Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File:                     x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier:          BXxrrVLY0BoPFu42cxdyqOy9pHcsHKJhYO++vMJLAh8=
Subject key identifier:   57:2E:14:3F:33:0E:67:CB:98:9F:56:42:2C:50:6E:84:D9:E7:A3:93
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer:       /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number:          017E
Signing time:             Sat 23 Nov 2024 02:01:30 +0000
Manifest this update:     Sat 23 Nov 2024 02:01:29 +0000
Manifest next update:     Sat 30 Nov 2024 02:01:29 +0000
Files and hashes:         1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: tbQIDo/E42mOY+9MNByWYiVHwdMSqT+XyVDTbPLi3ZU=)
                          2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: 2v1fNj4a/xWl8aWsyyllbFfz3S6+MQv77E5w5OZvxxo=)
                          3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: GrunRdOPzVgoKdklWpjxOZFACret6qIAPie8FS/bKnw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
                          rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
        Validity
            Not Before: Nov 23 02:01:29 2024 GMT
            Not After : Nov 30 02:01:29 2024 GMT
        Subject: CN=6741377a-d2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:85:74:de:c2:4c:69:1d:e3:89:77:7b:67:
                    5a:fa:d2:e9:ef:80:92:09:b8:b3:e8:a0:1c:1a:ca:
                    4a:67:e1:4c:70:eb:0a:41:4e:4a:43:6e:ae:53:16:
                    f3:25:57:b2:12:9f:f5:b0:47:32:13:66:69:c2:6d:
                    fb:6d:eb:51:30:c7:c5:0f:22:38:c5:e4:77:c7:11:
                    57:33:1d:55:19:31:06:c1:f5:a6:aa:49:f7:7b:2b:
                    c4:b5:97:aa:b2:14:57:1b:2b:eb:33:2a:00:57:cf:
                    e7:47:66:3d:04:6c:13:e9:0e:0f:65:6e:92:85:4c:
                    b5:61:d1:99:4b:8b:36:20:ec:1c:74:8a:5f:bb:82:
                    db:a9:f3:fc:d6:b6:85:19:0c:aa:8c:fd:72:3b:2b:
                    69:90:4c:c7:b7:fc:59:fd:5f:cf:c7:b9:50:1e:bf:
                    de:d2:78:c4:dc:86:a4:e6:90:d5:e3:2e:33:a8:10:
                    30:b0:5a:1c:31:81:5d:fe:ec:ea:a2:20:1a:34:dd:
                    8d:c4:8c:7a:17:56:b8:f8:23:ee:98:28:13:40:8c:
                    13:1c:be:71:59:66:4f:21:46:c3:e8:91:d0:af:fa:
                    f2:13:3e:a7:96:71:1b:37:72:b8:fe:f6:30:1b:6e:
                    26:92:52:81:27:50:1e:68:78:e6:66:8e:bf:1d:96:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2E:14:3F:33:0E:67:CB:98:9F:56:42:2C:50:6E:84:D9:E7:A3:93
            X509v3 Authority Key Identifier:
                keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:30:b2:05:a5:12:01:7f:0d:0d:e4:d9:6c:a0:59:b5:db:53:
         45:dc:ff:76:88:05:a9:0b:c4:4b:c2:fe:8a:bb:b5:57:c4:a4:
         1c:09:7f:8d:4b:72:9b:17:92:9b:93:fc:c4:2c:30:af:ca:af:
         c7:67:a9:09:0b:d6:77:22:a7:93:23:0c:7f:cc:dc:4b:6d:18:
         81:94:a9:89:5c:4c:1d:72:15:0b:ab:2e:1b:7e:2f:32:a4:15:
         e4:1b:17:84:3e:89:fe:62:46:eb:64:1d:6a:a0:85:6f:c4:03:
         00:cb:0c:6e:37:f6:25:d1:57:6b:a6:00:01:fa:1a:76:15:1a:
         25:e5:d4:c7:6c:d2:f5:12:78:01:64:0a:88:43:2a:e5:e1:13:
         f4:e4:34:bf:a7:a0:32:80:58:5c:49:14:29:b2:60:dd:5c:b1:
         b4:c2:5d:d0:7a:fc:d5:05:41:09:aa:9d:92:8c:e5:a4:20:57:
         89:e3:e1:47:fa:c7:88:86:58:f1:f8:cb:7f:ff:68:2d:5b:2a:
         4b:bf:a6:22:3a:09:bb:18:5f:f9:1a:3f:00:20:d4:ce:39:af:
         44:bb:66:c1:89:c9:55:cd:30:86:81:45:cd:4c:3b:d2:1b:6f:
         2e:c6:a3:52:41:22:1b:98:5d:38:f8:d9:cd:0e:fa:e4:2e:f5:
         80:d6:cb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org