Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
File:                     RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json)
Hash identifier:          ypQxsvsy2vPONNhXUt2fthwP70muRcAqwIz0s6CTSnQ=
Subject key identifier:   02:BC:38:4F:C0:A7:11:1B:42:77:58:A7:7F:92:C3:F8:20:4F:AC:44
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Certificate issuer:       /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
Manifest number:          94
Signing time:             Thu 21 Nov 2024 04:34:42 +0000
Manifest this update:     Thu 21 Nov 2024 04:34:42 +0000
Manifest next update:     Thu 28 Nov 2024 04:34:42 +0000
Files and hashes:         1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: gyZXbQy3UrHhB/Zjexwi076iERyWjCZTy6s9Dhi9l/M=)
                          2: ADCDA1F83A0F11EFAB312630C4F9AE02.roa (hash: TuAyfKbGRFhHV9G3hUTl+QdiLnDpQyy2p+JhztZaeOo=)
                          3: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: /tGBO2MLCus8PNWAAV5edOtrlC7E+7n4ZDxG8UW5xvY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
                          rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
        Validity
            Not Before: Nov 21 04:34:42 2024 GMT
            Not After : Nov 28 04:34:42 2024 GMT
        Subject: CN=673eb862-b70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3c:35:cd:64:97:e6:77:4c:8c:32:fe:e5:71:
                    f6:99:de:f4:f9:fe:7b:fb:31:f8:85:a3:3e:de:1c:
                    0a:8c:e0:7f:08:27:a0:a9:62:86:77:12:f9:ea:1f:
                    04:82:db:45:5a:41:a3:95:5c:4d:63:5c:ef:68:f8:
                    34:72:d9:f5:6d:1d:e6:c2:58:ba:4b:0c:51:fe:e4:
                    7e:c5:7c:31:2d:32:bd:f0:79:78:6a:4d:20:11:ec:
                    9b:b1:10:a1:97:7f:74:c8:66:5f:fa:9c:9d:d5:6a:
                    a2:07:5f:19:31:f0:02:b0:2e:7e:a5:2b:d6:80:53:
                    38:78:79:ad:b8:0c:da:0d:e6:96:85:63:48:d9:c3:
                    89:77:b4:d4:39:fc:90:ff:82:c2:e3:71:8b:6a:f6:
                    2c:d1:39:4f:ed:a2:17:ab:8c:7b:60:8d:18:72:6a:
                    49:82:a7:3e:55:ea:b5:a4:d1:61:98:47:46:17:6f:
                    c1:cb:39:fb:2d:f5:0c:0c:96:bb:fc:7f:bf:f7:97:
                    2e:3e:81:34:64:22:b6:e2:ca:6e:a3:0a:40:1a:bb:
                    f3:0f:d4:e7:62:b8:7a:4c:c3:87:4c:2e:ce:46:f2:
                    34:ee:69:c6:c6:11:91:6e:45:05:58:be:75:6a:34:
                    49:e9:70:12:16:87:c8:33:b4:bf:71:de:2a:32:20:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BC:38:4F:C0:A7:11:1B:42:77:58:A7:7F:92:C3:F8:20:4F:AC:44
            X509v3 Authority Key Identifier:
                keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a9:d7:77:1a:34:de:72:e9:59:07:2c:76:71:b4:8a:36:b6:
         16:8a:c2:33:07:b9:6e:3e:24:ce:e1:0c:b9:80:e8:92:66:e8:
         0b:bb:a1:0c:19:40:7f:b5:78:f1:43:39:48:af:22:6b:27:47:
         dd:a6:c5:60:2d:9f:44:c9:60:d6:0b:2f:8d:55:d1:ca:d0:b6:
         80:df:b3:6a:5b:98:ed:6c:04:a1:bd:67:3e:c6:66:28:ed:f8:
         bf:86:d8:ba:a4:70:98:4b:55:93:06:93:73:87:8f:fd:bf:ff:
         da:1e:bb:a9:43:3c:96:2c:c6:23:1b:0d:4f:28:e8:ab:f3:da:
         b6:88:a4:6f:28:63:2b:70:3b:51:ae:5f:ff:c0:1b:11:65:2e:
         88:7e:26:fc:0e:db:f5:e2:cc:73:af:89:f5:a6:b5:1d:9a:ee:
         7e:ad:da:74:d8:86:5a:6c:8b:d5:c4:35:c4:19:ba:0c:ba:b8:
         88:ca:6c:f8:09:e7:ad:45:db:c4:80:24:57:ad:4d:5a:66:95:
         77:49:9e:22:26:b6:ac:29:27:85:b1:ca:3e:03:52:02:9a:dc:
         fd:c3:49:68:4b:4e:5d:5a:ad:da:2f:ce:f1:52:31:e2:b7:2c:
         73:47:24:18:3c:01:52:c6:d8:b2:f7:36:33:14:d4:4a:54:f8:
         f7:bf:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:15 2024 by rpki-client on console-fra.rpki-client.org