Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File:                     4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier:          YsdAe1r63kjJrjRm4c75XySb6meUmR13QIrH4OqHoJA=
Subject key identifier:   27:03:75:CE:55:F4:E8:2B:D0:31:29:75:59:00:79:9C:F8:89:20:C2
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer:       /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number:          10
Signing time:             Mon 21 Oct 2024 06:22:38 +0000
Manifest this update:     Mon 21 Oct 2024 06:22:38 +0000
Manifest next update:     Mon 28 Oct 2024 06:22:38 +0000
Files and hashes:         1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: oiQ+SuxZCKxScXnF4NXuP4yps67skTZSl0CM/XxVcPk=)
                          2: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: HEoFn428OSrwoj9FY9UBG8roOsE7KCgrYxU/d2SrcQg=)
                          3: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: LfnrEoRSy98kq5+Het7TGQh6Md9GIYKtrywQQ+4Cqlg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
                          rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 06:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
        Validity
            Not Before: Oct 21 06:22:38 2024 GMT
            Not After : Oct 28 06:22:38 2024 GMT
        Subject: CN=6715f32e-2017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:01:a5:23:ef:f0:bd:3d:69:bd:0b:7b:f9:
                    20:78:ad:35:c9:03:f4:e3:56:8a:71:a5:f1:fc:77:
                    6d:eb:0a:42:27:2a:bb:66:13:16:b1:5d:f2:64:dc:
                    d7:45:50:6b:44:14:8d:2a:d0:d6:f1:3b:16:8b:d6:
                    71:58:95:c6:a4:67:79:8c:33:c0:c2:9d:cf:3f:29:
                    c0:8f:11:83:a6:79:53:de:2c:c0:4b:e3:6c:ba:1c:
                    f2:c7:75:6e:14:7d:52:e7:ae:c2:01:9c:bd:cd:69:
                    f1:23:e3:3f:0b:d3:6b:9a:1c:ef:85:bd:c1:a8:34:
                    49:51:9e:55:83:c8:e5:72:f3:f5:15:03:79:52:e7:
                    75:13:22:22:c2:c9:16:96:97:27:98:7f:3f:12:d0:
                    93:e3:22:54:24:61:ae:c9:01:73:a3:9a:28:37:e2:
                    b2:a4:8d:92:54:e8:66:14:33:51:f8:04:e9:3d:90:
                    a0:39:95:bf:0c:65:8b:55:b8:f7:58:83:84:5f:7d:
                    97:0d:b6:70:6c:75:34:db:b5:2c:2d:a2:b1:ef:a3:
                    b7:99:f0:f1:90:be:5d:78:6e:b8:00:d3:af:3d:09:
                    a8:c2:25:a4:a6:e5:7e:2a:f5:f6:12:7c:34:64:a1:
                    25:1b:c7:2d:51:6f:e1:d2:3e:8a:21:61:b0:fa:bd:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:03:75:CE:55:F4:E8:2B:D0:31:29:75:59:00:79:9C:F8:89:20:C2
            X509v3 Authority Key Identifier:
                keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f9:72:16:b4:7f:0f:d3:09:52:ee:d0:b0:70:73:e7:18:5b:
         f6:73:49:0a:5d:fa:e4:ac:4a:76:4a:77:da:62:1c:89:bb:8e:
         2c:7d:f0:52:e2:ce:47:57:b6:45:18:9f:94:1f:46:b0:fe:83:
         d4:39:27:74:c9:cf:3d:c4:90:8a:9f:bc:75:0e:f1:5a:57:00:
         cd:cb:1f:5e:c8:ad:9f:bb:47:68:d1:36:e2:34:ea:e4:92:fb:
         01:d3:8b:f0:2a:a3:2c:4f:22:93:4e:4c:ad:21:4f:e8:0c:5f:
         77:f1:b7:b9:ff:ec:b6:27:b4:06:bc:75:2b:b9:34:da:ad:05:
         f5:52:4d:92:7a:7c:7f:ea:89:81:45:fd:15:a7:45:ec:7e:9e:
         25:27:b0:04:b6:10:85:15:11:41:69:53:23:df:94:da:02:4d:
         4d:f3:b6:c1:6e:73:d6:02:86:83:b8:d0:a9:27:a0:ca:40:f6:
         bc:cd:e5:b8:b9:61:d2:9a:11:71:38:27:a0:0d:d7:49:3a:10:
         f6:16:b1:f3:be:08:9f:41:43:ce:fa:91:fb:c4:1a:7f:01:2f:
         b4:e8:03:02:42:1a:20:64:b4:e1:d1:b6:b7:45:c1:02:19:86:
         33:49:23:1b:d2:af:77:56:a7:63:5f:7f:ba:92:a4:82:1b:8b:
         2f:f5:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 09:06:16 2024 by rpki-client on console-fra.rpki-client.org