Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
File:                     hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json)
Hash identifier:          AlcP+mFlPjckx9qUbcQ51+BsvNFhHGjzfNiROVL2E7s=
Subject key identifier:   D5:07:53:37:DF:53:48:6E:7E:5A:9C:53:CF:BF:21:99:6D:05:64:DB
Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
Certificate issuer:       /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
Manifest number:          010C
Signing time:             Thu 21 Nov 2024 03:13:09 +0000
Manifest this update:     Thu 21 Nov 2024 03:13:09 +0000
Manifest next update:     Thu 28 Nov 2024 03:13:09 +0000
Files and hashes:         1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: U+Ibe32hxmXhrsQ2b5uf0FErk8+uBJ0a8SXa77jLhN0=)
                          2: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: fORQkqLvJ2dGBDBnaZU9L7Plq+kw/h2X+nWJ/fFzZps=)
                          3: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: WHaadnKjNZQDbadv+Fexmh1Wu5Tp8jJIMAgwTj5mmBw=)
                          4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: NyRhFKoeq17kmMX8OQZh3mkXOb3bkuMOT5GFnj9SEJ0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl
                          rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
        Validity
            Not Before: Nov 21 03:13:09 2024 GMT
            Not After : Nov 28 03:13:09 2024 GMT
        Subject: CN=673ea545-64b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:07:4a:aa:33:7d:73:ef:3b:a7:fe:8f:9c:
                    67:79:5e:bc:ba:2d:10:47:12:b7:9e:b6:1f:50:9b:
                    2b:dc:d3:10:3e:1c:fc:aa:83:4e:9c:f7:82:02:06:
                    7d:3f:5e:f5:5f:04:03:a4:ff:7e:4c:23:23:99:4e:
                    f4:5d:ba:65:ee:a1:8e:db:40:b2:37:05:cb:74:53:
                    23:c2:ff:10:d6:66:ae:d4:ec:84:3c:58:c1:d0:14:
                    7d:7b:01:28:49:0c:e0:0b:be:c9:09:7d:04:04:d5:
                    47:04:3a:f3:84:cd:4b:38:0d:9b:43:14:ef:96:a5:
                    49:27:ab:34:f9:bd:81:bd:89:2f:5d:47:7b:de:8f:
                    e6:8d:c5:51:6b:f2:a2:04:2c:7e:59:f8:fa:54:be:
                    6e:b6:d9:b7:7d:b1:27:c6:47:fc:02:29:8d:94:db:
                    e5:a4:75:5a:f6:7d:0c:ce:36:29:44:53:84:bd:b1:
                    2b:ec:b0:07:f9:f5:4b:a7:b5:17:38:c3:83:ea:8f:
                    0b:f3:c4:d1:48:0c:43:e6:6f:4d:13:0d:2b:ee:f3:
                    ed:b7:48:a3:5f:0e:30:e2:3a:f4:ac:f4:41:fe:a5:
                    79:4b:28:bd:a0:dd:df:a1:7a:21:84:66:1b:cd:ce:
                    b0:63:01:72:17:b5:c7:7d:1d:41:1d:da:d8:c1:77:
                    8e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:07:53:37:DF:53:48:6E:7E:5A:9C:53:CF:BF:21:99:6D:05:64:DB
            X509v3 Authority Key Identifier:
                keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:4c:9c:98:5b:78:ca:21:3c:1c:86:8c:4c:1c:1a:3a:bf:
         fb:43:eb:84:52:16:9a:71:7f:a9:50:d5:39:90:0d:f8:08:c5:
         0a:44:39:66:08:9a:9a:a0:bc:e0:e4:3e:71:a0:93:48:68:17:
         f4:7c:db:f7:8a:f9:af:7d:0a:60:ed:00:8e:0a:fd:34:e1:b5:
         82:44:c5:80:89:04:f7:8a:15:ae:57:f7:ff:ad:e1:cb:ea:ec:
         37:1d:89:60:12:f7:66:a7:7f:70:db:dd:71:9c:94:3e:0c:57:
         94:45:64:a2:86:b6:e1:66:c2:19:ad:16:a6:90:24:9b:5b:fd:
         6a:44:ad:45:20:a0:de:23:5d:bd:81:b9:4c:a6:62:b5:a3:ec:
         27:96:02:3a:03:94:8c:50:41:91:1b:c7:0e:58:61:ec:d1:c9:
         8f:a6:ee:bb:3a:b1:71:09:8b:fc:fb:b1:eb:eb:4c:da:28:26:
         84:ed:0b:e4:c4:c3:2b:35:d7:41:1f:aa:d1:33:78:0e:21:c1:
         39:cc:2c:6c:76:c6:54:bb:47:2c:1f:7e:5f:19:5d:16:93:1f:
         db:22:76:f4:67:eb:64:66:cc:4c:bf:65:17:36:06:f6:68:a0:
         6b:09:45:33:68:67:f8:ef:dc:16:ba:93:e6:46:fd:8e:7a:f2:
         0c:95:e5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:57 2024 by rpki-client on console-fra.rpki-client.org