Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File:                     A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier:          Ji9V7dlhIPcOgVyyAl0GoyHBDiTIhbNnmk44lJUarpw=
Subject key identifier:   E3:37:8F:14:31:1A:97:95:2E:63:65:D8:66:F1:DE:FE:92:48:1F:40
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer:       /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial:       06EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number:          06E7
Signing time:             Fri 22 Nov 2024 21:33:07 +0000
Manifest this update:     Fri 22 Nov 2024 21:33:07 +0000
Manifest next update:     Fri 29 Nov 2024 21:33:07 +0000
Files and hashes:         1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: 5uXkASXPbPMRD/lPtdytwiTKmn1355Hzit5mO8gpBl0=)
                          2: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: SJfatYjVkNsGa5A40/Z5VuaU5eA8HwIwMiF3CgmDhpI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
                          rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1772 (0x6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
        Validity
            Not Before: Nov 22 21:33:07 2024 GMT
            Not After : Nov 29 21:33:07 2024 GMT
        Subject: CN=6740f893-a628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1c:49:a3:d2:53:7e:d8:9e:b1:9b:45:99:ab:
                    39:a1:ae:7e:40:bb:7a:64:81:a3:43:13:a5:db:cf:
                    33:47:83:19:78:3d:94:34:e6:e1:b6:bc:31:3f:8d:
                    07:7e:31:6d:b0:d2:01:ad:b4:7b:91:47:06:90:19:
                    90:de:b7:66:e1:62:fa:3a:b2:94:be:ff:45:87:33:
                    b9:e9:15:39:d3:7c:d3:7b:93:2e:67:ef:02:01:96:
                    c9:8f:57:2d:dd:5b:03:41:6f:cb:1e:3a:0b:91:65:
                    11:9b:43:9d:af:ba:e5:8b:41:5e:4c:bf:25:6a:57:
                    ba:44:42:15:22:27:36:ea:d8:99:64:58:07:f5:3a:
                    35:75:eb:1d:7f:02:6e:7e:d3:3f:70:5b:b3:3f:c1:
                    08:ac:ba:24:e7:f3:26:c2:ac:89:ba:8a:fa:7a:b0:
                    98:ae:f5:ce:7a:9d:7f:16:f9:10:f6:c2:71:f6:09:
                    a7:8f:80:26:86:a7:1f:09:8d:a9:f8:9c:32:34:69:
                    4d:8d:69:40:a2:c4:6f:06:ec:07:f1:3d:0b:73:25:
                    e4:8f:af:16:5a:18:8b:f3:d0:05:62:3b:27:9f:59:
                    ea:35:b7:66:b7:fb:43:9b:5f:8d:84:03:96:28:10:
                    12:83:50:4b:bc:a6:d5:1b:23:29:63:06:2e:4c:65:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:37:8F:14:31:1A:97:95:2E:63:65:D8:66:F1:DE:FE:92:48:1F:40
            X509v3 Authority Key Identifier:
                keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:34:f6:42:51:f3:45:f3:d3:45:f4:41:24:04:73:4c:f1:1a:
         eb:be:b2:a9:d0:a3:7a:ba:a8:69:9f:fb:34:8e:b2:ba:da:9f:
         a7:0f:9f:2f:ac:22:7d:0b:70:7d:aa:e0:39:c0:09:8f:e7:ef:
         8b:84:90:97:85:b4:10:d9:ad:13:bf:c7:5a:50:19:2e:b3:cb:
         58:47:8e:15:df:a8:92:71:3d:17:34:70:3d:62:80:f1:42:42:
         db:94:72:ba:14:2b:00:b4:2a:a7:38:d8:b2:74:4c:47:27:e7:
         42:19:bd:7d:c6:77:f1:67:be:ea:9b:6a:e7:1e:29:72:f4:d8:
         dc:28:e7:f9:ad:e0:cc:9d:4c:aa:e1:3a:25:5e:c6:9d:24:29:
         f1:b1:70:e3:00:e6:e9:87:ca:17:dc:dd:7c:45:8d:53:7e:d5:
         71:e5:15:d0:64:3f:9f:3a:aa:10:66:7f:fb:02:3a:35:3e:ea:
         59:02:20:bf:0c:86:eb:63:21:75:a1:6b:2d:61:37:a4:0f:3f:
         4d:54:0a:6d:f7:05:65:5d:02:fc:1f:64:12:2a:db:d5:ec:0e:
         32:a5:e3:60:26:62:70:a9:e4:66:84:7d:7a:cb:cc:78:49:14:
         e6:b1:98:27:52:4c:6a:95:39:a7:5c:b7:c3:b0:34:4b:51:e1:
         52:52:38:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:38 2024 by rpki-client on console-ams.rpki-client.org