Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
File:                     480mJgfLdDTJiY967Pbnw2o09pM.mft (raw, json)
Hash identifier:          099UTeWCpntInUyFvAYEBBHqiutoEvf6Y/4pV6hDh48=
Subject key identifier:   68:4D:8A:2E:B8:33:11:FD:7D:82:BE:4F:0E:68:89:69:29:62:7F:76
Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
Certificate issuer:       /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Certificate serial:       0503
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
Manifest number:          04FD
Signing time:             Wed 20 Nov 2024 22:29:56 +0000
Manifest this update:     Wed 20 Nov 2024 22:29:55 +0000
Manifest next update:     Wed 27 Nov 2024 22:29:55 +0000
Files and hashes:         1: 480mJgfLdDTJiY967Pbnw2o09pM.crl (hash: jBklfERjfnx33fbmkXL7oVggtqK4jx6FFFmSdJcotGA=)
                          2: 0F106C42E9BF11EB9287F045C4F9AE02.roa (hash: a6iV+VdvATPTvUTvrvtJWIJfp3l1+BdYBIr8MaPpp8I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl
                          rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283 (0x503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
        Validity
            Not Before: Nov 20 22:29:55 2024 GMT
            Not After : Nov 27 22:29:55 2024 GMT
        Subject: CN=673e62e3-d8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:8e:54:28:0b:ec:f7:67:80:b1:8d:f3:e7:
                    0f:c3:19:7b:74:8f:35:8c:0d:9d:ac:fa:aa:9d:ff:
                    bd:a2:e4:44:e4:b7:51:63:4e:8a:72:24:e5:2b:f1:
                    84:cf:05:4e:d4:36:68:01:87:f2:32:5c:59:f5:e9:
                    7c:65:58:a6:b8:f6:8d:08:f0:b1:66:a2:43:e2:37:
                    e8:74:45:9a:81:b0:ef:25:45:23:3c:69:49:3b:85:
                    f8:65:a0:be:47:f8:0a:3a:c9:52:4b:4e:0d:05:d8:
                    b1:84:7b:d8:e4:6e:e6:63:15:48:20:14:19:31:7d:
                    d2:ac:53:42:72:07:fc:80:3b:51:25:b3:0c:37:75:
                    09:d2:99:69:fb:c4:e8:f6:77:bc:ba:1c:be:c2:bb:
                    90:54:5e:c6:1f:d2:12:75:73:8c:f6:6d:ca:50:3e:
                    9e:b9:85:a6:1a:90:b5:72:31:34:20:e0:0b:36:a6:
                    32:60:57:f8:60:8a:80:ea:51:d5:1b:a4:de:93:f7:
                    9e:39:0c:fd:eb:56:58:52:24:1d:9e:08:3e:23:63:
                    a5:b3:3b:82:ac:cb:be:93:18:4c:c6:ea:a3:35:ae:
                    77:67:e3:1c:2b:b4:44:a7:ca:03:8b:01:91:39:68:
                    9c:8b:ef:bc:82:e6:d4:ad:1b:5b:04:4e:bd:e9:64:
                    7b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4D:8A:2E:B8:33:11:FD:7D:82:BE:4F:0E:68:89:69:29:62:7F:76
            X509v3 Authority Key Identifier:
                keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c7:dd:b6:1f:fb:18:1e:2c:63:cd:16:92:40:88:fc:ef:54:
         00:71:32:b4:37:d6:59:7e:0a:5c:99:44:97:64:07:06:69:07:
         cc:bd:87:c2:75:88:cc:59:34:1b:a4:d9:e7:36:8d:35:31:5f:
         46:c0:98:ce:2b:f4:49:6b:7a:54:88:eb:49:87:a0:45:8c:22:
         04:cb:5d:2f:6c:72:0f:7a:22:e9:bb:5a:49:a9:a0:0f:5c:6c:
         8a:7e:53:1a:a3:d0:62:04:44:3d:52:48:7f:7f:11:4e:f2:1c:
         eb:fd:c9:a5:0c:63:67:96:7c:a2:58:6e:9a:be:a0:2b:c7:a5:
         a8:eb:17:77:7c:f0:cb:57:30:b8:80:56:ec:37:3b:de:a5:03:
         05:9e:c4:ff:36:3c:01:ea:96:f9:50:7a:76:13:b3:ae:0d:23:
         da:cc:6c:8b:f0:50:60:6f:ed:a4:7c:97:4b:c7:ed:8e:2d:25:
         91:b6:5d:4b:bc:ec:1c:c4:f6:d8:69:a6:02:59:4f:0b:b5:d9:
         7c:81:65:84:a3:38:db:b3:f5:eb:23:97:eb:1e:88:a3:44:c8:
         e3:f7:7b:ec:3f:ae:ee:0e:21:24:11:c2:09:b9:98:b3:53:6e:
         c1:61:21:da:58:d7:54:bb:c3:dd:22:a9:0c:cd:c0:17:34:72:
         c5:ff:9a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:46 2024 by rpki-client on console-ams.rpki-client.org