Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
File:                     -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json)
Hash identifier:          9iLKu9jUtnSW/Aj9PPxQL1y+pRxEWlB4VoIj5EfNjOM=
Subject key identifier:   37:0C:A2:34:C6:76:FD:AC:2E:44:0C:73:B4:F3:1F:53:50:27:D5:F9
Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
Certificate issuer:       /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
Manifest number:          F8
Signing time:             Thu 21 Nov 2024 03:22:34 +0000
Manifest this update:     Thu 21 Nov 2024 03:22:34 +0000
Manifest next update:     Thu 28 Nov 2024 03:22:34 +0000
Files and hashes:         1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: 3YjNReCBUrVSMY/MCCndq0xseaFffrJNH2c/A8xYUkQ=)
                          2: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: 749u4lopn9W/FVK2H662IjT0Y70cK7ANdEZnlQh0KN8=)
                          3: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: JpEflAmkAjQw8fDsB0P7evpxNWtbBcByQzIhr/Rv/Wo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
                          rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E
        Validity
            Not Before: Nov 21 03:22:34 2024 GMT
            Not After : Nov 28 03:22:34 2024 GMT
        Subject: CN=673ea77a-13b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:54:1a:5d:20:91:02:8e:cd:3a:68:91:d2:
                    d0:21:b2:1c:e2:c9:9e:50:1a:d6:10:49:60:ea:68:
                    bd:72:93:9e:3a:0c:7c:22:bd:e1:b0:16:b4:0f:48:
                    46:bb:fb:91:b3:50:b7:f2:e9:32:0b:99:98:23:2e:
                    c0:80:44:11:b8:f6:0e:2d:d5:80:6c:51:9e:a3:a3:
                    ce:ec:68:c0:77:dc:31:09:16:b1:66:a0:94:6e:10:
                    b4:ba:a8:91:c0:bf:4b:96:73:50:90:39:c3:55:58:
                    ab:41:e5:93:9a:70:32:e5:ba:5d:9d:43:0e:1e:47:
                    e2:f1:3d:41:01:16:4a:4e:fc:15:07:11:3b:10:dc:
                    d2:ae:f6:c4:3d:ab:7b:75:30:79:d9:ed:4f:4d:f4:
                    88:27:70:81:ca:8a:4d:37:f7:21:fd:b9:34:f9:f1:
                    82:16:f2:b2:72:6f:01:31:aa:18:d2:c1:bf:a9:ad:
                    cd:e8:a2:7e:49:6b:05:85:e0:49:6c:a5:81:93:dc:
                    e1:48:6a:d0:d8:a2:d5:21:e3:2a:48:b4:a9:0f:bf:
                    45:06:1b:20:92:8f:72:f7:a3:be:4a:bb:72:50:1a:
                    69:a8:f7:9d:00:84:32:ea:74:15:c2:b2:53:12:05:
                    3b:6e:d3:2d:8d:5b:91:4e:af:d0:dc:f9:37:32:bb:
                    ae:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0C:A2:34:C6:76:FD:AC:2E:44:0C:73:B4:F3:1F:53:50:27:D5:F9
            X509v3 Authority Key Identifier:
                keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c9:dd:48:1d:17:18:47:f2:eb:9a:da:79:bc:7f:b7:1f:03:
         30:4c:fa:b9:2a:b7:87:9f:a4:1b:42:09:55:73:34:1c:2e:98:
         be:e5:f0:f6:4c:fa:69:73:82:e8:03:69:d3:ac:a6:2b:9b:19:
         db:e8:86:54:fb:85:cf:f3:a5:65:29:7f:fa:0c:80:3c:f8:2d:
         6a:cf:43:fb:a2:89:45:0d:44:c0:87:c1:63:ef:e9:49:1c:35:
         46:af:d1:46:4d:b7:40:43:d3:76:2d:ad:93:63:ae:34:89:8c:
         13:a3:d5:ca:d6:9d:f0:cc:37:fb:af:23:2d:ef:f8:72:30:e8:
         00:92:19:0f:9f:29:ce:e7:f6:4e:01:cc:e3:27:37:ad:6b:45:
         33:61:97:c6:78:c2:67:5c:a8:87:71:51:6f:27:31:66:2a:dc:
         5c:4c:b6:63:23:8a:cb:ce:3c:f0:b9:78:4e:c8:dc:c6:1a:1e:
         56:e4:ea:ec:f8:e9:49:4f:12:56:dc:5d:40:fd:fd:3d:f8:97:
         30:5a:4f:a7:0b:d7:80:c6:0a:22:71:c3:06:d7:26:d2:6e:f6:
         1a:cc:a1:9c:e9:7a:26:b2:e9:4e:af:73:6a:65:5b:04:e0:dc:
         ed:98:8d:07:f2:e0:59:e4:69:21:1c:19:fa:7b:cb:06:c5:bc:
         fe:64:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:59 2024 by rpki-client on console-fra.rpki-client.org