Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
File:                     2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json)
Hash identifier:          ti0iBDp7KKWWFU1HRu/0+/GEXlHzcwMBIrLiefFXPVA=
Subject key identifier:   6B:12:7D:96:E2:94:E6:6D:27:38:EA:99:DC:49:8A:1E:B5:68:6D:78
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Certificate issuer:       /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
Manifest number:          DB
Signing time:             Thu 21 Nov 2024 03:42:56 +0000
Manifest this update:     Thu 21 Nov 2024 03:42:55 +0000
Manifest next update:     Thu 28 Nov 2024 03:42:55 +0000
Files and hashes:         1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: 7gjtXNexq/2a3++kOJ16wi+jGbb2tgT4IItFZrWhack=)
                          2: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: 2kS0OWTGFXukQK/9Cb/H9mnSUIUYEGmhm7BUDWiVisg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
                          rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
        Validity
            Not Before: Nov 21 03:42:55 2024 GMT
            Not After : Nov 28 03:42:55 2024 GMT
        Subject: CN=673eac3f-54bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6b:f1:f6:a6:fc:fe:25:97:f8:5f:b0:ea:b8:
                    77:c0:57:fa:b9:32:b4:f8:f9:ac:84:e8:c5:62:4e:
                    8d:48:60:1f:00:d1:78:c4:62:dd:16:bd:72:7c:7b:
                    c4:a6:a0:2c:9a:75:f5:0f:b1:12:8c:c0:7b:fe:19:
                    3e:fb:31:2a:5c:0c:c3:a6:7f:b8:1c:a8:da:62:ec:
                    55:44:92:b0:71:7c:4f:ea:fc:65:94:80:92:37:05:
                    ae:0b:d4:8c:88:06:49:55:fa:8c:8d:f8:93:5e:05:
                    47:04:73:43:b5:e6:e8:c6:97:09:60:db:21:31:be:
                    d1:4e:eb:c0:42:fe:ee:4b:cf:23:37:3c:86:cd:f6:
                    6a:33:df:59:3b:d9:71:9b:cf:ee:3a:f8:8c:62:87:
                    ee:12:17:73:50:01:1e:58:0a:d6:2b:31:cf:8b:74:
                    ad:f3:c7:90:b8:42:ec:5b:35:c5:ef:1c:5d:95:91:
                    6f:18:18:45:9f:0b:94:e2:a3:99:ff:11:9c:83:9f:
                    62:9d:06:68:7c:6f:bb:0f:80:2a:cc:9d:69:07:b7:
                    ed:c4:a4:b2:7a:e2:2a:35:9f:3c:45:1b:72:06:17:
                    22:d7:d6:1a:ee:9a:a2:f5:20:61:89:8a:85:66:76:
                    56:15:aa:3b:75:d7:d8:b7:57:60:a7:0b:2b:fe:42:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:12:7D:96:E2:94:E6:6D:27:38:EA:99:DC:49:8A:1E:B5:68:6D:78
            X509v3 Authority Key Identifier:
                keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:43:11:83:25:5e:6f:30:7a:d0:d9:10:e6:da:c8:fd:b9:30:
         b0:22:8a:75:e2:f0:79:b1:21:d8:04:70:e1:b0:e8:81:86:d7:
         b8:35:0c:97:22:47:c2:70:62:95:d3:84:28:6f:8a:5f:ce:ed:
         05:c6:8d:dd:74:fb:0b:ac:6a:c5:e5:b5:b0:e1:89:e4:86:3c:
         59:27:f1:8d:e3:b1:00:64:19:b7:4d:9c:d9:a3:62:ae:6c:01:
         d0:65:40:0c:98:40:dd:0e:21:df:a6:46:cc:4e:35:a1:4a:ba:
         76:af:d7:72:89:a5:34:29:42:dd:15:26:a1:71:f7:13:8b:f0:
         79:3e:f8:fc:52:72:c5:69:16:3a:0d:10:4f:5c:4f:a8:61:9d:
         72:93:4e:10:06:cb:33:9a:6f:21:8c:98:0b:8a:d3:1a:ac:70:
         8b:bf:5f:ec:33:38:f2:6c:82:09:bd:9b:41:ef:84:ac:35:53:
         4c:dd:db:22:90:4c:bb:ff:f7:e5:1b:80:56:5c:c9:a3:ae:d0:
         22:87:9f:3c:41:e9:da:2c:4c:16:ac:bb:92:fd:60:ba:31:7f:
         6a:78:4d:39:ac:9c:83:9f:18:1b:24:ec:6c:f0:28:01:35:e8:
         e3:08:ec:cf:76:63:c6:40:9a:14:21:8b:ac:26:a9:86:bf:d7:
         c1:32:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:08 2024 by rpki-client on console-ams.rpki-client.org