Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
File:                     mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json)
Hash identifier:          lqpQrkagPfWMhvHiobA9WeHXMOieJdXx14b2FUUovDE=
Subject key identifier:   92:4D:1B:D1:83:2C:12:1B:C5:51:7C:47:FA:96:8A:C9:38:22:03:0D
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Certificate issuer:       /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial:       114E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
Manifest number:          1133
Signing time:             Fri 22 Nov 2024 17:15:35 +0000
Manifest this update:     Fri 22 Nov 2024 17:15:35 +0000
Manifest next update:     Fri 29 Nov 2024 17:15:35 +0000
Files and hashes:         1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: 6BLeLvicZQp7W4CcoBuj0NHJtC6/9rkzNnxNfUbYOM8=)
                          2: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: NSIrfcEof4oSoVl+Wv6M+0oFTgwzHJSzBT22S0GWuXE=)
                          3: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: hlWJdj7oasSspsBwnWP5G9gzTFzy6dpFODxTYQ9Vfc0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
                          rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4430 (0x114e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
        Validity
            Not Before: Nov 22 17:15:35 2024 GMT
            Not After : Nov 29 17:15:35 2024 GMT
        Subject: CN=6740bc37-8653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:fb:71:b0:3f:84:80:1c:41:22:43:c1:19:
                    09:a1:8d:b1:c8:ea:9a:c9:d1:fb:5b:64:0e:0e:5e:
                    82:f2:0a:e2:77:6d:1a:93:49:1e:dd:dd:a7:17:2d:
                    df:3a:e7:af:eb:70:1e:f3:2f:c7:a2:e8:5b:c3:d7:
                    33:5d:c2:1f:5f:9f:d3:a4:cc:27:6a:00:48:a6:0c:
                    8a:f5:55:ce:7f:54:d3:cc:33:7f:6a:9a:b1:a1:75:
                    fa:62:30:2e:f0:c4:35:12:2b:52:03:29:b9:8e:2e:
                    c9:84:61:bf:e4:31:e2:6c:75:37:57:47:ca:a0:d4:
                    0b:e2:d1:34:76:e6:bb:16:b9:96:e7:3d:68:ed:9a:
                    aa:58:4a:e4:f6:e0:68:24:54:36:4b:b2:8c:16:e1:
                    dd:59:e9:ff:20:4f:27:77:7b:4d:0e:e9:35:74:da:
                    3b:d5:8e:fb:9e:48:2d:79:95:7b:80:f2:09:3d:f5:
                    6f:3b:a3:59:2e:b1:71:ed:09:67:76:10:25:52:29:
                    8e:bc:89:c3:eb:de:2d:58:f2:d4:ce:88:01:08:04:
                    91:2c:4a:99:55:85:a2:c9:82:e4:c5:36:70:49:39:
                    f6:a9:c1:5a:ec:75:6e:1c:34:87:08:e3:35:90:f9:
                    5b:25:ca:3e:cd:f7:0c:f9:5c:9a:a4:b6:48:4c:05:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4D:1B:D1:83:2C:12:1B:C5:51:7C:47:FA:96:8A:C9:38:22:03:0D
            X509v3 Authority Key Identifier:
                keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e1:6e:78:18:93:c2:cf:81:24:21:3f:2a:e6:06:a5:7d:77:
         a1:4c:71:ba:8c:f6:c9:35:5e:19:b1:5d:f7:9a:31:7f:d6:8b:
         1f:dd:72:42:f3:49:82:22:c9:ff:e0:fc:ac:51:67:2d:8a:ca:
         11:f6:03:83:d6:ed:26:c5:4e:1d:df:80:32:bd:34:83:c9:b8:
         88:e3:47:cd:19:9d:e2:68:d9:8b:8c:bf:94:8c:1c:17:37:99:
         6b:79:1e:a2:91:11:2d:c9:51:a4:ea:95:a2:ee:af:fe:fc:15:
         d1:3e:a4:41:2b:08:e1:51:1c:78:5d:42:8c:c6:4e:77:78:f8:
         12:3d:e7:0b:8a:32:34:cf:ea:82:55:96:3f:15:13:bd:79:c8:
         6e:84:e6:d2:76:96:62:a0:e0:ae:5a:6d:c6:70:c8:b5:7e:05:
         9a:66:76:b2:c4:f0:0c:01:37:8d:83:f7:7f:53:21:33:81:69:
         d8:18:01:55:33:61:23:2d:33:7a:f0:dd:6e:bc:44:05:ca:c3:
         20:12:b1:88:80:17:27:aa:2f:09:28:39:8c:72:7b:2f:a9:b7:
         27:a2:7c:8e:45:53:94:23:c1:a7:13:4e:b2:e0:fc:d4:79:f2:
         bd:0c:69:6c:ed:7a:dc:3c:10:d1:ca:e9:f7:66:5e:f4:d6:76:
         d8:c6:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org