Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
File:                     VIQw6riOTjePtQBa-uXKucAAeho.mft (raw, json)
Hash identifier:          PxsS5u9xP8HccL/Q15SL6umJB5Sio12V88MSWH9BnTE=
Subject key identifier:   15:B9:07:8A:69:F1:B5:4B:41:10:47:3D:AC:35:2D:2F:0D:24:9B:07
Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
Certificate issuer:       /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
Manifest number:          02
Signing time:             Tue 22 Oct 2024 17:58:11 +0000
Manifest this update:     Tue 22 Oct 2024 17:58:10 +0000
Manifest next update:     Tue 29 Oct 2024 17:58:10 +0000
Files and hashes:         1: VIQw6riOTjePtQBa-uXKucAAeho.crl (hash: MiRU1vu8ZC2J1QwNG0SS+29y6mfQpSOMF7EcIVjLk4U=)
                          2: 3159F676909F11EF8F63A455C4F9AE02.roa (hash: LDp79TPJF0EkBzzSeNjHOBwJeVq7UC7uSjiKStxhRdk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 17:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
        Validity
            Not Before: Oct 22 17:58:10 2024 GMT
            Not After : Oct 29 17:58:10 2024 GMT
        Subject: CN=6717e7b3-a410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f6:bf:f8:89:2e:2f:47:da:2e:89:d0:38:8d:
                    e8:aa:d4:ec:26:ad:92:89:fb:8b:81:61:8e:ea:88:
                    d7:37:07:44:fa:a2:8a:30:e4:72:75:ce:9d:92:91:
                    14:6e:59:9e:0b:0d:08:25:43:90:38:9e:a2:1a:50:
                    7f:88:b7:ce:44:91:3b:fa:d8:a0:73:ad:ff:89:f6:
                    84:7e:8d:ea:63:4f:02:77:71:d4:07:7a:68:1d:35:
                    96:4f:d9:b2:ee:5e:d4:d2:fa:cf:de:9e:6f:eb:f2:
                    9b:06:04:37:8a:c1:62:4d:be:57:00:ad:ac:7d:a1:
                    d3:ce:a8:f4:b2:72:74:0f:4b:4d:fe:97:e4:7b:0f:
                    1c:2f:65:ac:aa:08:a9:27:63:12:c9:6e:ee:4e:0b:
                    00:f2:d8:3c:76:60:18:11:a1:ce:79:0d:31:67:29:
                    86:d6:56:1d:0b:d8:0d:bd:bf:f9:31:7a:f8:70:cc:
                    39:af:f9:88:dd:1a:72:e4:7c:1b:c4:03:8f:cc:43:
                    cd:d6:41:d7:d0:70:9f:1a:dd:a9:86:d4:0f:fe:de:
                    d5:60:2e:8a:65:07:9b:a0:37:8e:c8:9d:c5:2e:6a:
                    5b:9b:0a:50:83:58:d9:f9:fc:7c:a4:c0:02:f5:70:
                    a9:f2:56:ba:d1:1a:a5:67:c4:61:dd:71:87:91:0d:
                    8f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B9:07:8A:69:F1:B5:4B:41:10:47:3D:AC:35:2D:2F:0D:24:9B:07
            X509v3 Authority Key Identifier:
                keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a3:e2:36:ec:b7:4b:6f:cd:89:31:6d:79:40:c3:c7:cb:85:
         e2:62:bb:11:ee:c0:df:be:32:52:66:fd:f3:db:f1:f3:fd:f3:
         38:35:3b:01:8c:56:c7:97:27:cd:ec:78:d5:1e:23:09:a5:0c:
         5d:81:d7:bc:b3:ad:9b:da:b6:95:78:a7:d8:ce:b4:82:60:b2:
         a8:1f:6a:53:59:97:73:24:06:15:0e:e2:90:5b:aa:f4:1f:90:
         ea:13:2b:5e:6a:41:90:45:1f:10:cf:03:5a:d5:64:63:86:ea:
         38:60:37:50:ad:d8:69:6f:10:a3:22:63:8e:ab:34:82:46:f4:
         4b:e7:34:2e:a8:27:dd:7b:93:06:34:0d:ba:7d:6a:26:d6:50:
         6d:28:68:b5:11:c4:c5:43:c4:11:26:88:96:4f:aa:04:4f:f3:
         1c:ca:17:e4:13:83:24:e1:d6:d2:cc:18:23:92:c8:4a:8c:15:
         06:22:94:88:8f:7d:a1:d8:10:61:b2:8c:49:0e:2e:79:0d:63:
         25:d7:78:df:64:04:90:7c:0e:93:61:36:6f:91:2e:14:11:c1:
         d6:5e:cd:e4:e7:f5:78:c5:53:04:88:33:0a:33:ab:cc:7a:54:
         93:07:a9:6f:62:78:59:ec:41:b3:5e:79:ee:3d:e0:65:3d:a6:
         40:ce:5b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:15:09 2024 by rpki-client on console-ams.rpki-client.org