Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
File:                     jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft (raw, json)
Hash identifier:          qmQIHog7cBaA9y1E36BtGudmZB3gK/djlKR5sDrrPzU=
Subject key identifier:   21:C5:F4:04:06:ED:6F:B9:D3:99:7A:8A:CE:3E:0F:4B:42:14:49:AA
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Certificate issuer:       /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
Manifest number:          019D
Signing time:             Mon 25 Nov 2024 01:43:16 +0000
Manifest this update:     Mon 25 Nov 2024 01:43:15 +0000
Manifest next update:     Mon 02 Dec 2024 01:43:15 +0000
Files and hashes:         1: jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl (hash: fFzMzwwUaMxS7w4gF6FUD6mDX02KueON6ZeXX/WsGVM=)
                          2: 9A859F8A480611EDBC63AD52C4F9AE02.roa (hash: Q+xBXhtidbH61CzoWLEFSg+uEFF8i0uaB/q+T0AhmlA=)
                          3: 001EB4A284C911EFA902172CC4F9AE02.roa (hash: i/k+PMmPjEOn62f4++TqWacooyVJfp9CI/snYpM2THY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
                          rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
        Validity
            Not Before: Nov 25 01:43:15 2024 GMT
            Not After : Dec  2 01:43:15 2024 GMT
        Subject: CN=6743d633-5e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:4b:34:dd:bf:df:e0:1d:da:85:46:3f:1b:
                    e0:9c:18:7f:e3:23:51:1c:60:ee:f8:cb:52:aa:ec:
                    7f:6d:f8:9e:d8:79:ef:f3:da:c5:8d:8d:32:b0:39:
                    46:95:f5:1c:e7:87:7c:2d:39:fb:95:53:50:fa:c6:
                    66:5b:0d:a3:d6:55:c1:37:87:71:ed:fd:fc:f5:53:
                    da:2b:f3:84:57:af:06:dc:57:54:87:1a:5d:ef:b1:
                    d3:bc:ed:06:fa:80:07:7a:fd:52:dc:71:ee:b4:a7:
                    61:3b:33:d6:8c:0d:f6:cb:2b:31:01:73:4f:d6:21:
                    35:22:01:dd:bb:6a:88:14:c1:67:76:61:c7:e3:0c:
                    0c:fb:90:66:64:87:f1:85:92:b8:1c:dc:b4:a1:17:
                    f6:05:61:56:f8:ae:22:2f:44:32:4b:50:a4:f2:de:
                    8e:47:ef:43:98:bf:99:14:56:7c:e7:82:a4:61:dd:
                    fa:b6:f2:10:70:2e:8a:70:fe:62:67:e9:8d:c0:c7:
                    56:98:7a:4e:b4:cb:22:16:1e:8f:85:66:e3:b2:9d:
                    9b:70:ba:49:45:14:f9:c4:66:77:10:b4:35:b3:88:
                    7b:da:da:33:79:38:45:00:a5:84:5d:45:90:21:69:
                    c4:ef:e5:c4:59:1f:0a:5c:5f:db:b0:b3:0d:2c:1a:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:F4:04:06:ED:6F:B9:D3:99:7A:8A:CE:3E:0F:4B:42:14:49:AA
            X509v3 Authority Key Identifier:
                keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:dd:af:e7:52:a5:e8:1f:2c:b7:db:67:a1:e5:5e:59:be:93:
         5f:6f:28:3a:fb:f6:13:a6:1e:60:4d:c4:77:20:43:c6:91:25:
         cc:b3:73:83:2d:8e:d6:cc:a7:2c:f1:75:e1:11:5d:2d:d6:11:
         67:d4:98:bf:16:9b:74:eb:81:ee:13:63:ae:54:78:34:e2:cc:
         28:50:ce:66:9a:fb:12:bc:d1:5c:04:b8:67:18:21:13:43:6f:
         cc:7e:54:bd:25:03:09:21:d8:ce:c4:a6:8a:2b:63:48:31:db:
         ac:e7:cb:ea:b0:f3:20:9d:bd:e9:3e:4a:83:0a:bb:9b:0a:7f:
         de:97:a7:c2:99:4c:6d:52:37:c6:be:b7:31:28:2f:91:de:fa:
         56:ee:04:7a:70:87:e6:9c:b6:4b:cb:3b:e8:78:ea:72:77:a9:
         4f:ab:ea:1d:69:93:f7:24:5a:7e:77:4c:59:83:e1:43:1c:da:
         a0:84:60:4f:81:3b:18:5b:f0:37:55:fd:ae:79:2b:f4:04:67:
         39:68:22:ed:1b:57:31:7d:46:ba:21:b7:56:96:6a:f2:29:8f:
         2d:38:5d:dd:8e:1a:0c:11:57:1a:3e:c2:99:25:3e:4a:13:f3:
         ed:ae:f7:03:1d:2e:b5:8c:39:06:c0:3e:ad:ea:98:bf:a9:48:
         53:82:69:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:48:57 2024 by rpki-client on console-ams.rpki-client.org