Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
File:                     eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft (raw, json)
Hash identifier:          jfLGZxAiPJHK3feExIzkoQlQQXIY02j1136k+yU9WkY=
Subject key identifier:   8F:38:2B:9D:8C:A7:18:54:9E:30:98:29:2C:87:4E:29:3B:50:AB:D4
Authority key identifier: 79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A
Certificate issuer:       /CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
Manifest number:          010A
Signing time:             Thu 21 Nov 2024 03:11:12 +0000
Manifest this update:     Thu 21 Nov 2024 03:11:11 +0000
Manifest next update:     Thu 28 Nov 2024 03:11:11 +0000
Files and hashes:         1: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl (hash: NU1ejDWthu7JbwXdf/x70IUK7Jjw3aDua4xfOQkT0MY=)
                          2: ACC372FE0F4211EE97A24686C4F9AE02.roa (hash: wIa8XsPQEKgPmaham2jaYKS/+u8e3X7+t4uptXIU2FQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl
                          rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
        Validity
            Not Before: Nov 21 03:11:11 2024 GMT
            Not After : Nov 28 03:11:11 2024 GMT
        Subject: CN=673ea4d0-7958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dc:74:68:dd:c6:f8:95:5c:1c:83:7d:3a:b5:
                    e0:01:f6:b6:9d:08:89:18:2f:32:a2:47:8d:a9:e6:
                    30:1d:89:5e:92:34:1d:62:99:b3:4d:ec:56:cc:da:
                    25:47:ac:d6:4a:9f:94:55:85:76:80:a2:4e:92:f1:
                    75:e5:3f:2f:92:82:e5:32:74:e5:37:fe:24:a4:28:
                    2b:cb:8f:09:15:bb:60:85:2c:fa:69:8b:a2:8e:12:
                    f1:54:16:e7:29:a0:aa:94:c9:d7:f2:ed:b4:6f:d4:
                    20:b4:c2:26:50:49:ba:0d:1e:8b:fe:12:b1:f0:1b:
                    10:f2:6c:9c:c1:bc:d1:2e:93:78:5c:c4:2d:ed:59:
                    79:c1:9f:d3:4b:b9:da:fa:f0:29:8f:fb:ac:7f:24:
                    71:9c:73:31:cd:e3:a7:01:a0:d4:ef:b7:bd:13:78:
                    2a:cb:90:91:84:3a:6d:04:24:b3:34:29:05:76:23:
                    86:06:74:b8:60:02:89:79:f6:f1:e6:47:82:c5:e0:
                    55:d4:c5:cb:35:4a:de:f0:ef:2d:0c:42:3a:c0:3b:
                    d0:fa:cd:32:cb:3e:89:59:96:c9:36:c6:4d:dd:a1:
                    9d:13:77:09:b6:c5:bf:b2:85:f3:a9:90:58:37:06:
                    f9:ce:48:d7:2a:c7:35:88:7e:0e:0d:81:5c:a6:1a:
                    70:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:38:2B:9D:8C:A7:18:54:9E:30:98:29:2C:87:4E:29:3B:50:AB:D4
            X509v3 Authority Key Identifier:
                keyid:79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:55:e8:20:ff:63:11:f1:57:bb:45:84:dc:84:f4:d2:f7:7e:
         dc:9d:83:4d:47:10:6e:f2:1b:a3:31:62:f5:74:23:8e:ab:2f:
         18:0d:7f:f1:43:42:ab:07:b5:a2:cc:a3:fd:a2:40:d4:ae:5e:
         fa:18:18:03:69:00:61:88:d2:fd:b0:d1:79:7e:c6:c5:35:cb:
         07:8f:81:94:07:bd:a7:c9:a3:ce:46:2a:14:20:5c:0e:04:3a:
         b7:93:56:ff:34:ac:de:da:72:cd:10:2a:c7:61:c2:d6:44:d3:
         3b:31:83:9c:cd:3e:cd:a2:77:34:47:49:ef:fc:25:69:77:1e:
         f6:eb:a6:99:ef:fa:56:65:7f:b1:47:85:bf:94:45:8d:c5:f3:
         fe:0e:0b:f4:b2:1a:cb:1a:15:16:28:8c:8a:7b:6e:b2:bc:98:
         5e:a5:f9:0c:14:f5:4f:c1:c6:e9:05:25:be:1e:6f:c9:5f:82:
         f8:9c:45:58:c4:b6:d2:c3:3f:d9:79:da:16:42:1a:63:46:82:
         1c:84:2d:79:73:bb:28:24:07:c5:82:86:4d:07:de:36:1a:af:
         b1:64:de:c1:bb:65:b2:09:49:b9:a1:dd:1b:4d:9e:49:74:78:
         30:6e:d2:c5:0b:eb:65:98:1c:34:f1:8a:d4:e2:cf:8c:25:9e:
         d6:48:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:07 2024 by rpki-client on console-ams.rpki-client.org