Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
File:                     AXJLovQFMrfgjXIPTAlmQbShyMQ.mft (raw, json)
Hash identifier:          nT64/3sdWLt1/PrGhpxdgdayg1smopsnI2josGLuOm0=
Subject key identifier:   EC:5A:62:AE:E4:FE:09:E9:3C:7D:25:98:9D:69:E3:7B:FC:AC:99:69
Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4
Certificate issuer:       /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
Certificate serial:       0480
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
Manifest number:          047C
Signing time:             Fri 22 Nov 2024 23:36:59 +0000
Manifest this update:     Fri 22 Nov 2024 23:36:59 +0000
Manifest next update:     Fri 29 Nov 2024 23:36:59 +0000
Files and hashes:         1: AXJLovQFMrfgjXIPTAlmQbShyMQ.crl (hash: dW76Ky/C5jEEiexspIpKisTfbx53Q9mgXZPJtFUY4YU=)
                          2: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (hash: ACAwTbWxAFnsJHmx19kYwRZ2kYaKIODFxQCzfuXITvo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152 (0x480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
        Validity
            Not Before: Nov 22 23:36:59 2024 GMT
            Not After : Nov 29 23:36:59 2024 GMT
        Subject: CN=6741159b-8bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:9a:e2:4a:70:82:84:8a:93:e5:7f:91:f1:
                    ad:c7:e7:13:38:2f:d5:90:8e:3e:59:b3:79:6c:45:
                    f6:24:c6:2b:23:3a:4c:0c:6e:fe:4d:18:3d:98:d1:
                    1e:14:92:17:72:2c:62:e3:07:96:26:4b:65:d6:9b:
                    fb:4a:2a:39:e5:10:63:04:ba:94:1d:d4:53:e4:d5:
                    07:78:6b:54:dc:03:58:6b:96:65:0e:bf:94:90:b5:
                    52:5f:4f:2e:bc:c7:09:72:b1:f4:d9:cf:eb:00:6c:
                    96:95:ec:09:45:c1:73:da:cc:d4:7b:b2:10:f4:05:
                    bc:a0:c8:90:db:ef:f8:19:8b:42:9a:53:b3:df:59:
                    e6:f6:cc:82:61:42:2c:a5:6b:9e:c4:48:55:8c:88:
                    2e:5e:51:03:82:25:14:d4:22:ac:32:c0:ec:0f:79:
                    d0:7e:4e:92:5b:f0:07:ce:91:8f:9d:86:06:58:17:
                    5e:a1:ba:ca:47:91:37:8a:a7:b0:3f:b7:2a:49:76:
                    25:35:42:41:32:d5:fc:8b:35:05:11:5f:e8:33:05:
                    0d:34:15:a7:72:73:c3:9e:52:70:1a:5c:17:c5:b4:
                    9c:16:a1:c9:06:56:09:5a:ff:85:05:65:05:bb:66:
                    a3:c4:42:84:9f:38:f5:b4:93:a6:0b:b8:d5:07:4b:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5A:62:AE:E4:FE:09:E9:3C:7D:25:98:9D:69:E3:7B:FC:AC:99:69
            X509v3 Authority Key Identifier:
                keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b4:c8:eb:c3:2f:4f:09:7e:77:ba:0d:5f:1e:d1:86:87:a0:
         09:6e:3c:3c:fa:29:0d:d5:ca:67:43:a4:66:72:0d:3d:c5:7f:
         63:b4:95:e5:2d:e9:3d:4d:a8:20:9c:ff:b7:a2:72:6d:c8:92:
         04:33:14:0a:84:68:0f:ac:a9:f8:33:86:61:1f:0b:d0:17:60:
         6d:c5:c8:85:c3:89:81:c4:e8:2c:9b:b8:1b:e4:65:66:0c:0c:
         8d:3d:70:4c:74:be:d2:73:72:e5:5f:93:45:fe:e2:ff:7e:b3:
         65:89:31:a1:4c:e5:7a:7b:8d:70:10:33:3f:50:10:39:14:96:
         9f:fd:89:23:9d:97:18:bc:89:f3:e9:11:9e:3b:33:99:ff:08:
         b4:fa:d4:d7:30:cc:ea:73:32:7e:03:af:33:3b:62:60:5e:77:
         7b:81:f1:fe:23:e0:77:fc:29:77:91:0f:1a:4a:b1:9f:19:c7:
         4e:b4:61:d3:c1:e5:d0:93:45:04:c2:5b:5a:81:86:de:9a:02:
         0b:41:af:0b:10:f8:92:a7:da:05:58:15:36:c0:41:e5:72:47:
         6c:8b:16:e6:d1:c4:7f:13:b6:5c:ad:86:f3:d7:2e:aa:f4:f9:
         fb:d0:f7:db:0d:c2:94:e9:3d:e2:32:3a:ad:dc:71:d1:fc:22:
         3c:8e:91:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org