Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
File:                     5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json)
Hash identifier:          j5iM44kSVJT083y0W2z5sUkGrKBXlZX0OWqspzjJ2R8=
Subject key identifier:   7E:E3:ED:4C:B1:8D:BA:E6:88:1B:DF:63:88:05:7A:7D:37:16:CC:65
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Certificate issuer:       /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial:       04E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
Manifest number:          04C1
Signing time:             Fri 22 Nov 2024 23:32:16 +0000
Manifest this update:     Fri 22 Nov 2024 23:32:16 +0000
Manifest next update:     Fri 29 Nov 2024 23:32:16 +0000
Files and hashes:         1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: 6J5UWFLz6fCG6ixyGgkh/FZxfvVt1zZJpeFMXW6hNP4=)
                          2: 2C4993AA271B11EF97731F0BC4F9AE02.roa (hash: Y5psYo1+HsTn94bT+HOVma8cpyRmUa8UpR0do6Ji5a8=)
                          3: 9CB324BA273111EF9F5B0860C4F9AE02.roa (hash: BCxKB83t1ZjMtqUcivGlXeAm1UMAKAmU5J6o90PMkwY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
                          rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
        Validity
            Not Before: Nov 22 23:32:16 2024 GMT
            Not After : Nov 29 23:32:16 2024 GMT
        Subject: CN=67411480-7e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:28:47:6b:5a:30:72:47:40:8e:31:74:47:
                    98:d7:84:1a:77:1d:c4:df:89:df:9b:2a:e4:02:88:
                    08:61:bb:bb:cc:d0:1f:f7:89:51:b2:2e:78:1a:b6:
                    99:62:6d:e2:ec:2a:2f:5f:08:5f:e6:bc:e1:62:e4:
                    c6:d4:88:84:07:de:1f:d2:95:22:69:b9:e5:cd:38:
                    c2:7c:bf:10:f3:d0:b0:92:d2:7e:70:17:87:12:51:
                    a6:c4:4d:d3:95:1c:1d:9e:a0:71:49:9f:83:a1:e2:
                    42:6d:7e:de:5f:8e:9f:86:a2:c4:5f:a3:d0:cd:f3:
                    4c:eb:1f:b3:e6:0d:58:1b:31:66:f1:44:c5:18:a2:
                    87:b0:56:4c:9b:5c:d2:21:5c:3f:16:36:01:0e:4a:
                    dc:d0:6e:35:0f:45:5b:5b:6e:1f:ac:b0:a2:65:e6:
                    07:86:ed:01:98:1d:a7:64:f7:cd:09:df:6a:19:7b:
                    d1:0f:4d:09:8c:72:1e:d0:6a:40:ff:e7:a8:8e:a5:
                    65:42:8a:4a:ef:33:43:df:86:26:75:84:0b:9e:c7:
                    11:c4:71:cd:67:f0:e1:21:17:3f:fd:fd:1f:5d:55:
                    b2:6b:cf:fc:c9:b8:f6:6e:67:73:c4:ea:dc:bb:12:
                    1a:a1:c5:a0:ec:da:eb:ba:db:90:71:70:c5:18:83:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E3:ED:4C:B1:8D:BA:E6:88:1B:DF:63:88:05:7A:7D:37:16:CC:65
            X509v3 Authority Key Identifier:
                keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:96:59:8d:9a:b4:45:62:28:ba:ae:ab:34:11:34:f3:ef:c9:
         a3:f0:df:aa:7e:f8:4b:f6:d7:f7:f1:ff:7a:53:99:c6:ae:3c:
         f7:97:02:d2:97:32:ae:fd:85:30:a8:06:32:78:6f:95:43:46:
         5a:ec:f7:19:80:aa:4e:90:e8:4c:3f:30:b5:08:79:1e:3c:26:
         07:70:5f:ab:8b:09:e9:9a:d6:1a:1e:62:35:1a:ec:5a:e5:08:
         2b:d7:2b:cd:e7:c5:3c:4e:f5:47:a7:57:3c:a1:3f:c6:58:be:
         6e:11:cb:02:a3:b0:c4:fe:5e:ce:7d:0d:46:41:49:15:12:bf:
         43:e3:40:16:25:b1:38:0c:2c:6d:88:97:53:39:48:13:9a:e2:
         16:75:36:dd:80:99:f5:5a:b4:19:71:d6:d4:2f:75:69:bc:01:
         58:3e:4d:73:8e:14:ac:90:88:f1:c1:aa:be:41:89:c6:6c:dd:
         c8:96:21:2c:8e:e8:b4:0f:20:1e:e2:0d:54:ba:28:7d:fb:3b:
         fe:77:e7:2c:65:ba:8c:7f:87:de:41:17:a6:80:20:3d:6c:c7:
         41:fd:5d:aa:ca:52:56:22:5b:e4:8b:80:d3:86:05:5e:7b:d1:
         e1:7a:c4:cd:a8:6b:47:c9:32:66:e4:75:b1:5a:ef:cc:26:90:
         c8:91:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org