Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
File:                     0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json)
Hash identifier:          uN57A4UInTGOb6Pfy6LX/RyE9hSUHwhKo8DNEcFn80U=
Subject key identifier:   8E:A7:2B:46:39:1C:0E:0C:15:C0:FE:21:43:AF:F8:8F:80:70:3A:92
Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
Certificate issuer:       /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Certificate serial:       0A77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
Manifest number:          0A6C
Signing time:             Fri 22 Nov 2024 19:25:14 +0000
Manifest this update:     Fri 22 Nov 2024 19:25:14 +0000
Manifest next update:     Fri 29 Nov 2024 19:25:14 +0000
Files and hashes:         1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: FA5rEztCJts0+pP3/jrPBg17sas+1nVwRtU6etUM19g=)
                          2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: kRARa+uUzxbZ+NEb5MEJFAdFIet/TAzXthEijJD892g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
                          rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2679 (0xa77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
        Validity
            Not Before: Nov 22 19:25:14 2024 GMT
            Not After : Nov 29 19:25:14 2024 GMT
        Subject: CN=6740da9a-42e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8e:c3:6c:ae:7d:a4:2b:76:ee:d6:6d:a7:78:
                    30:40:3b:a6:3b:4c:0c:b8:bf:44:46:33:17:9c:24:
                    fb:a0:bb:c2:9e:98:6a:be:e1:20:8b:cb:19:63:1f:
                    16:d2:83:5c:7c:54:25:bf:8e:99:63:2b:b7:72:63:
                    cf:ee:69:a2:8d:e4:a7:61:a1:e9:fe:3c:f3:80:3f:
                    00:c5:21:86:03:79:2a:3e:6c:0d:cc:6a:b0:9b:53:
                    48:ab:75:2e:af:ed:90:86:4e:70:cf:ac:18:2d:02:
                    10:61:52:b2:ef:8c:c7:fa:fe:54:68:2e:4b:ed:50:
                    1c:67:ad:e0:53:77:5f:d2:4b:25:3d:2e:76:b8:4d:
                    95:82:0f:b4:30:6f:cc:ef:b9:39:16:7f:50:29:17:
                    ec:50:87:74:1a:51:50:d8:e5:3d:33:13:78:53:3e:
                    01:28:0d:5c:81:fa:4e:73:74:9e:46:90:7c:2e:da:
                    95:09:9d:a0:80:06:cf:22:64:97:2f:a5:00:7c:f8:
                    38:5f:ff:3c:ae:c4:f3:64:2c:9b:d3:5f:cd:67:95:
                    2b:01:61:48:ed:b7:e0:40:8d:59:e2:e2:1b:08:fb:
                    24:26:67:14:f0:5b:da:52:26:5b:80:bd:3a:32:8a:
                    26:d1:93:08:5e:89:d5:23:b6:a8:c7:b3:46:97:75:
                    71:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A7:2B:46:39:1C:0E:0C:15:C0:FE:21:43:AF:F8:8F:80:70:3A:92
            X509v3 Authority Key Identifier:
                keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6a:54:f0:be:00:74:6f:ef:8c:0c:c5:92:e0:b9:d1:32:2b:
         30:b6:8f:e0:db:f1:73:20:cc:a3:65:45:d0:94:e9:95:47:0a:
         79:06:cf:b4:b1:d6:c7:aa:79:86:0c:eb:96:24:e9:bd:c0:d4:
         07:44:b2:d5:c4:46:2e:b2:ad:c4:26:f5:c6:49:15:8c:46:f9:
         e5:4d:2c:08:31:d8:4f:0d:63:42:4d:fe:40:41:7e:37:20:6e:
         14:e9:18:ce:47:d3:42:17:b5:40:67:1c:6c:35:a9:c5:b3:90:
         30:bc:7f:3b:a8:4a:f0:72:14:6b:22:cf:da:ac:d6:2a:fe:c2:
         44:4b:24:fb:f9:b0:25:0e:91:17:4f:c1:4a:ec:e4:58:b2:66:
         1f:90:2a:30:d6:b9:f3:49:c4:39:33:cd:51:ea:d4:51:e6:07:
         94:bb:f5:03:47:7a:85:d4:6a:eb:ff:d3:1a:32:9f:22:5b:89:
         2c:c8:32:c6:d9:fa:e2:af:7d:3a:40:79:b9:18:d8:d5:59:0c:
         d5:f0:cc:36:2f:00:4a:11:d0:29:5a:34:41:d8:7b:a5:e0:f4:
         50:de:39:8c:e3:74:bf:12:c7:1e:df:df:f6:2a:20:7c:19:6f:
         3b:96:53:69:f8:d7:46:09:80:9c:4a:23:ac:2a:07:c3:aa:78:
         ec:8b:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org