Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft
File:                     eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft (raw, json)
Hash identifier:          XybCm3ViLarUuLYydGkxqy7NgNrzHQ2mUtGkd6XCjc4=
Subject key identifier:   D8:A1:C8:14:52:C9:E0:4F:59:60:80:43:88:30:8C:4D:A0:44:FC:97
Authority key identifier: 78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A
Certificate issuer:       /CN=A9192210/serialNumber=781F95B0C8AB2EF7FD73CF8FC10D2FA86ECCDC4A
Certificate serial:       0742
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft
Manifest number:          072E
Signing time:             Fri 22 Nov 2024 21:19:00 +0000
Manifest this update:     Fri 22 Nov 2024 21:19:00 +0000
Manifest next update:     Fri 29 Nov 2024 21:18:59 +0000
Files and hashes:         1: eB-VsMirLvf9c8-PwQ0vqG7M3Eo.crl (hash: k04gREv8f0dk7x2EhR1YNw9btzVOmTQdqzCJGIbYMY8=)
                          2: 71FDE240807E11EF9EE1801DC4F9AE02.roa (hash: q+b+4tTt/sEDZ8Vyjb3CjEmYUVtMW/WyT/A34CwEyBk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.crl
                          rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192210/serialNumber=781F95B0C8AB2EF7FD73CF8FC10D2FA86ECCDC4A
        Validity
            Not Before: Nov 22 21:19:00 2024 GMT
            Not After : Nov 29 21:18:59 2024 GMT
        Subject: CN=6740f544-2154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:ab:01:8e:72:6d:b0:6a:2d:a6:59:ef:9b:
                    32:15:2c:66:2d:aa:7a:b3:79:2f:66:c0:21:1a:64:
                    40:7d:16:fd:f1:2a:3c:cd:56:3e:a7:7d:b5:ff:7f:
                    04:95:ce:da:83:69:35:95:16:29:a2:3c:c6:ba:7a:
                    63:50:26:d6:eb:35:9b:fb:71:67:b9:d8:61:bf:89:
                    43:b4:3f:f2:de:29:29:bc:66:be:96:4c:47:b5:cc:
                    3e:93:ed:07:01:2b:7b:c9:9c:50:ee:73:0f:46:6a:
                    e5:df:82:8f:8b:b1:2a:7d:6d:c1:be:ff:e3:b7:8d:
                    58:42:a4:94:c5:e0:32:e7:18:7b:e5:0f:fe:be:b1:
                    18:1e:2d:b0:42:88:2d:2a:d6:57:84:08:ce:bb:20:
                    89:76:2f:ca:ac:0e:f5:25:b1:9b:78:8b:2c:08:a8:
                    b1:31:04:a7:ad:e8:b0:eb:2d:1d:94:89:84:6c:77:
                    fd:81:29:d6:5e:e1:f4:45:0f:4f:e5:c9:87:a9:d9:
                    21:2b:7f:1f:28:df:d3:5a:48:9a:c9:68:ba:3f:3b:
                    89:d3:1d:f5:d6:23:d8:8a:75:63:ad:5c:53:52:57:
                    74:ee:f3:8e:07:8f:d3:83:96:6a:d5:2a:82:aa:d4:
                    a4:9b:1c:26:c4:37:d9:93:a5:c8:c3:5a:d2:81:0d:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A1:C8:14:52:C9:E0:4F:59:60:80:43:88:30:8C:4D:A0:44:FC:97
            X509v3 Authority Key Identifier:
                keyid:78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a5:8f:1d:93:9f:e9:96:b1:1b:13:2a:85:d1:58:bc:ca:ce:
         e7:44:e1:bd:b4:c8:ae:65:0c:e5:86:0e:a5:0f:29:7d:f1:6d:
         29:98:26:ab:c5:4f:4b:66:42:5a:2b:d4:9f:09:db:6d:90:20:
         a4:cf:e8:d1:99:8c:dd:6b:77:2b:33:52:2a:2c:89:d4:b4:10:
         47:7c:d9:b9:9a:33:46:df:6a:a4:cf:82:40:3a:3c:a6:d4:be:
         1b:cb:f4:ee:52:0c:a1:bf:e3:0f:44:7f:f4:0a:68:b0:1e:3c:
         12:e9:39:b9:9d:90:c6:38:c3:1b:20:9a:dc:2e:47:92:15:c1:
         1d:34:2f:64:34:03:09:96:ed:be:57:c9:11:8e:27:36:e8:8c:
         5e:fc:7f:45:96:93:7b:a6:d9:d0:ad:73:7e:ca:41:da:37:3d:
         b8:27:7a:fd:33:a9:ed:06:6c:6e:36:ec:27:1f:d1:6e:4c:ae:
         7e:9e:9a:24:7f:40:d9:3f:40:6a:50:7d:e7:5e:07:a5:06:f2:
         f2:c5:0e:ba:76:28:98:e7:68:69:5e:49:4a:4c:92:77:ac:a6:
         c2:92:67:ff:b7:76:74:24:d6:b0:ca:32:58:78:9b:4d:54:76:
         f1:45:a0:ae:d2:03:21:8b:1c:92:f5:8e:e4:ef:eb:a9:f0:e8:
         f7:e6:e0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org