Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File:                     9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier:          T7spLiiShNPlOzmm/ncpIFyxcRiwmM3I/1xMTM8KpUI=
Subject key identifier:   08:ED:D5:5B:45:33:23:39:01:AB:E2:96:DA:B7:36:A9:EA:5A:F0:3D
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer:       /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial:       18AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number:          187E
Signing time:             Wed 20 Nov 2024 16:27:55 +0000
Manifest this update:     Wed 20 Nov 2024 16:27:54 +0000
Manifest next update:     Wed 27 Nov 2024 16:27:54 +0000
Files and hashes:         1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: zjcKMcmV8yZjkmY0vaIFLfB+57AYjYWcq2pD+joBOtA=)
                          2: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: RzPoxU6VMwenRCZMIgDJU4uMvSt870PJ/i4+innQzD0=)
                          3: D3FDB470817311EFA6D1742FC4F9AE02.roa (hash: dibMVArE3npC/0CJpung5oQdTBClBsRdSRPJEkXo1rg=)
                          4: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: dqd2t4UXuMtWb1yN/NCXtKO4VOE3Updlpy8CHKQcrr4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
                          rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6315 (0x18ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
        Validity
            Not Before: Nov 20 16:27:54 2024 GMT
            Not After : Nov 27 16:27:54 2024 GMT
        Subject: CN=673e0e0a-43f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:25:c2:31:8f:37:bf:ce:9f:44:65:3c:c7:
                    ca:51:b5:89:80:fa:e6:88:87:e0:61:e8:9c:bc:fc:
                    69:e0:5c:ab:93:48:b5:17:86:ac:77:6c:cf:db:e1:
                    49:ae:5f:7a:03:25:83:6b:e7:b5:37:d6:02:2f:64:
                    59:bb:bd:88:58:a2:a1:77:cb:36:b0:e2:e4:8f:6d:
                    9a:7b:ff:a2:aa:3c:26:8d:68:8c:8a:d5:ed:72:e5:
                    2d:f7:1e:ea:9e:6e:c0:9a:e9:41:d8:b6:b9:15:b7:
                    05:68:95:28:80:b9:62:0a:51:fa:0d:ce:af:6e:2f:
                    ff:82:ae:47:9f:b9:fd:29:17:0f:50:c0:34:e4:0e:
                    ef:05:d4:5c:e5:0c:e9:16:f3:bb:56:43:c4:af:eb:
                    da:bc:89:10:e7:e0:a1:48:15:0d:4c:f0:bd:3c:bf:
                    0c:64:76:c3:d0:b6:b8:5b:e5:d3:dc:63:20:be:51:
                    39:31:71:a9:1b:9b:36:70:0b:c1:79:88:6b:53:90:
                    4c:77:4b:99:87:e3:42:fb:59:72:36:f8:f8:8d:73:
                    c3:e1:17:14:15:bd:3c:12:2f:0a:34:e7:4f:e1:5e:
                    d8:96:0a:70:a9:ee:bc:aa:bb:dd:03:25:fb:cb:e0:
                    c9:76:28:2c:b4:f8:a1:78:d9:3e:01:70:76:47:81:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:ED:D5:5B:45:33:23:39:01:AB:E2:96:DA:B7:36:A9:EA:5A:F0:3D
            X509v3 Authority Key Identifier:
                keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a6:5f:4b:9a:97:cd:4f:57:34:ad:85:82:a5:c6:2a:18:d3:
         c5:4b:31:05:d1:c0:a7:01:42:1d:16:99:6b:14:de:29:2d:40:
         2f:2d:1c:88:28:c3:d1:ed:62:28:ee:2e:60:c2:58:3d:6d:fe:
         f0:77:23:83:41:0d:68:24:8c:06:97:34:c8:bd:10:61:77:4a:
         d1:dc:4d:4a:59:18:47:07:af:e6:68:a9:19:a7:f9:c1:06:ba:
         97:8d:f6:68:5b:ba:3f:13:8f:76:64:d5:67:71:12:de:53:03:
         40:ac:86:18:a9:92:5a:6e:b7:46:53:f7:c9:9f:d6:e8:3c:f1:
         9d:a6:e1:7f:22:b1:5e:e1:e9:5f:ea:e0:a8:ce:c7:fb:20:e7:
         b1:5b:c4:65:6a:ba:a7:ac:75:b3:ff:f1:07:38:6b:ba:fc:c8:
         ea:0f:e7:f5:98:56:ab:ff:d6:a5:e6:4a:37:e1:8a:a3:f5:50:
         62:79:6b:ac:56:ec:e4:e0:29:96:3c:9a:c2:93:32:de:af:8d:
         27:81:78:a5:ef:cd:1d:53:a5:04:4c:b0:20:83:75:5c:f9:30:
         f0:5a:ef:88:6d:de:f5:9c:2d:3a:e3:66:9e:02:e3:87:f5:a7:
         fd:a1:2a:6b:94:49:09:5f:db:c2:0e:ff:c3:8c:74:fe:52:52:
         d7:c3:0d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:18 2024 by rpki-client on console-ams.rpki-client.org