Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
File:                     0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json)
Hash identifier:          yF8NnWSzCO8+fmdPz8crrovDRLjVnnMmk0Nnf+D1DFg=
Subject key identifier:   8D:72:C5:B2:4B:89:78:41:15:65:4A:7F:44:AA:55:D9:E1:E5:A1:58
Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16
Certificate issuer:       /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
Manifest number:          0109
Signing time:             Wed 20 Nov 2024 15:12:05 +0000
Manifest this update:     Wed 20 Nov 2024 15:12:05 +0000
Manifest next update:     Wed 27 Nov 2024 15:12:05 +0000
Files and hashes:         1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: c8gKrt3jFKtqoOuE3OlbvDsqniWrmVpSBboVtOqaEQo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl
                          rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
        Validity
            Not Before: Nov 20 15:12:05 2024 GMT
            Not After : Nov 27 15:12:05 2024 GMT
        Subject: CN=673dfc45-bd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:41:ad:77:5d:a7:04:49:9f:d0:6f:6f:3d:1d:
                    bd:c0:dd:be:e8:30:f3:de:65:54:c9:ff:f3:1d:47:
                    00:9a:64:af:ee:d7:2b:b8:26:d8:e7:13:fd:9a:9c:
                    ad:65:41:41:f3:8d:07:57:99:b8:38:e5:12:c7:b9:
                    17:39:97:94:6c:46:c1:e4:9e:7a:44:98:8a:a5:2a:
                    bf:f6:2e:32:68:17:c8:93:d1:1f:80:a8:6c:81:24:
                    aa:ff:cd:fa:48:a1:9d:32:ed:21:89:26:22:f7:f2:
                    02:fa:4a:20:39:77:16:52:00:27:e7:34:f2:0f:f2:
                    32:b7:2b:e6:ae:11:b8:05:9c:d5:8b:a2:1a:ba:fe:
                    4c:3f:f0:8f:c5:4c:0f:89:22:37:93:88:89:b0:e7:
                    4f:c3:25:07:12:df:16:e9:fc:3b:19:40:40:5a:54:
                    67:8d:eb:9f:75:29:56:c1:38:64:82:39:7d:36:10:
                    d2:9d:fd:e9:44:27:6f:91:94:df:26:37:0f:f2:ad:
                    6c:ff:c6:02:56:52:1d:65:35:df:1d:b3:bc:a9:20:
                    c7:eb:74:62:21:92:99:3f:84:f6:90:99:63:3c:70:
                    a6:55:40:5e:64:4a:20:f1:3d:01:00:29:9d:9a:97:
                    a2:f5:68:68:80:bd:f5:0b:93:a5:d3:27:f4:84:50:
                    1f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:72:C5:B2:4B:89:78:41:15:65:4A:7F:44:AA:55:D9:E1:E5:A1:58
            X509v3 Authority Key Identifier:
                keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0b:81:7d:c2:28:cd:5a:0f:7a:6b:24:5e:50:bc:7d:72:3a:
         1f:95:61:a4:e8:7b:ed:f2:df:c0:83:3b:f3:48:d6:20:f8:81:
         d4:f8:bf:24:3e:23:0b:1a:32:07:4d:ef:49:68:5a:d0:e2:88:
         ed:4a:e3:33:3c:75:80:53:0d:6a:2b:36:5f:96:81:7e:e9:d4:
         c2:4f:94:e8:7e:66:91:ce:10:a7:02:02:c8:b7:76:3d:35:8b:
         74:09:24:0a:6c:a6:59:3c:e4:f7:78:a5:41:39:da:55:b2:2a:
         7b:5e:ca:0e:b4:b4:23:e8:0f:f4:36:25:08:05:c9:92:e4:4b:
         f4:a8:77:b6:a6:a0:ca:5a:7c:b1:e8:90:77:c0:36:f6:02:c1:
         6b:8b:43:18:e5:ca:6c:17:80:ad:c7:d8:0a:7a:1d:5f:09:24:
         7c:c7:5e:24:23:27:5e:42:b9:a6:f5:bd:2b:0e:f6:b6:ab:42:
         21:7c:1d:d1:b3:c5:9b:e7:8a:ef:eb:3e:90:a2:63:55:8d:fd:
         f5:d5:3a:6e:4e:57:b4:55:7b:d0:45:a2:75:fd:40:c2:b7:96:
         49:e7:73:e9:ac:5e:d0:ba:6e:4b:ab:7d:39:c7:21:35:26:d3:
         da:c1:6a:57:fe:ed:7a:21:59:ea:cf:a6:3b:bf:81:bd:99:f1:
         23:95:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:16 2024 by rpki-client on console-ams.rpki-client.org