Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
File:                     rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft (raw, json)
Hash identifier:          ju3W92zNZSZWqMp7eOszBgPvsIYX0jLNffY0RFJeidI=
Subject key identifier:   6A:6D:29:91:66:D8:B3:98:4E:18:AF:B8:41:09:BB:E5:00:46:25:4B
Authority key identifier: AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02
Certificate issuer:       /CN=A9190057/serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
Manifest number:          011E
Signing time:             Sat 23 Nov 2024 02:58:48 +0000
Manifest this update:     Sat 23 Nov 2024 02:58:48 +0000
Manifest next update:     Sat 30 Nov 2024 02:58:48 +0000
Files and hashes:         1: rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl (hash: QkUWagiZ/f1zHfYKjLu6Cf8gEQnIwn79FTSBDJUXhbE=)
                          2: 1EE23948F8F411ED96463014C4F9AE02.roa (hash: Yx8IlqCtySeQtMNeiWpjMxSZbvRo8nOwBbeBlMAmJkM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl
                          rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190057/serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802
        Validity
            Not Before: Nov 23 02:58:48 2024 GMT
            Not After : Nov 30 02:58:48 2024 GMT
        Subject: CN=674144e8-0ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:e9:7e:13:1b:c4:37:12:2e:06:70:34:4b:
                    fe:0b:d0:fc:b6:6e:02:62:c3:d6:17:69:46:07:c2:
                    98:24:8c:7f:7b:6a:70:18:2d:8f:84:b0:9a:71:c8:
                    d8:bc:ec:b3:d7:1e:93:b6:9e:35:41:73:33:1b:6c:
                    df:f8:9e:26:da:36:e8:11:c6:50:07:c0:58:d8:51:
                    19:73:13:b0:19:c8:a1:e4:99:3b:1f:85:ec:f7:fe:
                    b3:8b:69:0c:41:7c:ca:0c:92:32:06:34:ae:46:3f:
                    e3:ee:c2:e1:1b:9e:3b:13:a4:df:9c:5e:21:ef:10:
                    3c:8f:55:67:b2:53:c5:20:73:60:a4:3e:98:e6:ec:
                    ec:af:6f:fe:48:85:62:86:43:3f:a2:d7:73:6b:7b:
                    5a:03:a7:97:4c:66:7c:ff:74:89:37:a2:14:b0:82:
                    52:b3:78:b8:cf:e8:36:83:87:b6:5b:77:5f:fd:1a:
                    c1:8d:ec:24:d0:96:f2:4f:5f:03:fd:9e:3d:b3:28:
                    75:cc:5f:22:cd:24:3d:65:7a:f8:f6:42:e8:6b:3b:
                    fc:6d:bf:b9:69:2f:f8:0e:50:32:95:58:ea:55:89:
                    e4:6b:4e:17:36:dd:0b:0a:27:09:33:a9:26:93:78:
                    ab:d5:a1:2c:10:22:5f:a7:34:08:5f:eb:b7:c0:9f:
                    ed:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6D:29:91:66:D8:B3:98:4E:18:AF:B8:41:09:BB:E5:00:46:25:4B
            X509v3 Authority Key Identifier:
                keyid:AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:4e:c7:41:45:9f:32:a0:63:c2:c8:eb:54:3d:12:e9:61:
         8d:f1:4b:42:73:83:14:ba:6c:14:47:e4:b2:06:11:50:38:a9:
         2d:d4:06:43:3f:fa:87:db:40:70:0b:ae:fe:c4:f7:93:c3:e4:
         4f:6f:36:d8:80:2c:55:e5:a5:26:27:01:aa:64:da:ae:2d:67:
         66:b3:25:c3:b3:01:08:08:f9:a2:b3:47:40:a3:e4:b5:16:e8:
         22:00:b1:6d:50:1a:a3:0d:68:e4:72:65:42:f6:68:1f:69:e8:
         99:99:fa:5f:c9:2b:18:1c:a7:01:f6:c8:67:b1:58:1c:fe:d2:
         0a:3b:3c:9d:45:8e:98:50:19:0b:a0:a4:d4:45:7d:af:db:a0:
         e9:61:8a:ab:1c:9c:1c:26:d4:ce:20:0a:bf:92:f3:4a:d0:89:
         02:14:27:7e:ef:8e:ad:bd:11:79:ea:89:76:db:09:d1:9e:28:
         da:51:c8:ed:47:68:49:e8:91:2d:3e:cb:ab:98:ee:9a:7b:9d:
         8b:50:92:a0:84:98:be:50:7c:9b:59:12:91:8d:f5:d3:61:cb:
         4c:3e:48:8d:49:f8:b2:a6:6e:f2:a5:55:fd:b4:10:da:a2:25:
         f1:1d:b4:32:e0:38:61:bc:60:36:14:7c:ca:88:d4:24:b5:e4:
         e4:6f:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org