Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
File:                     Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json)
Hash identifier:          Bkr9OyKM8xdYU/6V5nJVtC817fod61byTK53na1qIk0=
Subject key identifier:   0B:FF:E2:3C:53:C4:58:82:B9:0A:CD:BD:E4:C3:76:21:70:BB:3B:42
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Certificate issuer:       /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
Manifest number:          05
Signing time:             Thu 21 Nov 2024 06:16:50 +0000
Manifest this update:     Thu 21 Nov 2024 06:16:49 +0000
Manifest next update:     Thu 28 Nov 2024 06:16:49 +0000
Files and hashes:         1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: 6W8iivDn5sepRQhxPvTEzA/Z8TbdEYE+X8VQ0TNf8Y0=)
                          2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
                          rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
        Validity
            Not Before: Nov 21 06:16:49 2024 GMT
            Not After : Nov 28 06:16:49 2024 GMT
        Subject: CN=673ed051-822e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:b7:66:90:ee:97:eb:63:07:d9:63:3a:a5:
                    dc:2b:a4:b8:3a:01:37:c0:b6:51:73:8f:7a:37:37:
                    8e:6e:9e:e4:9a:5f:d9:36:3e:5a:f0:9a:5c:fd:e2:
                    7f:95:8f:a0:53:db:57:2f:54:f9:db:a2:88:cb:e1:
                    04:46:93:3b:98:6e:b9:42:68:72:ce:c3:1f:2e:b1:
                    5a:d4:eb:6f:2e:96:8e:ac:1d:fa:da:72:03:b8:85:
                    3f:91:cf:49:ff:38:14:fb:61:2c:49:9f:02:ad:c8:
                    94:cf:c9:32:87:f7:3a:96:0a:6d:7c:c5:39:08:0b:
                    3e:59:66:48:d7:45:6e:45:70:5f:8d:36:ec:6c:6c:
                    b7:54:4e:84:04:df:59:a6:c8:f8:aa:53:cf:62:b9:
                    18:7e:34:b5:17:6e:ec:9c:bb:30:8c:e3:a5:64:7f:
                    9a:35:98:57:c8:17:79:11:ba:87:89:04:27:88:3e:
                    66:12:2a:43:21:a2:97:6d:5e:be:2d:3c:86:f6:e2:
                    61:bb:d3:73:ea:af:0f:08:a9:a7:a8:19:2e:0b:c0:
                    65:71:64:f8:4b:d1:c0:fc:3e:7f:20:d8:06:e1:9c:
                    be:bb:97:4a:49:c8:f8:5f:89:f7:36:5e:7c:1f:9a:
                    3d:98:85:e3:e4:05:f3:62:48:0a:7d:a2:fd:1b:d4:
                    37:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FF:E2:3C:53:C4:58:82:B9:0A:CD:BD:E4:C3:76:21:70:BB:3B:42
            X509v3 Authority Key Identifier:
                keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:31:0b:78:22:83:94:b9:df:3f:40:f7:bd:8e:f4:05:cd:a3:
         8f:3a:d0:ea:51:f1:dc:a7:4f:79:4e:72:e3:4f:c3:de:b1:a6:
         9f:c9:0d:99:bb:67:47:c7:4c:eb:6f:03:cd:90:1e:e3:5b:55:
         e7:12:1a:f6:70:01:2e:c1:99:4c:c5:08:63:c4:bf:71:a3:c8:
         c4:22:25:f4:fb:38:09:7b:63:8d:3a:18:37:2e:b4:55:62:f3:
         41:58:83:52:b0:75:b6:d2:22:c8:99:0b:4d:89:e3:ae:cb:d1:
         f4:21:a7:89:9b:c4:c9:9a:15:71:c1:ea:74:6f:b6:68:0a:a5:
         98:1e:bb:c1:06:e2:8a:39:a2:4e:06:9a:1b:c9:61:d3:22:1f:
         56:6c:a1:06:60:2c:44:91:5c:93:f2:75:bc:3d:d1:a0:ec:70:
         df:87:68:b6:6c:2b:dc:a8:75:97:14:89:41:fa:fd:e0:5c:eb:
         ba:cc:8c:44:4b:9d:71:9c:c7:3a:f2:37:51:48:ad:bb:ca:f9:
         ea:cf:7d:ab:bf:0f:44:af:56:d7:cb:b8:ca:f9:ac:a3:07:56:
         39:98:e1:86:a6:40:8c:ac:18:77:c2:17:da:c1:d0:8f:e4:7a:
         de:de:bc:15:2a:3c:1e:3f:6c:a3:dc:47:3c:b9:9b:56:ae:aa:
         5a:99:14:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:54 2024 by rpki-client on console-fra.rpki-client.org