Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File:                     -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier:          m92dNHHBg1TED4hiYuh6wB1OmSn1cIsmzhLOfWMq2Uw=
Subject key identifier:   3B:6E:D2:CE:0A:15:E5:66:80:D0:58:E7:EC:E5:26:29:12:47:2D:AC
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer:       /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial:       0A98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number:          0A89
Signing time:             Sun 24 Nov 2024 19:12:01 +0000
Manifest this update:     Sun 24 Nov 2024 19:12:00 +0000
Manifest next update:     Sun 01 Dec 2024 19:12:00 +0000
Files and hashes:         1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: luZY4/F9mYghFb3WuMkZr9HmKfSMNsOBwtByqi3DQC0=)
                          2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: r9qAOJLFlfPr/FG83X+BXgaWnTUjc3HThRn1PkvKOaU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
                          rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2712 (0xa98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
        Validity
            Not Before: Nov 24 19:12:00 2024 GMT
            Not After : Dec  1 19:12:00 2024 GMT
        Subject: CN=67437a81-c2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:c4:c6:79:9d:37:ec:36:c1:1a:cd:dd:25:
                    76:dd:a0:7e:bf:0d:09:dd:c9:85:09:98:b6:c8:eb:
                    06:fd:06:87:65:33:b3:b9:7f:78:7b:ad:3b:1b:f6:
                    2d:be:a5:90:09:43:ba:cb:04:17:6d:ec:16:6c:45:
                    b0:77:1d:21:4f:25:98:0e:c7:eb:9c:48:5d:37:62:
                    15:bc:1c:1e:81:30:4e:cb:97:24:83:12:6e:e6:1f:
                    dd:de:6d:06:d5:d7:e5:16:7c:fb:e7:a0:26:13:4e:
                    ea:74:d0:6e:31:9e:64:0b:67:cb:b2:19:5a:16:14:
                    4d:6f:9d:ab:b7:96:27:0e:82:67:13:30:87:64:29:
                    d2:89:0c:48:80:e1:d9:7f:a8:f3:99:7d:7a:66:7e:
                    6c:af:ae:93:fc:b4:91:1b:4e:c3:3f:d7:3d:f9:89:
                    7e:52:f0:c3:a5:db:fc:21:9c:79:b3:4e:7c:22:c0:
                    00:49:f3:64:cf:d7:7f:20:5d:33:72:b8:76:21:75:
                    0c:8b:5c:23:d0:1a:fe:5d:3f:2c:25:c8:95:17:48:
                    1d:a3:34:c4:22:c6:7d:57:a1:52:f0:c9:ff:10:98:
                    76:86:ce:81:7f:9f:86:e6:c8:68:db:8d:d7:97:0a:
                    5e:df:b2:e1:40:33:42:b5:fd:ac:1d:dc:e7:d4:69:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6E:D2:CE:0A:15:E5:66:80:D0:58:E7:EC:E5:26:29:12:47:2D:AC
            X509v3 Authority Key Identifier:
                keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ca:df:1f:e4:6f:fb:ee:5a:19:de:ef:14:7f:d5:df:c1:15:
         08:46:82:b9:af:54:a1:2e:ce:66:7d:7b:be:dc:24:ba:16:c3:
         c3:8c:e0:f2:e3:68:3b:4e:3d:e6:21:b1:24:fe:10:7f:09:7b:
         8a:e2:98:83:0b:96:57:06:a6:8e:50:a2:8f:7e:b6:2b:79:89:
         eb:12:d0:60:16:21:15:e2:0d:ba:8c:5f:52:48:af:91:3b:c0:
         a5:09:14:3d:fb:de:e7:b1:93:84:00:96:28:df:02:60:a6:18:
         ef:99:08:f7:6a:d5:6e:b1:e5:42:6d:01:dc:0a:e9:b5:6d:bb:
         ba:27:67:7e:fc:da:62:77:5c:23:00:70:17:ce:91:e3:38:97:
         e9:d1:d9:0e:6c:c0:f4:00:70:51:c6:2b:bf:6c:4b:ff:93:10:
         9f:e6:c1:30:a2:75:a3:fa:bc:d5:09:be:e4:44:ed:f5:a0:f5:
         97:87:ad:d0:e4:b5:3f:4f:60:10:27:9c:3d:35:06:64:cd:07:
         58:2d:92:d8:75:10:24:cb:29:32:d9:df:8c:a3:fa:e9:1b:81:
         00:16:26:b3:8c:ee:8c:5d:80:0c:44:d7:ff:af:cb:f8:3b:61:
         9b:f8:6d:9c:dc:15:95:92:42:a0:e6:02:7a:22:f5:a8:f7:ce:
         da:39:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:09:49 2024 by rpki-client on console-ams.rpki-client.org