Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.mft
File:                     C9CviCcBmOQG0urp3K7J-w67gMU.mft (raw, json)
Hash identifier:          5nucp2nWx4PR4RAAHOoiFZ0kln4ufFeK39/S+asS/t0=
Subject key identifier:   6B:0B:5C:4B:27:ED:2F:1E:77:B9:89:7C:91:3C:59:C1:BA:BF:16:CC
Authority key identifier: 0B:D0:AF:88:27:01:98:E4:06:D2:EA:E9:DC:AE:C9:FB:0E:BB:80:C5
Certificate issuer:       /CN=A9164F37/serialNumber=0BD0AF88270198E406D2EAE9DCAEC9FB0EBB80C5
Certificate serial:       2EBC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9CviCcBmOQG0urp3K7J-w67gMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.mft
Manifest number:          2EA8
Signing time:             Fri 22 Nov 2024 15:30:56 +0000
Manifest this update:     Fri 22 Nov 2024 15:30:55 +0000
Manifest next update:     Fri 29 Nov 2024 15:30:55 +0000
Files and hashes:         1: C9CviCcBmOQG0urp3K7J-w67gMU.crl (hash: AUO962bXGBRdoHL+6e9MTwvBtmUHiXmqZqTi5e/pInI=)
                          2: 5BCC8446B13D11E59299870AC4F9AE02.roa (hash: 7nEvnsVUhHy+hi2S4weSlBPyOTPygyip6UTAtQRn1Lk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.crl
                          rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9CviCcBmOQG0urp3K7J-w67gMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11964 (0x2ebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F37/serialNumber=0BD0AF88270198E406D2EAE9DCAEC9FB0EBB80C5
        Validity
            Not Before: Nov 22 15:30:55 2024 GMT
            Not After : Nov 29 15:30:55 2024 GMT
        Subject: CN=6740a3af-400e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:05:e1:bb:12:2c:56:e1:e2:82:64:87:07:
                    91:75:c2:69:c2:bd:00:d7:3e:19:05:b0:5f:38:09:
                    bb:20:d1:30:2c:98:64:69:79:48:df:9e:33:75:ce:
                    14:c6:bf:a6:e0:f2:c7:80:92:72:16:6d:0d:91:af:
                    fb:34:42:e7:71:e8:0e:14:ce:be:1f:54:dc:11:55:
                    03:b1:de:0d:47:86:c1:d9:b5:de:48:f9:81:e6:ed:
                    ea:9f:2d:85:ca:34:d5:b6:36:85:ae:b2:81:ee:7f:
                    63:e4:dd:6e:d6:e4:5b:7f:70:c5:9c:3c:02:85:f0:
                    c3:d9:16:fb:8a:84:b3:50:6d:3e:7f:00:30:ec:6e:
                    96:2a:1e:5c:e0:09:40:8a:24:19:a9:74:52:f3:62:
                    d9:f3:70:0a:4f:80:8a:65:5f:64:b4:ea:a7:d7:f6:
                    11:a6:d8:28:61:89:a6:18:93:c8:35:4e:3a:ed:41:
                    e2:99:4c:d0:47:b5:7d:1a:13:fb:b0:6c:f7:3e:b9:
                    10:cd:d1:c3:3c:c1:da:c5:2f:32:9a:70:db:9e:11:
                    15:ee:ee:03:6d:98:13:e6:22:3b:61:ee:f2:e3:2a:
                    55:07:7e:a7:d4:c9:39:1e:8c:23:85:af:b7:e2:a8:
                    88:62:e9:9f:c0:cc:85:24:ad:93:f5:1d:77:be:7d:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0B:5C:4B:27:ED:2F:1E:77:B9:89:7C:91:3C:59:C1:BA:BF:16:CC
            X509v3 Authority Key Identifier:
                keyid:0B:D0:AF:88:27:01:98:E4:06:D2:EA:E9:DC:AE:C9:FB:0E:BB:80:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9CviCcBmOQG0urp3K7J-w67gMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8f:da:5c:fa:fa:01:3a:cd:c5:25:0a:20:e5:06:77:7f:27:
         c2:bf:e4:ea:ab:b6:ea:c7:a3:b4:98:8a:ed:6f:f4:18:2f:ef:
         66:62:ed:3c:19:49:c1:4c:4c:5b:be:1a:03:97:5d:15:a0:6f:
         4b:ca:0c:76:c9:cf:8f:78:c9:a3:4d:7b:e9:9b:f8:f3:13:66:
         ef:74:61:8d:b1:46:7c:18:7e:85:be:b7:3e:d5:b5:5f:91:8b:
         55:23:16:9b:0b:59:7e:b5:bf:44:47:d3:3b:e2:b9:0b:ac:3a:
         34:fb:b6:b8:9d:9d:1c:ea:e7:77:86:10:13:dc:d5:00:6a:33:
         6e:06:09:89:45:a7:0e:81:b5:a4:b7:de:9e:92:cc:0d:53:d7:
         8d:28:83:13:e8:8f:f9:57:60:d1:b1:f9:f9:d8:25:32:af:71:
         d8:4b:90:7e:a1:0b:63:f2:95:17:41:d9:35:1b:22:3c:ff:0a:
         01:dc:31:a6:56:90:1d:e0:cf:ca:87:0c:28:74:45:39:9d:9e:
         b0:af:d4:27:ec:ca:12:4f:e7:85:b4:ed:63:2d:c5:78:04:6e:
         00:e1:5e:1e:89:04:c9:38:b9:fb:e3:70:c2:d1:4e:80:58:89:
         89:5d:1b:19:10:f2:e7:7d:43:ab:dc:04:e6:9e:f9:4b:93:3f:
         f0:78:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org