Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft
File:                     DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft (raw, json)
Hash identifier:          WuWSJKVg0feB5kFO1bMiUV+9cMnyxQxaIxgxg9EsqqY=
Subject key identifier:   DF:60:D9:03:52:6F:0B:29:1E:66:BA:70:CD:7D:02:43:6F:D9:A9:25
Authority key identifier: 0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15
Certificate issuer:       /CN=A9153838/serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15
Certificate serial:       0327
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft
Manifest number:          0321
Signing time:             Sat 23 Nov 2024 00:44:18 +0000
Manifest this update:     Sat 23 Nov 2024 00:44:18 +0000
Manifest next update:     Sat 30 Nov 2024 00:44:18 +0000
Files and hashes:         1: DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl (hash: xiCnH9fY0CcdBljj/9Kr7QLsqOQOqA/E8kpq5nWOtEs=)
                          2: E747F80C6AA411EDB76B7A36C4F9AE02.roa (hash: dN3gEjNd8wufOpuEw2boxe4zVacqfqgizcT+8wPtnGM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl
                          rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807 (0x327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153838/serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15
        Validity
            Not Before: Nov 23 00:44:18 2024 GMT
            Not After : Nov 30 00:44:18 2024 GMT
        Subject: CN=67412562-ab3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:4d:a8:16:b2:21:99:61:28:fa:df:a4:49:
                    91:fc:00:8b:f8:85:6f:12:1b:89:f7:9c:a0:f0:cc:
                    c1:fb:1d:99:58:4a:47:46:33:b6:fa:93:73:59:c8:
                    ad:27:fa:d5:a8:f3:32:0c:70:9f:8c:62:36:78:55:
                    f5:af:a2:c0:5f:b6:31:6d:3a:fa:87:f4:4a:78:f7:
                    9b:d2:ac:8f:99:34:19:1c:2e:0e:e7:bc:d0:09:72:
                    ae:ed:fa:c6:d0:cb:71:73:35:ac:d6:57:7c:4b:7c:
                    94:1c:ca:6d:db:1b:20:02:61:16:96:91:ae:ca:75:
                    e9:62:ac:4b:12:7b:53:c8:2d:ac:22:2b:26:e6:2b:
                    25:7f:8f:be:61:74:11:17:31:20:92:4e:44:99:46:
                    bc:8a:20:98:aa:47:e0:35:3d:6a:a0:37:96:94:4d:
                    7a:4b:a0:ab:7e:52:84:1b:69:b8:48:fa:f2:43:ec:
                    74:49:68:97:1a:f0:96:87:9c:77:76:c7:e9:30:1b:
                    53:bd:76:e1:86:71:c1:be:41:24:9b:33:eb:44:6a:
                    78:9b:d1:c2:7e:72:03:3a:e0:45:7d:a8:52:f0:89:
                    59:28:f9:74:98:9a:2a:fe:23:38:bd:ff:a5:ed:d1:
                    67:72:f6:c4:b5:05:fc:5f:c3:51:ea:b4:6b:d0:46:
                    63:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:60:D9:03:52:6F:0B:29:1E:66:BA:70:CD:7D:02:43:6F:D9:A9:25
            X509v3 Authority Key Identifier:
                keyid:0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:91:87:12:41:cb:c1:55:1c:10:3f:53:61:bc:df:d2:32:35:
         08:ec:f9:87:c9:ee:fb:30:10:04:fd:ef:e8:28:cd:14:a5:82:
         8b:6c:1c:0a:e3:f7:50:e5:6a:0e:ec:3c:07:14:cc:dd:0b:98:
         91:1e:fe:8d:bf:33:f3:c8:41:13:57:91:45:06:e7:15:81:ea:
         56:04:72:36:4b:ed:58:fa:94:10:ae:78:50:25:99:34:8c:d8:
         73:07:d5:c1:ca:d2:b7:82:1f:60:d5:03:c9:6a:13:fe:31:65:
         bc:93:64:5b:40:33:16:96:92:51:0c:96:45:bd:72:09:c5:b3:
         b4:a9:3a:d7:d0:3b:ed:83:98:5c:5a:a0:4d:ec:38:53:cc:c6:
         a6:1a:80:f2:25:c4:9e:27:7b:99:1b:ec:3f:34:0a:d5:ee:8f:
         38:04:b8:35:95:0f:6a:4c:76:74:16:9f:29:78:76:04:d5:f6:
         8d:33:ae:82:1f:a2:fd:fc:0e:b1:03:a8:ba:8c:15:81:b5:bc:
         72:42:a3:9d:05:06:ce:d6:bb:7b:31:65:1c:dc:f5:fb:df:26:
         34:c6:19:9b:9e:6d:a1:23:92:60:ed:dd:00:dc:e2:7d:9c:b3:
         2a:18:22:40:58:f9:08:da:8e:80:39:2f:54:d2:45:e4:1d:4e:
         97:3d:37:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:36 2024 by rpki-client on console-fra.rpki-client.org