Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
File:                     8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft (raw, json)
Hash identifier:          mpvLUjoQLc2ANTUUNoLWCYE1H9gqzQO6uhlkK7aIJ50=
Subject key identifier:   6D:44:CE:0A:5D:AB:26:81:F5:6D:DC:E6:D9:6C:E5:3E:F6:9A:EE:CC
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Certificate issuer:       /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
Manifest number:          0167
Signing time:             Sat 23 Nov 2024 02:18:36 +0000
Manifest this update:     Sat 23 Nov 2024 02:18:35 +0000
Manifest next update:     Sat 30 Nov 2024 02:18:35 +0000
Files and hashes:         1: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl (hash: cTxEUA0q7+xKOERAEsgUtv5UIJpvL5igSRVOR6Cx1ts=)
                          2: 2F43497CA16711EFBB0B733EC4F9AE02.roa (hash: BVHGl0zZvP8Be5BZrq+SjWInlh4j0twqe2382XWJEhg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
                          rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
        Validity
            Not Before: Nov 23 02:18:35 2024 GMT
            Not After : Nov 30 02:18:35 2024 GMT
        Subject: CN=67413b7b-2cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cb:7e:3a:2d:f2:cb:e8:f9:cc:5e:63:39:71:
                    35:a0:51:15:cc:61:2a:11:4c:be:ec:03:29:a0:f4:
                    78:e1:91:54:61:88:81:f1:7d:9c:92:df:d5:ec:d1:
                    12:f6:cf:23:0b:d4:2f:03:69:89:ac:0e:bb:2e:88:
                    8e:98:54:33:62:7e:3a:26:97:d3:d8:96:54:7d:69:
                    3c:fb:95:10:32:36:ec:84:66:68:f8:79:32:98:a6:
                    fa:b2:37:14:e4:e5:fa:03:39:b8:e5:35:50:1d:49:
                    bd:f6:2c:b2:12:12:6d:cd:59:9a:47:d1:17:f6:5f:
                    2c:bf:88:89:23:cf:a2:6a:66:8e:0c:03:5c:6c:19:
                    14:32:5b:a9:73:c4:14:01:c2:f9:f4:4d:b3:fe:c0:
                    27:55:c0:ea:41:a5:29:83:dd:61:4a:69:97:b2:82:
                    5d:8c:8a:fe:9a:bf:f8:30:5e:a4:b0:30:22:a5:5e:
                    f5:39:35:f3:1e:e7:46:5f:5a:cd:b7:85:ac:a8:1f:
                    72:2b:3c:2c:c4:03:c5:f6:6e:30:43:0c:fa:ad:a2:
                    9b:72:59:91:4f:62:27:63:08:4a:f6:30:3c:2b:e3:
                    62:44:f3:8a:61:eb:7f:5b:35:08:ac:85:4f:c7:da:
                    8f:58:8e:85:ab:6e:64:40:4c:77:2f:b5:52:64:c7:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:44:CE:0A:5D:AB:26:81:F5:6D:DC:E6:D9:6C:E5:3E:F6:9A:EE:CC
            X509v3 Authority Key Identifier:
                keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:51:b6:41:48:38:bd:71:6e:9f:00:b7:77:cf:84:05:9c:92:
         6c:4f:30:11:ec:d5:41:08:df:30:32:65:05:97:ef:3b:fe:e1:
         d0:03:38:43:f3:c5:95:3e:50:b8:7a:16:47:35:16:f1:57:7b:
         20:32:b2:ae:0c:73:82:62:27:99:e6:b2:15:aa:49:fe:54:fd:
         58:85:9c:f0:da:04:6e:c0:0d:71:3d:82:ad:31:21:24:08:65:
         4f:16:df:0d:12:64:d5:12:22:f4:cd:88:af:75:6d:53:f9:ef:
         07:11:44:6c:78:bd:2d:37:de:5f:00:f4:04:60:bb:cb:57:6c:
         d9:3a:e2:63:12:d6:ba:4c:e9:03:8a:8f:86:8a:cc:f8:0a:c3:
         30:4f:af:5e:8e:0f:62:36:73:4e:b5:e7:b5:73:0b:79:e9:50:
         0e:41:06:bb:6b:9d:ff:fd:9d:cc:9c:98:ee:48:d5:4a:69:f6:
         56:08:d4:ee:0a:fa:bb:4a:9b:c7:3d:b5:dc:b1:42:e5:b6:1a:
         67:3c:bf:a6:71:65:be:32:0c:09:a6:77:f3:1a:cf:b4:2d:76:
         d9:30:e3:6a:79:ee:03:e3:d2:ac:15:bb:89:60:fb:b0:b4:34:
         5c:f0:73:3e:4f:99:94:09:49:27:26:48:1c:4e:65:07:76:53:
         a5:ce:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org