Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File:                     Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier:          FtLfafxKt9UJK0r8CGS+PVQTV34hC+Yws9FygEZcmwc=
Subject key identifier:   80:35:52:1A:FC:80:00:36:EB:1E:25:6D:A9:28:F1:10:20:18:1F:1F
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0D37
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number:          0D18
Signing time:             Fri 22 Nov 2024 14:22:30 +0000
Manifest this update:     Fri 22 Nov 2024 14:22:29 +0000
Manifest next update:     Fri 29 Nov 2024 14:22:29 +0000
Files and hashes:         1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: aDDVb1sv/Z1tUSyMZ2B+jvEc7gzSnVO6WT0kwYJgX8A=)
                          2: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: p/azHtFptIXURVSRFgPxqoeDhngoYTd2NG88s2QFFzY=)
                          3: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: 9l1Haea64b2aYD99677ab4KdKZDozQlY1l2PmY/FJ1w=)
                          4: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: 7OpoMhu5yrBYJukUqf3gKs+QCXSGnK6psVOlWcESVPA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3383 (0xd37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Nov 22 14:22:29 2024 GMT
            Not After : Nov 29 14:22:29 2024 GMT
        Subject: CN=674093a6-0038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:06:60:f7:d3:2a:c1:de:75:1a:38:a9:ef:
                    02:f5:d1:7a:98:1d:ae:0e:84:96:7a:39:1a:4a:85:
                    cc:43:0b:66:c6:37:c7:86:33:b2:7c:db:af:2b:77:
                    cf:a4:a8:32:97:00:51:d6:7e:71:65:b3:45:30:6e:
                    de:59:1f:37:0a:95:7a:ee:b2:cc:e1:c9:b7:7b:7d:
                    83:75:00:b4:5c:02:56:99:b8:b8:aa:3d:c3:40:8e:
                    7a:eb:61:e3:5d:db:df:9c:93:b7:b4:c3:0a:30:bb:
                    33:83:1c:1c:e4:f3:0a:7f:fc:b9:d5:51:f7:96:5f:
                    cf:fc:5e:92:1f:3a:9f:c4:94:34:f2:99:8a:cf:0c:
                    2d:09:7d:b9:47:74:42:e9:77:c0:2d:89:f4:11:6b:
                    c9:d5:c3:22:68:83:0a:4a:4f:04:31:85:96:d4:b8:
                    16:40:99:43:1a:6b:a9:01:f3:07:92:2f:ce:14:24:
                    93:81:b3:1e:f6:8a:32:9e:94:08:89:36:c9:41:ca:
                    1d:02:34:80:66:17:2f:a2:96:8d:68:da:5d:04:75:
                    58:b2:35:70:6f:78:38:d3:ce:d6:63:1a:cb:27:ef:
                    09:19:9d:79:58:3c:3c:63:a2:2e:e9:f6:5b:17:6c:
                    7c:b3:5c:31:df:bf:48:98:fa:3a:a8:5b:34:31:eb:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:35:52:1A:FC:80:00:36:EB:1E:25:6D:A9:28:F1:10:20:18:1F:1F
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b5:bb:7c:68:fd:66:56:d5:83:8e:e2:54:27:29:b2:df:76:
         fb:50:4b:bd:f3:eb:a1:7f:79:fa:d7:c2:fe:1a:b5:a4:a9:2a:
         8d:a2:55:98:3a:4d:63:83:99:70:08:15:ba:e6:f3:a7:0c:6c:
         84:16:5f:1d:f4:51:32:e7:bc:d8:d5:c5:59:47:ea:81:e4:1f:
         b2:14:ca:bb:56:19:d0:c9:10:2e:87:36:5e:2a:54:25:4b:99:
         15:e1:d3:9b:a0:7f:f4:86:60:43:80:51:c0:5f:c9:d3:f4:64:
         76:48:89:72:a9:ff:23:d5:b6:7d:a6:96:66:2f:82:44:3e:91:
         a9:d6:72:40:05:1f:d8:1a:9d:c2:68:6e:83:4b:e2:96:0f:26:
         6a:bd:49:ee:65:e6:08:00:25:94:88:a8:b5:ce:94:a3:e0:da:
         45:a6:4e:05:e2:a5:0a:fd:af:6e:df:03:eb:f3:66:c2:36:43:
         56:27:19:78:50:94:bf:07:db:6b:96:c6:6b:fc:ba:95:f9:42:
         ff:19:7b:71:fc:16:7e:64:1f:b0:56:4f:64:22:bc:cb:fb:8b:
         62:c2:78:3e:0f:0b:b6:ec:fa:63:ac:6d:a5:7b:19:76:64:6e:
         44:57:fd:3d:74:07:b8:b4:28:01:13:7d:66:d2:87:64:59:67:
         9f:6d:38:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:20 2024 by rpki-client on console-ams.rpki-client.org