Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
File:                     5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json)
Hash identifier:          4LxYUnT4Gn4ssO+j45mw6jPEsxV+xx6bcn/6pUrmfpw=
Subject key identifier:   FF:EE:28:24:7F:2F:16:11:E9:E5:22:BD:D1:9D:10:85:6A:B0:81:3D
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Certificate issuer:       /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial:       1902
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
Manifest number:          18E6
Signing time:             Fri 22 Nov 2024 16:26:45 +0000
Manifest this update:     Fri 22 Nov 2024 16:26:45 +0000
Manifest next update:     Fri 29 Nov 2024 16:26:45 +0000
Files and hashes:         1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: vqKPZSBIfYmIpiAZoRe3Wfc6iLsQLI0LkMH5kZnwFXQ=)
                          2: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: VHhU4T6PraaYgh0OKYxnF9YbskELwSN55WdyN/nVdKY=)
                          3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: y3ghXyFRCacdpqDozL1dHnRn5VnIW5O8UMNzKQMsfws=)
                          4: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: MvSNDQCHIjbtKn6qI3pyzYR56RR/J9dUO091dvxUIn4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
                          rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6402 (0x1902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
        Validity
            Not Before: Nov 22 16:26:45 2024 GMT
            Not After : Nov 29 16:26:45 2024 GMT
        Subject: CN=6740b0c5-d2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:80:7f:39:27:09:fa:82:62:68:86:6c:a0:
                    1f:21:27:15:78:45:6e:8f:7f:ea:04:ab:40:0b:f3:
                    a6:1b:63:6c:14:83:1f:39:33:48:88:02:e1:6d:04:
                    31:56:41:e1:e1:5b:9e:8a:15:0b:87:ab:d3:0d:d0:
                    f6:d7:52:b7:d7:49:17:ff:a6:96:62:6a:0f:1f:5c:
                    70:bf:12:81:04:cc:3b:60:24:9b:67:73:b7:cf:25:
                    6a:ab:9a:73:40:a7:e7:af:af:3c:be:81:7a:1b:14:
                    5c:c9:af:d5:9a:cf:c2:33:1d:32:bd:94:57:16:cc:
                    8d:5e:99:45:22:af:79:c8:fc:1f:43:21:9b:a6:6d:
                    02:4d:27:a9:4e:e0:84:14:e4:d2:9e:ee:21:15:10:
                    17:a0:af:72:1e:e9:0c:f3:fc:c6:a4:85:9a:36:0e:
                    ad:de:a0:2d:ce:67:cc:de:0b:68:cd:a9:5e:fd:92:
                    ca:d7:6d:1d:69:28:5f:35:8c:fb:2c:08:c8:bb:65:
                    25:c4:a2:2b:98:98:cd:b1:ad:bd:f6:58:7c:c6:0c:
                    ae:11:42:f5:08:73:1b:56:8c:01:96:99:1b:b1:3f:
                    a1:5c:1e:39:cb:69:3c:1f:95:da:ed:27:7c:46:fa:
                    e4:d8:ac:de:1a:ec:7e:eb:9f:a5:38:b6:d0:df:be:
                    69:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EE:28:24:7F:2F:16:11:E9:E5:22:BD:D1:9D:10:85:6A:B0:81:3D
            X509v3 Authority Key Identifier:
                keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:dc:eb:02:ee:06:ae:85:54:59:3f:49:ca:e1:a4:ac:31:75:
         72:47:65:e4:1c:60:10:26:39:ba:71:89:e1:41:36:2c:25:39:
         52:76:68:54:73:fb:87:0e:9a:a0:3a:ae:2b:f9:d0:44:dd:58:
         28:20:be:d2:1c:a5:93:1f:44:58:32:1b:0e:50:33:f5:bf:34:
         98:c7:a0:b4:15:3a:3e:dd:fc:c5:d5:5f:6d:e4:80:99:1b:9e:
         2c:a3:b8:82:ef:2b:2f:7e:49:33:d0:fb:27:1e:2e:78:d8:57:
         4e:71:92:bd:19:b8:23:74:9b:17:2a:d4:bb:20:37:4d:7d:08:
         23:f1:dc:5c:c3:08:df:b6:b5:f7:6a:c3:6a:0a:fe:b0:b0:9c:
         58:b2:da:10:0d:f4:56:fa:9b:30:b9:d3:95:ca:19:a2:af:08:
         35:00:b4:05:e1:b1:da:6d:7f:ea:66:df:f2:e8:67:10:ca:58:
         75:f3:f0:ad:22:ff:8d:f6:b7:bb:33:57:db:99:f9:67:f1:53:
         45:0a:00:54:91:21:f6:a0:4c:c9:3f:dd:a1:9f:ce:c4:35:ae:
         ad:03:c3:38:fd:ae:eb:11:81:bc:ae:99:37:0c:f1:0b:ed:3c:
         f2:c3:f0:ad:42:bf:29:78:c8:56:e0:3f:ed:d2:dc:e2:1a:0e:
         f4:b7:f3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org