Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
File:                     kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json)
Hash identifier:          8Zg987Xk8rxVUqIj6e0cB9vwdUoZjpazJJ0k6QFg6iY=
Subject key identifier:   47:F7:F9:27:42:20:1C:4D:10:02:8C:3F:A5:C6:BB:09:3D:C2:30:25
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Certificate issuer:       /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial:       09B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
Manifest number:          09AF
Signing time:             Fri 22 Nov 2024 19:46:00 +0000
Manifest this update:     Fri 22 Nov 2024 19:46:00 +0000
Manifest next update:     Fri 29 Nov 2024 19:46:00 +0000
Files and hashes:         1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: fmpBubA28bUnjcNfueIoSCmB/sJqC/Z+aky2MaxU9M0=)
                          2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: 05sTqgo+Z4rvsk50BgwNBJM+KFLlXu8LZA40jZLQRSk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
                          rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2486 (0x9b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
        Validity
            Not Before: Nov 22 19:46:00 2024 GMT
            Not After : Nov 29 19:46:00 2024 GMT
        Subject: CN=6740df78-2c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:11:68:00:aa:52:0a:08:2f:39:c1:e0:a8:
                    2e:4a:69:c4:a7:54:c5:08:df:6d:41:8c:d1:a8:3b:
                    91:ce:11:17:54:d1:7b:8b:68:25:94:5f:29:e1:71:
                    03:7d:a1:11:49:c1:27:e3:48:db:e4:b6:07:a0:a4:
                    c8:c6:65:70:90:20:34:d8:ad:73:69:50:a6:f6:46:
                    2c:ad:7f:23:d3:26:9d:32:55:97:24:83:60:b7:bb:
                    20:6b:d0:5f:c2:d3:c5:83:80:ee:d9:c9:0e:68:a6:
                    bd:41:13:19:2e:b0:b4:2e:30:67:a8:6e:bc:be:e0:
                    bb:32:c3:1b:2e:a0:a6:7a:6b:5f:f7:df:98:e8:4f:
                    b6:f2:bb:ad:6c:9f:55:db:4a:98:0e:cf:ad:e0:db:
                    89:cb:32:8a:3a:d7:37:05:3d:24:c4:68:16:5c:e6:
                    5f:1b:1f:06:f1:0d:15:1f:e2:eb:15:47:63:59:82:
                    45:ff:6e:af:14:d5:54:43:06:95:22:7c:29:8d:56:
                    bf:23:16:61:37:fc:fe:4d:93:42:06:eb:85:44:e1:
                    7b:01:0f:98:0d:c4:b4:38:8b:52:1b:48:56:db:98:
                    1d:5a:9a:9c:bf:c1:ac:ae:51:c7:c2:19:05:99:27:
                    e3:26:d2:57:e1:86:dc:9a:67:1d:47:3b:48:7c:17:
                    7a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F7:F9:27:42:20:1C:4D:10:02:8C:3F:A5:C6:BB:09:3D:C2:30:25
            X509v3 Authority Key Identifier:
                keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:ea:18:a8:31:0d:1e:6b:f6:21:4d:63:42:26:e1:f5:20:
         18:ca:1d:b1:54:11:6d:6f:99:d0:5f:36:5a:f5:f0:34:39:e3:
         85:cc:9b:74:4f:2d:f1:6d:1c:4a:e7:3f:65:ed:1d:eb:8a:24:
         d7:f9:bd:34:b2:1a:fc:7c:e7:c7:77:1e:e2:33:57:93:7d:bd:
         13:2c:b9:2f:ae:8c:76:c4:c5:1c:ab:cf:d6:0f:d2:23:bd:fd:
         30:67:cc:97:5d:3f:b2:ba:3c:f6:dd:83:77:6e:b1:85:8e:70:
         f1:ff:01:6d:41:45:a2:57:d9:5a:97:46:15:9a:3b:a1:00:86:
         fc:d7:9b:3a:1b:79:b7:34:71:84:80:e0:30:96:57:63:1c:14:
         58:a2:4c:84:49:15:ed:e8:02:b9:c9:94:ce:4c:4a:2c:c2:55:
         54:b5:32:6b:cf:23:b2:a4:dd:48:9b:62:ac:cd:f5:53:8b:f1:
         a5:65:47:2a:5c:fa:54:df:a5:8d:3d:11:5c:9d:fe:c0:51:fe:
         4e:2a:cd:10:0c:d0:98:7b:9f:60:af:be:f2:3a:33:27:01:b8:
         db:92:b0:1e:a0:2c:f3:de:58:56:d5:6e:c1:78:9a:ea:f2:4a:
         8a:17:9f:a9:ef:fe:d6:16:6c:12:2f:23:4b:f9:4c:6c:34:09:
         6e:d7:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:24 2024 by rpki-client on console-ams.rpki-client.org