Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
File:                     aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft (raw, json)
Hash identifier:          wI5znFgKZ0i4Uw11DM5CVFfxukDae00uS4aYJPh2xZE=
Subject key identifier:   D6:8D:E1:30:10:18:E8:FE:44:C0:B7:86:23:42:3D:B7:26:C6:81:A4
Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
Certificate issuer:       /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
Manifest number:          25
Signing time:             Thu 19 Sep 2024 06:04:39 +0000
Manifest this update:     Thu 19 Sep 2024 06:04:38 +0000
Manifest next update:     Thu 26 Sep 2024 06:04:38 +0000
Files and hashes:         1: aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl (hash: TMDozLtfI1P1Be3BPwFLNYqJZenjpEgwlMexwpEORr0=)
                          2: FAA42C4A42B111EFAE800D79C4F9AE02.roa (hash: /rjpz1hNiURJlzYzG7LiYqydbUKF6oAbVGKXicEFk0U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
                          rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 06:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
        Validity
            Not Before: Sep 19 06:04:38 2024 GMT
            Not After : Sep 26 06:04:38 2024 GMT
        Subject: CN=66ebbef6-3c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:f3:74:6e:3d:ae:7e:fe:d7:0b:c5:67:b8:
                    b2:73:fb:e8:95:35:78:fb:cc:43:d3:3a:05:9e:5b:
                    4a:46:e4:fa:87:bb:5e:e4:23:c5:7c:2c:63:42:4e:
                    94:a2:12:21:eb:26:8b:db:94:86:53:8e:bc:ef:47:
                    c7:0e:a0:e8:8a:09:e9:3c:dc:32:74:7e:0b:36:a9:
                    f9:a7:3e:ca:50:fc:5c:3b:71:37:f4:6a:4e:6e:e4:
                    ef:b6:95:e7:8b:24:ba:f8:90:81:28:1e:ad:4f:76:
                    c2:88:fc:98:78:46:63:0b:dd:bb:49:fb:da:0b:3f:
                    a9:33:b1:b6:2c:6c:43:d3:0c:d0:bb:98:79:a4:68:
                    c3:e3:a3:32:36:d4:06:00:3b:ee:9c:28:97:aa:ff:
                    fa:da:fe:6c:64:bd:58:15:9d:18:a9:7c:f2:51:9d:
                    5a:10:54:62:60:57:66:5b:99:8e:88:26:35:e0:ad:
                    8e:3f:d3:e1:45:d7:07:9c:8f:9f:e3:e2:5b:f2:c7:
                    cb:86:90:81:35:61:b8:5f:e1:b8:6f:03:40:31:ec:
                    bb:de:65:51:91:0b:70:7f:f3:9c:77:1a:30:ad:89:
                    e5:5a:d5:5f:2e:09:4b:7a:5d:bf:86:21:f2:52:06:
                    4a:9f:73:78:6e:16:ae:eb:62:60:b2:26:bb:75:c0:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8D:E1:30:10:18:E8:FE:44:C0:B7:86:23:42:3D:B7:26:C6:81:A4
            X509v3 Authority Key Identifier:
                keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:60:b1:09:f7:dc:b7:ad:4e:36:9d:91:7c:7a:35:45:44:e4:
         58:46:f4:1c:f8:b0:fc:30:60:de:b9:61:36:7a:6a:46:63:1e:
         34:56:c9:ba:2d:d3:34:ce:6b:4c:e2:d5:5b:30:37:12:ac:d6:
         e8:2f:77:0d:55:71:3e:60:8b:ae:eb:5a:ef:d1:ac:5c:b6:84:
         f6:d9:e5:81:b5:3c:19:1a:4e:2e:6f:4b:d7:af:e5:c9:e0:5d:
         bc:35:7e:56:b3:db:96:38:23:f6:86:5c:f9:a6:97:53:c5:76:
         63:ab:8e:60:f9:89:d3:ee:ca:de:ab:57:1e:89:c3:11:ba:4c:
         dd:8f:10:be:4a:93:3d:88:d5:0a:f6:94:f9:90:e0:d2:e1:30:
         b7:b1:9c:28:fb:14:4d:82:53:a2:98:7d:cf:45:a4:d8:49:fb:
         55:dc:ac:3b:6b:08:a4:4e:86:26:aa:e7:00:fa:ff:7e:2c:6b:
         46:87:46:61:82:fc:fc:9b:63:0d:0e:2e:ec:25:0d:ed:b9:53:
         aa:b0:fc:b3:61:76:9a:bc:29:dc:6a:49:37:9d:73:43:05:d0:
         96:c5:a3:c9:b8:6f:ad:57:a8:5a:0b:6c:b4:93:ff:cc:46:5b:
         c7:64:69:8b:af:fc:7d:cb:73:24:a5:52:e1:dc:c7:17:1e:7d:
         de:5d:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 07:13:47 2024 by rpki-client on console-fra.rpki-client.org