Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
File:                     ej19N0jHiYbCxeULUBO-tgq0etw.mft (raw, json)
Hash identifier:          GG4NL1BKVmf0nZEZrBJTQm4BqZyUs2PZXJj0VESy7o4=
Subject key identifier:   A2:AE:C2:08:1D:92:07:0E:21:3D:34:94:4A:B2:12:87:A6:AA:09:F2
Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
Certificate issuer:       /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
Manifest number:          01D5
Signing time:             Thu 21 Nov 2024 01:44:22 +0000
Manifest this update:     Thu 21 Nov 2024 01:44:22 +0000
Manifest next update:     Thu 28 Nov 2024 01:44:22 +0000
Files and hashes:         1: ej19N0jHiYbCxeULUBO-tgq0etw.crl (hash: O7XVpsuhdRzrDOX7j3ysYLNJHlm/Ghv9t0oYnn5b7ks=)
                          2: 3303481C820B11EFA5FD6818C4F9AE02.roa (hash: JBs98Q3NHfcb0eK3j5fa6v76BEQY89z35iseWlByMt4=)
                          3: E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (hash: SemjJMdkcS92H6jZ3SjICgKMsBHDKShym9p/JCEc9ZI=)
                          4: 28144924820B11EF8B053D18C4F9AE02.roa (hash: oL0VZHRYgauxeOA3BDImUElst+1RHKq4Fjme5EzOijA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl
                          rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
        Validity
            Not Before: Nov 21 01:44:22 2024 GMT
            Not After : Nov 28 01:44:22 2024 GMT
        Subject: CN=673e9076-1dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:25:fd:a9:5d:1e:1b:38:cd:fa:32:d8:64:
                    5f:17:44:9b:06:ea:fe:53:3d:ea:38:f5:27:a8:c4:
                    8a:05:77:c3:e2:88:18:e1:b7:5f:16:00:7a:e0:f8:
                    4e:22:d6:8c:f8:2d:fc:b5:20:10:9c:14:3e:b2:39:
                    af:ed:89:cc:2c:7a:f7:2f:95:7e:2d:79:c2:ba:c5:
                    f0:a2:75:7a:a1:54:cc:cd:d7:00:af:34:7a:f4:82:
                    e4:ce:10:c3:eb:c7:67:18:98:85:7d:76:5b:b7:90:
                    b9:d7:3b:b9:82:3b:24:24:70:93:99:9b:f4:c4:5c:
                    c0:25:a3:a2:8a:fa:4b:c2:ce:8b:89:c7:a3:12:8b:
                    91:87:56:da:e1:ff:72:6d:9e:65:a9:bc:5c:e1:9c:
                    d6:0f:9d:ba:84:d7:3f:e8:ff:ae:dd:4a:d2:ce:7c:
                    c0:c8:da:f9:82:c6:a2:9f:c6:7a:9e:80:87:ef:67:
                    6a:f8:c3:48:5d:17:12:a5:8b:1d:c7:01:96:86:3d:
                    58:61:b9:c8:ab:fe:09:40:0b:00:0c:23:79:43:ba:
                    a3:73:fe:13:5d:94:a4:17:6d:3f:b9:3f:71:b2:99:
                    5d:04:ce:c3:76:ab:0b:c9:2e:c5:f7:40:2d:52:d6:
                    23:1f:68:49:4e:a6:81:f2:06:98:fd:d6:87:00:0f:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AE:C2:08:1D:92:07:0E:21:3D:34:94:4A:B2:12:87:A6:AA:09:F2
            X509v3 Authority Key Identifier:
                keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7b:68:f0:68:6e:b2:5a:fc:4b:b0:ad:20:20:d9:d4:a1:9a:
         65:18:a9:43:19:53:f6:f8:be:4e:5a:6c:43:cb:9b:61:3e:8b:
         99:9d:3a:a7:f6:e9:d5:80:47:50:dc:04:dc:0c:a7:67:8f:7d:
         a3:66:cb:08:aa:d8:8a:08:5a:cd:79:04:21:26:f1:f6:3a:9c:
         39:61:e1:03:d1:56:c0:83:e3:da:54:c0:af:60:ae:99:c6:a4:
         11:ec:5a:d5:91:28:27:05:21:c4:cc:71:11:04:07:b0:3f:87:
         9d:59:08:7c:ca:1a:3b:42:60:e0:6c:28:04:50:f5:b2:c1:eb:
         62:38:6e:15:e4:0c:53:eb:da:d2:ed:89:b9:24:b2:c6:50:ba:
         74:f2:38:a6:91:bf:8b:d6:53:d7:19:1d:0b:aa:7e:7a:aa:da:
         09:81:21:ab:cc:5c:47:20:23:72:41:f8:9b:a7:af:78:c2:7c:
         fa:ae:d9:73:48:6d:a1:9e:a5:3c:73:d8:36:4c:02:a7:66:85:
         36:83:51:62:e7:ac:85:62:13:39:f8:3d:48:78:d5:bc:fb:ce:
         b6:be:17:47:b1:45:2c:2f:2e:90:42:d1:cf:03:7a:0a:63:0b:
         6c:25:c0:94:d5:20:c2:56:6c:a9:95:30:79:30:b4:5d:8d:f1:
         93:74:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:48 2024 by rpki-client on console-ams.rpki-client.org