Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File:                     2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier:          EQiJQS6x3UnxyXqU9lv0XiFOmAZP5ITsLfjUbAM8+Tc=
Subject key identifier:   65:BC:AB:BA:6F:0A:CA:9D:21:55:79:3A:55:BF:C5:ED:E8:23:9F:CC
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number:          CC
Signing time:             Sat 23 Nov 2024 03:52:29 +0000
Manifest this update:     Sat 23 Nov 2024 03:52:28 +0000
Manifest next update:     Sat 30 Nov 2024 03:52:28 +0000
Files and hashes:         1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: ZvO+v1GnLWfwNLq/5rSvP9fsI3Bn+Xt6X83YbDSlOQ4=)
                          2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: 0mz+0e1i75LjHInfBODtd+9jL2NlY68nRhoEgkLCSZI=)
                          3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: nIeveHqzY8IyETLM0F2uy8t9PYzf3G6mHt7Vhh6frsc=)
                          4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: iSOdJt+BL8ENRxFcv4jaFJ7KNoHUX0Q/WLaLzbaI1bk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: Nov 23 03:52:28 2024 GMT
            Not After : Nov 30 03:52:28 2024 GMT
        Subject: CN=6741517c-9d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:4e:39:82:4a:94:d0:96:94:00:4a:52:a6:
                    79:60:0a:c1:d5:72:77:c7:d5:67:42:74:4f:49:0a:
                    1d:ea:63:f5:a5:b9:81:2b:91:3e:b3:d2:ae:d8:83:
                    92:62:ca:41:8f:3b:7d:a3:9d:f4:78:bd:7c:7a:16:
                    3a:81:78:0c:ad:13:c4:c5:96:4f:7d:bb:73:19:24:
                    23:df:a5:c4:b1:fe:2c:20:5a:da:64:95:93:84:fa:
                    dc:1f:5e:5e:cc:2b:91:90:2c:fc:94:2a:ef:75:17:
                    06:84:77:e7:52:87:cc:57:0b:0f:83:c3:8c:31:36:
                    5a:13:46:6d:7d:ab:b7:98:4b:7a:b1:c4:26:a7:a5:
                    53:10:8b:4d:96:c2:2b:60:3d:3f:84:f3:7e:d1:be:
                    55:f0:ea:5a:b9:19:93:5e:5d:52:e1:c4:d4:b5:10:
                    5c:f1:c8:ee:a7:4b:27:dd:af:55:29:2e:01:2b:e6:
                    4f:30:8b:f6:03:4a:1d:a9:ca:e5:76:e9:6b:b8:35:
                    89:fc:44:fa:c2:8f:06:61:fb:6d:58:1a:c2:19:4f:
                    97:69:55:6b:c4:43:4c:79:a0:f5:3f:42:e5:df:ae:
                    bc:aa:f6:8d:0c:82:b6:ac:ff:2a:74:fc:89:60:2c:
                    5f:74:0e:1b:cc:4a:a3:48:30:d3:bc:34:d5:f1:49:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BC:AB:BA:6F:0A:CA:9D:21:55:79:3A:55:BF:C5:ED:E8:23:9F:CC
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d0:65:ea:99:49:ff:d7:f3:65:21:5d:3f:f6:8f:50:fa:91:
         f1:69:4e:7e:e0:0a:b3:57:75:20:87:fc:be:13:97:ee:35:35:
         f3:cc:f4:83:2c:07:62:67:5a:d0:65:07:e5:50:7f:91:6c:56:
         a9:5a:ce:16:b3:20:97:de:cf:fc:fb:fe:55:02:93:9a:27:2a:
         48:d5:13:e0:91:9f:8c:70:c0:e7:d4:71:90:a8:72:fc:00:d2:
         93:1b:8b:8a:70:76:56:bd:10:01:b9:63:c9:fb:1a:32:73:50:
         a6:60:21:b2:68:cd:8c:58:44:81:5f:90:9c:44:24:9a:ec:41:
         ed:d4:9f:28:c8:59:80:27:db:e6:26:f4:08:0a:b8:93:b9:b3:
         ad:57:cf:df:78:ad:20:30:64:2b:e7:a9:a7:b6:4d:3f:d2:05:
         c2:a4:e9:48:04:ec:32:64:01:c4:4e:e0:5e:90:f2:1f:e7:53:
         cf:24:c0:78:4c:e5:bc:6f:0e:28:28:28:49:07:92:d3:ea:dd:
         b6:f9:e9:6a:c7:52:fa:79:8b:9a:75:b3:8e:1f:e8:ca:0c:73:
         ca:ea:8e:d5:b4:38:82:f2:7c:a2:49:5a:7b:f6:33:7b:79:ab:
         7a:c7:67:ce:8d:38:ab:5d:a5:a3:ab:35:01:f8:7b:29:93:09:
         75:da:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:12 2024 by rpki-client on console-ams.rpki-client.org