Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
File:                     JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json)
Hash identifier:          g5/JIZYhr+1kda4cxzdU9PqlbxoBeZZZ0dqVukX3hS8=
Subject key identifier:   1D:E4:F5:AE:D9:1A:F9:DF:25:AB:11:29:39:A0:B5:E7:19:77:D8:10
Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
Certificate issuer:       /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
Manifest number:          10
Signing time:             Wed 23 Oct 2024 06:44:20 +0000
Manifest this update:     Wed 23 Oct 2024 06:44:20 +0000
Manifest next update:     Wed 30 Oct 2024 06:44:20 +0000
Files and hashes:         1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: QkFQK45FLLZO7MRA+jv+vpg//mnD20uOmPz3sBMbUjA=)
                          2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: /pzh/4JNMJFd04w0J0X6gL+Cxb0zDVOHsambsb667Rg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl
                          rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 05:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
        Validity
            Not Before: Oct 23 06:44:20 2024 GMT
            Not After : Oct 30 06:44:20 2024 GMT
        Subject: CN=67189b44-7f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:48:19:a2:01:f2:f6:c0:86:17:79:49:3c:
                    23:12:0b:ea:3f:0d:02:ea:37:c2:4b:e3:ef:fb:3d:
                    70:9f:d3:0c:84:42:c9:52:50:93:d2:2c:a1:9e:66:
                    58:32:63:6b:9c:27:3d:8f:7e:0b:e4:c7:c7:54:53:
                    e1:55:5e:0b:e2:e1:ed:78:a4:de:a5:13:57:2c:17:
                    b5:78:c4:dd:e2:67:23:56:71:1b:78:7b:8f:3c:0b:
                    20:a7:62:a0:d4:b9:8a:d9:de:96:32:d2:42:39:bf:
                    9e:6d:2a:dc:12:df:36:ab:ed:41:7c:a6:9f:55:ed:
                    d9:03:64:b4:aa:e3:0c:e5:72:56:b2:af:de:cc:f3:
                    93:62:c8:d9:20:4a:02:bf:a1:b2:d2:4b:43:13:1d:
                    28:04:83:20:c3:95:7e:88:4b:d0:87:1f:c3:a0:48:
                    3f:36:28:7c:93:04:a3:b8:84:73:39:85:3f:25:4f:
                    95:fd:92:bb:f7:ed:9f:df:17:96:3e:40:38:44:9f:
                    3a:e2:1b:3b:39:b2:33:d6:ea:4a:ce:6b:5a:39:10:
                    68:68:40:61:ba:be:a2:b0:5c:72:89:4f:6a:11:9b:
                    0b:38:98:d5:67:ba:79:41:ad:e6:96:c6:f1:01:9b:
                    d0:eb:62:ec:3a:77:6c:48:77:c2:b0:bc:ea:05:a0:
                    7d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E4:F5:AE:D9:1A:F9:DF:25:AB:11:29:39:A0:B5:E7:19:77:D8:10
            X509v3 Authority Key Identifier:
                keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:df:d9:cf:6f:db:bb:6b:3c:4c:bd:e1:60:fc:33:54:c3:7d:
         af:71:9d:ff:59:80:16:e7:59:8c:ea:a2:61:ea:21:b4:32:55:
         85:0f:a2:fd:58:ac:b5:e6:15:2c:ec:59:68:b8:76:55:84:3a:
         b3:6e:e2:93:20:99:98:c1:f0:ea:da:ca:f3:e6:25:fe:a6:ee:
         bf:1c:01:45:34:27:d6:74:ce:08:08:e9:1c:b9:fc:ed:7f:42:
         b5:1e:5b:a8:e6:be:ea:8f:fa:ee:48:12:18:24:10:a1:73:ae:
         46:58:17:f2:ad:ff:82:be:b6:e5:df:b5:92:07:aa:19:ad:23:
         d1:36:ff:b2:64:4a:29:af:21:7c:49:83:99:85:55:49:5a:9e:
         45:9a:75:db:37:d7:93:61:84:c3:25:e9:ca:37:c1:67:26:83:
         99:1b:a7:82:eb:e8:e4:f1:e4:ca:49:28:ca:0f:e7:a3:fe:0f:
         0d:29:52:d5:4b:c2:c7:25:9f:8a:79:98:52:fe:ee:25:4b:57:
         fe:c9:aa:1b:65:72:da:cf:3b:c2:59:2f:66:5c:d7:23:da:4f:
         01:31:ea:1a:91:d3:a2:9b:3d:40:cd:d1:52:f2:a7:14:e2:0b:
         bc:fe:29:02:dc:a7:31:37:f2:11:4b:d9:c6:ec:52:aa:7e:fe:
         6c:2e:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:20 2024 by rpki-client on console-fra.rpki-client.org