 05:13:43 +0000
Manifest next update:     Sun 10 Nov 2024 05:13:43 +0000
Files and hashes:         1: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl (hash: nko8wbMyzqfnrJ8GpntomM6SmIKqbM5VwKnNZVruiDk=)
                          2: 25684F2A2F9211EFBF3A3C2EC4F9AE02.roa (hash: 9NlslLZYPXH+TBKrIQNfMaTgXRaOGsOGE0Xz818HnH4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl
                          rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
        Validity
            Not Before: Nov  3 05:13:43 2024 GMT
            Not After : Nov 10 05:13:43 2024 GMT
        Subject: CN=67270687-980e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7e:08:25:46:f3:95:fc:12:a2:ba:8f:0f:e3:
                    f6:c5:20:4b:05:a1:b0:e7:a2:17:63:80:61:13:60:
                    3c:28:bf:f6:10:b8:19:c8:d6:6e:83:06:30:d8:aa:
                    67:47:4f:4d:59:f1:5e:0e:f2:8f:bd:ff:04:49:a3:
                    e9:90:62:91:79:00:7a:88:d4:29:01:d1:15:35:86:
                    6e:0f:63:8d:1f:d4:77:a3:7a:28:22:39:e0:87:02:
                    9c:d0:62:2c:81:94:16:c1:f1:ce:d6:76:8d:46:46:
                    10:45:ed:f7:ac:29:1b:bd:27:6b:9d:1e:74:61:84:
                    c1:d8:20:5f:3f:a9:86:74:a6:2d:6b:cd:e7:6b:9a:
                    8b:af:ed:5e:81:c8:ae:cc:82:a8:42:30:32:db:94:
                    13:26:d7:fd:46:eb:c5:aa:60:a3:bd:0b:26:39:eb:
                    30:07:05:65:59:3a:0c:e8:c9:19:a0:99:3b:89:ec:
                    19:ec:84:3e:9e:9b:e6:c9:5c:6f:ad:3b:a6:f5:09:
                    24:df:d6:ce:84:82:df:44:0e:9f:f4:a3:91:fa:df:
                    19:61:3d:d0:02:e1:4d:8d:68:37:ab:fe:1c:7f:c0:
                    74:ad:b2:b0:14:ab:cc:ae:9b:d8:d6:c8:77:72:7b:
                    f5:24:22:06:5f:5f:8c:c6:4e:c2:87:cb:b0:64:ce:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6F:97:B5:58:FF:D6:69:78:57:05:00:A7:4B:8E:A5:46:62:88:34
            X509v3 Authority Key Identifier:
                keyid:AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a0:a1:a7:8a:81:2d:f3:1d:79:67:dc:b3:22:09:c4:eb:d5:
         bc:27:23:dd:57:68:88:ae:13:1a:a6:ce:75:44:69:42:71:dc:
         88:4b:99:44:98:cf:d4:73:1f:9e:d0:09:79:ff:f1:a5:6d:84:
         b8:d1:07:1b:bb:21:ee:98:a3:fe:a8:c7:85:9a:cd:92:3f:1b:
         92:eb:bf:13:f6:27:d6:56:76:34:25:db:bd:7a:69:20:85:a3:
         98:36:d8:ae:5b:1e:56:6b:05:63:b1:1b:40:4b:18:90:da:5f:
         c9:76:81:48:6a:90:0a:4d:d1:03:a2:79:0c:a6:3b:af:43:f5:
         94:d7:4f:1c:31:75:f1:7a:bc:cb:3e:e9:19:32:1a:02:87:a7:
         9f:20:34:7d:4a:98:d8:ad:8f:e2:92:43:70:59:2f:48:c5:6b:
         fa:87:ab:22:e2:11:1f:cf:97:70:54:3d:09:53:5c:d7:ea:2f:
         c5:aa:f6:b3:c7:b6:42:e4:8d:30:b3:c3:f5:f1:c2:cd:e8:31:
         68:b1:50:c9:2d:ba:7b:b3:34:68:11:9d:a5:00:95:38:92:5a:
         9f:31:e8:44:e4:9d:bb:06:6f:d3:8b:47:01:ba:2e:ce:db:2a:
         5d:85:55:40:b3:76:6a:61:9d:94:ff:86:1a:e8:80:da:80:23:
         06:07:83:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 06:59:36 2024 by rpki-client on console-ams.rpki-client.org