Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
File:                     K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json)
Hash identifier:          xcFNErrlP+5V53NwuOfFVYNSifm9EkNtXhjjHooQJUw=
Subject key identifier:   B0:F4:16:5F:F9:4D:9A:11:43:25:5D:4E:82:DF:78:63:05:D3:9A:EA
Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
Certificate issuer:       /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Certificate serial:       036F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
Manifest number:          036B
Signing time:             Sat 23 Nov 2024 00:28:48 +0000
Manifest this update:     Sat 23 Nov 2024 00:28:47 +0000
Manifest next update:     Sat 30 Nov 2024 00:28:47 +0000
Files and hashes:         1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: 8W33V7IwOKn4kbr9eRFgvmYSM9WXewzYE0hw1puYA2I=)
                          2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: zNdiJ1pBffbcNnWg75GFO6PkHkmsjOTQiX3Av0Ret+w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
                          rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879 (0x36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
        Validity
            Not Before: Nov 23 00:28:47 2024 GMT
            Not After : Nov 30 00:28:47 2024 GMT
        Subject: CN=674121bf-b5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:0e:20:b8:31:78:93:67:0f:32:b9:35:db:
                    f5:25:a8:ba:02:93:0d:97:b8:e0:e5:00:0c:df:aa:
                    5d:5b:90:85:ae:e1:49:a4:bc:1e:6d:50:d8:6f:86:
                    54:ab:2f:75:39:a5:ac:8d:04:98:1b:36:8d:fc:be:
                    7d:b8:d5:dd:6c:91:d0:9f:d1:4f:23:72:89:c2:2f:
                    02:89:35:7c:41:e4:28:ba:b9:b0:8a:e2:0d:49:42:
                    b5:b9:ba:74:2b:18:f3:1f:1e:6f:3e:f6:1c:6a:f3:
                    8d:a1:bf:f4:cf:e8:42:cd:42:b5:a2:03:cc:97:b8:
                    76:36:18:09:db:5d:ae:af:51:7a:cd:34:14:7e:fb:
                    d2:c8:29:9d:04:63:51:4d:64:d5:b2:09:a9:66:f3:
                    d9:61:f3:b3:ca:13:aa:f7:ad:78:e1:3c:2b:5d:c9:
                    4c:2f:ec:8a:8e:cb:e3:d3:4f:78:21:30:80:03:25:
                    bd:c8:d4:ca:df:d2:75:2a:d7:36:75:39:47:ae:a9:
                    a5:f3:5d:f6:88:fa:3a:34:17:08:99:3f:77:c2:bc:
                    b2:8f:82:a7:ed:29:fd:2a:c4:26:0b:9b:16:c0:e6:
                    14:98:8c:12:a3:9d:29:2f:ef:8b:bb:46:cb:7f:d6:
                    cf:d0:dc:65:de:ff:09:32:7f:e1:95:4d:93:e5:bc:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F4:16:5F:F9:4D:9A:11:43:25:5D:4E:82:DF:78:63:05:D3:9A:EA
            X509v3 Authority Key Identifier:
                keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:78:ef:e8:c9:83:fc:f2:62:c6:da:b1:24:ff:51:52:24:34:
         a5:81:9e:71:df:7f:54:cc:ee:b5:64:93:03:cf:5d:62:05:11:
         0e:0c:89:de:29:56:0b:35:b7:b2:df:a8:92:33:38:5f:a9:04:
         fc:28:9d:3e:90:14:36:3f:ae:db:93:46:61:da:41:ca:01:47:
         3e:c7:2d:68:d6:85:a6:3f:50:b9:8d:42:a3:80:6c:f9:ab:32:
         18:1c:42:25:5e:ee:94:81:17:0e:86:68:c8:4a:2e:df:15:a2:
         3f:e6:bc:13:fe:fa:6c:89:a4:10:58:95:9f:08:78:d3:3f:fa:
         3f:aa:3c:3a:fb:76:28:9f:60:f1:cc:9f:16:a8:d5:e4:f7:03:
         04:3e:6d:dd:9f:b3:38:95:8d:c8:17:19:75:24:f4:a7:b9:61:
         bc:d6:a7:6e:35:f3:10:7a:29:d8:e5:6d:89:fe:84:46:ef:24:
         b5:a8:41:32:d8:ab:3a:a0:f8:3f:c4:79:b3:a3:6f:be:28:98:
         33:38:91:22:68:fb:e8:da:82:04:4c:6a:d4:49:99:d9:a5:e5:
         49:29:8a:0d:50:0d:1b:d8:b1:bc:06:f3:53:50:9c:01:ec:63:
         37:c4:f2:7a:68:17:2a:f6:41:7a:91:c6:ca:16:78:14:b6:ec:
         12:37:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:24 2024 by rpki-client on console-ams.rpki-client.org