Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
File:                     08nS13n2aEMJcSuzDPoZkpDhuNY.mft (raw, json)
Hash identifier:          MjgqFWfsPjl8NDF92GrFatiBHwM1oYt+pyRGJV97jTg=
Subject key identifier:   CB:AE:CB:3F:43:CE:40:F5:F7:77:40:6F:27:7C:52:FA:4E:B9:50:AE
Authority key identifier: D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6
Certificate issuer:       /CN=A915DE8F/serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
Manifest number:          09
Signing time:             Sat 23 Nov 2024 06:05:47 +0000
Manifest this update:     Sat 23 Nov 2024 06:05:47 +0000
Manifest next update:     Sat 30 Nov 2024 06:05:47 +0000
Files and hashes:         1: 08nS13n2aEMJcSuzDPoZkpDhuNY.crl (hash: cYsSi6KxMLeat/q7UiDR86Vom6XppGi8M9rKjL5Uchc=)
                          2: 6DEFE6D8A14611EF93AB8E21C4F9AE02.roa (hash: rRMGtINr2UhdhF+qj8NjJEBcNErv93/+Ql2sANUuRRs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl
                          rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE8F/serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
        Validity
            Not Before: Nov 23 06:05:47 2024 GMT
            Not After : Nov 30 06:05:47 2024 GMT
        Subject: CN=674170bb-a1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:c3:28:df:31:f3:d6:4f:23:96:0a:04:4c:
                    2f:ba:97:ce:0a:cf:6f:1c:d8:8d:96:f9:47:53:a9:
                    5f:6a:39:21:2e:54:e4:b2:41:63:5a:31:92:7f:2a:
                    59:4f:7a:d8:65:db:2f:c0:bb:f6:2a:b7:8b:72:fe:
                    9f:72:47:d6:33:bd:10:11:ea:7c:c0:27:79:d9:a0:
                    01:a0:8f:27:f5:4c:13:6b:18:2d:69:f7:6c:7d:df:
                    67:1f:7a:ee:4c:2e:64:af:ad:9c:bb:0a:6b:27:9c:
                    87:81:25:0d:48:97:38:fc:00:1f:7b:d4:8d:43:46:
                    27:ec:1f:f1:cb:00:3c:5f:3d:50:56:ae:89:eb:43:
                    04:1b:e5:7c:bd:fa:f0:03:d2:d0:f2:2f:db:c6:16:
                    19:77:1d:ea:e5:98:c3:53:71:0f:76:32:e4:d3:ce:
                    41:eb:2b:6b:51:b4:7d:70:77:13:0b:3e:27:7c:d1:
                    73:58:bb:f0:a3:b6:04:2b:c0:ae:8a:35:e0:6d:0f:
                    60:8f:ce:30:2a:af:28:38:d0:a0:cc:9c:99:7e:89:
                    c9:d7:1b:cc:d7:28:89:cd:b6:7a:ed:50:36:be:98:
                    54:6a:76:a0:2a:74:10:61:7f:3f:e5:ec:76:89:08:
                    a5:4d:6d:a5:67:36:f1:fe:05:64:8b:43:23:bb:f3:
                    a6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AE:CB:3F:43:CE:40:F5:F7:77:40:6F:27:7C:52:FA:4E:B9:50:AE
            X509v3 Authority Key Identifier:
                keyid:D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:82:9c:3a:24:0a:8b:84:8b:6e:db:fb:f1:b4:62:46:36:a1:
         a2:f9:02:9c:d3:a7:0c:26:d5:39:49:01:59:36:03:18:30:cd:
         a2:de:9b:b3:d5:d9:d7:69:3f:08:42:a4:05:85:d3:19:d3:db:
         59:c4:9d:10:5b:5d:4e:38:44:1b:a7:6d:27:ac:c1:ed:7e:45:
         4b:b5:17:39:7e:f4:2f:49:50:e4:c1:05:48:7a:a1:54:97:34:
         25:04:af:f5:9c:0e:f5:85:e8:b2:53:1a:ab:5a:e0:3a:29:af:
         7b:11:b6:14:55:38:aa:24:85:62:48:1f:72:11:8d:a4:14:df:
         1a:42:c0:d7:4f:f1:f3:9a:9f:b2:eb:d9:de:a4:a0:4c:ca:15:
         13:33:09:37:58:39:94:8a:d9:b9:f3:02:23:3e:0e:46:d7:a3:
         6e:f7:50:92:6c:6c:d5:d7:dc:9c:ac:4c:f9:1b:a4:22:91:43:
         59:fb:2c:62:21:ad:21:80:18:af:8d:66:18:d0:f9:4d:5a:bd:
         cc:f5:fc:99:1f:e5:81:c6:ca:f7:07:de:ff:0b:76:e7:7e:f8:
         60:2c:94:73:84:55:4b:61:2c:23:78:47:19:24:f1:14:65:c4:
         26:50:0a:75:70:d2:3b:db:28:cb:ab:e4:fa:87:83:79:7a:c7:
         dd:be:d4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org