Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
File:                     cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json)
Hash identifier:          591sc20PW2jvbCgkF4bqrU+MHa+lWdux5CyikR+Kvd8=
Subject key identifier:   C8:74:53:97:75:0F:7F:3E:9E:3C:EA:C5:5C:FA:A3:02:14:F4:7C:6B
Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE
Certificate issuer:       /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
Certificate serial:       092E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
Manifest number:          0919
Signing time:             Fri 22 Nov 2024 20:08:12 +0000
Manifest this update:     Fri 22 Nov 2024 20:08:12 +0000
Manifest next update:     Fri 29 Nov 2024 20:08:12 +0000
Files and hashes:         1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: LZY76kuV/3WIu2U7M6kk0alCfi6mArNpuuv0ccceG0w=)
                          2: 746D55EAC51911EE8C160640C4F9AE02.roa (hash: ZZiIZRMEIsrG7/xqv+su6NUv4n/vVm5n5Gd55n/uWmk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl
                          rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2350 (0x92e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
        Validity
            Not Before: Nov 22 20:08:12 2024 GMT
            Not After : Nov 29 20:08:12 2024 GMT
        Subject: CN=6740e4ac-f35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:14:46:64:82:b3:d0:c7:ae:37:2f:76:5e:
                    05:d4:d2:18:87:b6:6b:92:ed:47:a4:31:96:db:5e:
                    cf:5b:e3:75:59:99:f7:1a:7d:79:b1:4d:5a:e4:1c:
                    cb:17:02:d6:8a:09:68:15:43:7d:de:6d:a6:e7:85:
                    9c:33:52:e7:92:a2:53:45:52:16:61:58:87:ee:4d:
                    de:85:f5:eb:bf:fe:3a:a2:fe:ef:d0:5d:eb:cd:5d:
                    e0:fb:ec:cc:02:3f:8d:dc:35:06:8a:81:c8:dc:a6:
                    f7:a9:44:63:0c:37:c9:ae:18:3f:70:fb:ba:84:d3:
                    ba:00:68:c4:be:70:97:30:50:86:aa:aa:af:c9:22:
                    df:45:60:b1:32:76:07:e6:b0:3a:4c:16:61:a7:ea:
                    14:8e:3b:9d:50:56:06:57:41:49:95:42:59:88:28:
                    42:69:f5:e4:86:64:5c:aa:3a:68:c1:e3:27:58:de:
                    45:97:5e:6a:f0:81:e3:47:39:1a:e9:14:0d:98:f3:
                    5a:61:af:48:e2:c9:e6:64:57:8c:02:08:40:62:fd:
                    3f:7b:ca:27:de:a5:0a:00:8c:9d:9c:a5:9e:66:94:
                    87:4b:58:64:5b:f5:2a:4a:07:2a:b2:bf:8e:23:29:
                    c6:ad:8b:55:04:7c:c3:4e:88:d9:7c:eb:bd:63:55:
                    ea:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:74:53:97:75:0F:7F:3E:9E:3C:EA:C5:5C:FA:A3:02:14:F4:7C:6B
            X509v3 Authority Key Identifier:
                keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6e:5f:f3:a9:dd:9e:6c:b7:3a:06:25:33:43:38:43:89:09:
         dc:6e:9c:b0:55:99:48:97:a5:07:4b:42:ed:a1:b0:dc:ea:9c:
         02:db:ec:60:64:e6:bb:e0:0b:b9:22:b8:a7:af:f7:0b:c1:e9:
         28:04:f1:4d:14:86:0b:25:da:c6:0f:cf:a7:80:69:92:db:f9:
         52:49:0b:64:5f:3a:ca:c6:4e:68:b2:71:fd:be:41:da:e3:d2:
         5e:b4:68:f8:be:b2:12:95:c7:ec:b5:c6:08:20:ed:87:36:2c:
         73:15:18:30:4f:c5:09:4e:75:67:d7:7e:57:e0:91:62:b2:28:
         8b:0c:47:5f:c8:05:d4:31:b8:e5:dd:c4:dc:f2:63:e3:63:cd:
         de:a0:85:0a:da:c0:c5:9a:ed:e3:c9:9e:6c:75:73:bc:8d:56:
         eb:be:66:4c:8a:8a:60:76:a0:7a:d2:1b:99:44:ea:1f:be:2d:
         57:75:31:bd:e7:99:c7:20:e2:ae:41:2b:d1:15:1e:37:86:61:
         5c:35:fc:47:d3:a4:fc:36:2e:89:84:49:41:3d:4e:54:59:98:
         aa:1e:d2:d7:32:48:d5:b0:a7:c2:80:8a:43:59:32:08:dc:fd:
         90:16:35:54:c9:1d:45:0a:db:41:82:9a:7d:cb:8e:20:4d:18:
         00:1d:bc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:25 2024 by rpki-client on console-ams.rpki-client.org