Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
File:                     M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json)
Hash identifier:          GB8dwV/7jwyxaM1V1cxZ1JteIF7WNEeFCQqr8YJHeuo=
Subject key identifier:   DC:3D:98:83:1C:1F:32:E7:90:60:72:BF:EF:09:AD:8E:61:22:8C:AE
Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
Certificate issuer:       /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Certificate serial:       02D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
Manifest number:          02CF
Signing time:             Sat 23 Nov 2024 00:57:25 +0000
Manifest this update:     Sat 23 Nov 2024 00:57:25 +0000
Manifest next update:     Sat 30 Nov 2024 00:57:25 +0000
Files and hashes:         1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: Epbw4ja+mmHD9VSgMUi4hoqG59aBL1J59bO5mNATmfA=)
                          2: 6AF5A9FAC6C811ECA5A9AB33C4F9AE02.roa (hash: lpKvZue3E1qtxxNfskF9yZrVNx86JncMpp8PU9JrNaA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
                          rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
        Validity
            Not Before: Nov 23 00:57:25 2024 GMT
            Not After : Nov 30 00:57:25 2024 GMT
        Subject: CN=67412875-5cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:2d:c6:4f:2d:44:d1:7b:5d:de:f0:d0:9e:
                    fd:20:89:29:94:cd:71:9e:cf:82:eb:53:c6:a9:85:
                    28:bf:f8:fd:02:07:94:23:b7:10:eb:da:50:44:5e:
                    3b:f1:e9:37:7d:28:67:b3:cb:34:fc:3c:0b:64:b3:
                    11:b8:2a:71:90:e6:de:39:e6:79:23:06:37:4c:f1:
                    3d:5e:2a:4f:e8:73:a4:4b:1e:66:55:72:4a:aa:ba:
                    21:34:30:eb:d6:32:64:89:94:13:a0:58:a5:09:93:
                    ca:2a:40:ea:16:8c:8f:53:3f:a5:d5:a5:11:63:55:
                    6a:14:93:3b:9a:ca:69:37:fb:b4:ca:80:af:50:38:
                    16:05:1f:7a:22:85:53:20:fb:d6:a0:10:00:9d:70:
                    d7:65:9b:3e:92:9a:e0:3d:a2:7e:47:81:ac:a0:d3:
                    cb:b4:cf:5c:c5:40:71:be:1d:05:82:2b:31:e3:8d:
                    32:1e:48:0e:a3:13:17:2f:40:73:a6:c0:3f:58:0a:
                    e9:fb:dd:25:e6:de:7f:aa:c6:5e:d9:7b:db:62:c2:
                    c1:da:c0:15:f2:48:23:bc:8b:e5:53:16:e0:86:a6:
                    7c:28:d6:86:52:40:fd:c5:69:29:01:92:c2:be:da:
                    97:55:f3:c4:9a:ad:a8:b6:38:d7:09:fe:6c:25:61:
                    7c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3D:98:83:1C:1F:32:E7:90:60:72:BF:EF:09:AD:8E:61:22:8C:AE
            X509v3 Authority Key Identifier:
                keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a3:c2:39:3f:b1:81:97:d2:a5:a8:33:59:7d:16:ff:8f:0e:
         f6:4a:25:aa:c1:12:6b:c8:0d:3d:01:90:84:64:05:1a:b9:f7:
         5f:be:b5:14:2a:ad:33:52:c7:ff:66:77:a4:2c:00:00:af:9b:
         09:b6:e9:12:7e:bc:d4:a7:88:72:84:04:c3:9e:15:db:be:c0:
         b4:44:6a:89:b9:f9:ca:94:af:8c:3c:4e:51:10:26:f7:bc:60:
         1d:36:4c:4f:48:65:30:04:b6:2c:1c:b2:1d:f1:53:48:17:3b:
         ca:ef:d8:12:63:17:f6:8d:06:1a:e0:76:b3:13:52:13:cd:7e:
         9f:e8:d6:51:61:d8:92:75:15:17:51:60:19:a2:8b:7e:f5:7b:
         78:9c:3c:9e:58:d8:bb:4f:c0:e7:f2:16:62:ed:2d:63:c5:8a:
         0c:98:5d:45:95:21:3e:b1:68:42:09:0f:7d:5e:f9:d5:76:18:
         ca:21:c6:34:6c:62:cb:c7:33:78:f4:f5:be:5b:b2:ca:d0:a5:
         26:5c:be:99:91:56:69:b6:9e:ad:f4:10:b8:03:91:81:87:ee:
         2e:77:90:9b:3c:3a:46:e3:5d:d6:f0:e1:d8:a5:10:76:fd:8e:
         1e:10:d5:fb:47:91:79:3d:10:5f:fd:38:93:f6:e7:b3:6d:9e:
         fe:26:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:41 2024 by rpki-client on console-fra.rpki-client.org