Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
File:                     pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft (raw, json)
Hash identifier:          CFS1zhhQnB5NPX7g49386jQkCNFh7z/ZRyVubIXXDE8=
Subject key identifier:   BC:08:7A:44:EA:56:25:0A:89:19:7B:C7:6A:23:E8:9B:8C:75:B2:06
Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B
Certificate issuer:       /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
Manifest number:          0180
Signing time:             Mon 25 Nov 2024 01:53:00 +0000
Manifest this update:     Mon 25 Nov 2024 01:52:59 +0000
Manifest next update:     Mon 02 Dec 2024 01:52:59 +0000
Files and hashes:         1: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl (hash: apXPynyadGppWxLqOCDCvfqmttXkmbvLIHoK+V58qkY=)
                          2: 83B6F66C5E4711EDA05F092CC4F9AE02.roa (hash: ToaemIh9fPDcUkU4p3/lQzqtbYeK8WosReKWFwgAYY8=)
                          3: 843712B65E4711EDA05F092CC4F9AE02.roa (hash: fEBKFBy173sPjDX2RWBsnGsgGGHYxBJfdinF6AmOKOQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl
                          rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
        Validity
            Not Before: Nov 25 01:52:59 2024 GMT
            Not After : Dec  2 01:52:59 2024 GMT
        Subject: CN=6743d87c-0b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c7:cf:b4:36:d7:b0:77:f4:9d:26:5e:42:af:
                    cd:1c:58:f6:8f:4c:93:40:59:0c:40:86:1b:23:cd:
                    23:20:8e:e6:d7:5f:b9:b7:8a:e9:b2:68:3d:e1:1a:
                    1b:83:59:19:1c:4c:51:9a:77:77:32:0e:1f:eb:02:
                    19:02:79:26:23:97:9d:20:65:89:5b:0f:ba:3a:6f:
                    f0:86:29:5d:5d:83:9d:b7:5e:8f:c1:a3:60:9b:cf:
                    18:8e:65:12:34:09:ea:09:e8:1d:df:31:98:a8:ec:
                    c0:56:2f:54:bc:f9:d4:d3:9d:e1:69:8d:17:f8:44:
                    cf:db:0e:f9:da:9f:cb:70:64:6c:38:e5:20:cc:8c:
                    e8:60:35:f9:aa:10:3d:23:ac:7c:df:dc:fe:28:c6:
                    4f:b1:f8:c1:7a:24:55:cf:b5:e1:3a:8d:a2:8d:d2:
                    f6:4e:19:3a:39:07:73:fe:4c:64:07:dd:02:f3:c6:
                    5a:2d:50:2f:a5:f3:44:22:81:74:f5:dc:a5:5b:2c:
                    f5:98:66:27:17:85:5b:3c:7b:7b:7c:39:e8:0e:53:
                    c6:f9:a7:03:34:d5:1e:08:db:ad:26:62:b2:35:5d:
                    87:7d:3a:92:1d:60:9b:9c:2f:74:94:14:ad:0b:d4:
                    29:fb:a6:38:b2:95:75:54:c1:f1:fc:1c:be:bc:95:
                    0e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:08:7A:44:EA:56:25:0A:89:19:7B:C7:6A:23:E8:9B:8C:75:B2:06
            X509v3 Authority Key Identifier:
                keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:a6:f0:97:5e:70:1a:b1:b1:d3:36:de:d9:bc:63:79:0f:1d:
         8a:d8:93:d9:66:b8:a1:7f:4f:17:96:e6:f5:b6:c0:b2:d0:0d:
         a0:2f:a8:e2:19:2b:64:a1:6c:2e:dc:a8:82:48:36:5f:9d:5a:
         a5:5a:84:d5:eb:89:b9:86:da:a9:14:61:50:c3:fb:3f:15:c8:
         b4:60:95:e5:cf:09:fe:6d:53:16:74:48:f7:37:e2:2b:cf:bf:
         2d:14:dd:2c:5c:24:dd:d7:0a:f3:55:ba:63:83:0f:54:be:cb:
         54:ab:61:81:b9:ee:b5:3f:d2:e2:33:89:92:0b:58:08:ba:47:
         52:df:6c:fc:82:f6:a4:1f:db:54:f1:44:39:30:35:dd:6e:43:
         ac:fa:65:81:53:e1:44:f5:39:0e:cf:9c:f9:67:72:cd:ea:6a:
         f5:0d:45:17:77:7d:16:71:14:2a:ca:b6:20:43:59:61:be:38:
         f6:24:1d:be:8c:b0:29:31:44:71:c4:8b:0f:14:2e:9a:22:d7:
         cf:11:08:3d:03:bf:4e:79:12:e4:27:3f:3a:5d:32:17:27:f8:
         df:36:55:0c:c7:54:d1:11:7a:2a:57:27:93:25:ac:88:63:0e:
         00:63:42:46:b6:2d:f6:af:03:7a:0e:6d:13:e4:f8:26:f1:8b:
         88:af:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:21 2024 by rpki-client on console-fra.rpki-client.org