Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft
File:                     1w6O-A81h--QKJbYsw3LC26zOa8.mft (raw, json)
Hash identifier:          55bDSM2LpV4ZVq3+dKk8oKt8qbfqjBGq2fSC/ZFik3I=
Subject key identifier:   DE:CE:F9:5D:F3:6E:7F:E3:4C:D6:F0:45:98:19:B6:FC:33:EE:96:31
Authority key identifier: D7:0E:8E:F8:0F:35:87:EF:90:28:96:D8:B3:0D:CB:0B:6E:B3:39:AF
Certificate issuer:       /CN=A9180323/serialNumber=D70E8EF80F3587EF902896D8B30DCB0B6EB339AF
Certificate serial:       342C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft
Manifest number:          3427
Signing time:             Fri 22 Nov 2024 14:47:02 +0000
Manifest this update:     Fri 22 Nov 2024 14:47:01 +0000
Manifest next update:     Fri 29 Nov 2024 14:47:01 +0000
Files and hashes:         1: 1w6O-A81h--QKJbYsw3LC26zOa8.crl (hash: PVfhnv3izxY+out4hBF2nNWYNY41mMeC4kyeVjnmDBg=)
                          2: A8306EA22D6911EC9F557316C4F9AE02.roa (hash: nmxJ3jp13iRGBz5tI+EJH3Az2FHAACozz2zaxi/P4K4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.crl
                          rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13356 (0x342c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180323/serialNumber=D70E8EF80F3587EF902896D8B30DCB0B6EB339AF
        Validity
            Not Before: Nov 22 14:47:01 2024 GMT
            Not After : Nov 29 14:47:01 2024 GMT
        Subject: CN=67409965-a47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:52:78:db:f4:6b:2a:3c:d9:da:f9:f6:2e:
                    02:94:12:25:06:bd:65:9c:8b:7d:b3:86:b5:0d:7d:
                    de:d0:2d:2b:c7:ee:b5:4e:c7:47:c6:f5:41:42:1e:
                    f2:a8:23:00:33:67:c3:01:2e:85:ed:b0:07:f0:81:
                    0c:c4:da:70:d4:de:e1:25:51:a8:24:1f:a1:65:ad:
                    3e:3f:0c:49:c6:3b:8a:ec:e2:04:bb:30:76:e9:29:
                    66:70:41:e0:6e:24:8f:6b:22:35:7e:0a:a0:58:38:
                    f8:b3:05:b2:d7:42:42:2d:ba:d8:8f:98:9e:e0:ea:
                    8d:41:3c:29:45:0b:8f:64:bd:e2:b0:fc:4b:4f:17:
                    97:8d:e0:6c:34:14:81:fc:32:b0:a6:c5:f4:29:8c:
                    cc:bc:e2:44:20:03:0f:0e:b0:4b:01:f5:47:6f:49:
                    ae:aa:b5:61:fb:ae:34:0c:71:b9:07:23:f0:3b:3e:
                    55:19:c8:9f:bd:d3:c4:17:fc:21:2f:33:f8:77:1b:
                    b7:03:74:7c:69:d6:24:6a:d4:5b:9e:69:69:f5:91:
                    fb:de:91:6a:7a:d8:34:a7:76:e1:5c:71:ce:c4:83:
                    e1:8e:06:b2:07:e1:05:b0:e3:66:92:ce:bd:c1:3d:
                    57:63:7b:47:ea:3a:36:f3:0c:b8:4b:71:3e:29:f1:
                    16:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CE:F9:5D:F3:6E:7F:E3:4C:D6:F0:45:98:19:B6:FC:33:EE:96:31
            X509v3 Authority Key Identifier:
                keyid:D7:0E:8E:F8:0F:35:87:EF:90:28:96:D8:B3:0D:CB:0B:6E:B3:39:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:5b:bc:77:35:97:ca:23:36:4b:c9:0c:d5:c2:1f:6c:a6:c1:
         5b:7a:b3:11:32:9d:81:03:01:b4:ef:6c:11:59:9b:ae:e0:90:
         e7:2e:37:bb:d4:da:07:62:6f:2d:69:95:5d:c5:1d:1d:6a:dc:
         7a:cf:e2:e8:2a:ea:d2:98:95:9e:3e:21:42:71:0b:b6:5d:7e:
         ff:e3:63:1f:1c:09:06:9e:9f:1f:74:91:21:bf:fc:44:ec:87:
         25:b8:fb:7e:9d:c2:c8:b2:09:bf:94:0b:3f:65:28:ed:de:e1:
         ce:4a:bd:bc:bd:50:f1:9b:cb:07:d1:87:60:e3:e4:83:76:3a:
         53:7b:7d:89:8d:2a:7b:11:df:37:d5:6e:2e:67:94:3c:41:ef:
         47:c8:32:0b:ee:30:7c:03:70:6b:3b:00:c1:d7:82:19:77:17:
         ee:d9:b2:7c:d5:a7:60:8e:f1:07:df:e7:f1:be:f4:3a:3e:c0:
         7e:a5:03:63:7b:fa:af:9d:6a:80:e1:d0:8a:2b:ae:04:77:96:
         07:de:c1:43:82:31:9e:f3:3a:be:37:b1:4b:82:d0:05:88:46:
         d0:8a:b3:05:98:48:5f:b3:af:49:b4:70:dc:5c:c9:11:f8:34:
         0b:11:34:f9:14:bd:27:d7:81:8f:94:2b:16:ce:10:8b:81:85:
         1b:14:a8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org