Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
File:                     -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json)
Hash identifier:          XJY8PgJrUYgu+w7I0OT/JRUfBrJ+0LJ1K8JpdgKe650=
Subject key identifier:   75:40:EA:57:82:87:4D:5A:5D:AF:00:C9:A1:CD:9F:CA:03:79:D2:98
Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
Certificate issuer:       /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
Manifest number:          36
Signing time:             Thu 21 Nov 2024 05:39:43 +0000
Manifest this update:     Thu 21 Nov 2024 05:39:42 +0000
Manifest next update:     Thu 28 Nov 2024 05:39:42 +0000
Files and hashes:         1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: VRBbvc3lqNSfwUPVUKaK6NB0llCQIhFUFuo/kc4CwMg=)
                          2: 4419BD7A5BA011EFB239695EC4F9AE02.roa (hash: KXezgGFWbIUkw3XjH1WWu+jwoNxTjSoHBx4zCxaN7e4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
        Validity
            Not Before: Nov 21 05:39:42 2024 GMT
            Not After : Nov 28 05:39:42 2024 GMT
        Subject: CN=673ec79e-7488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:3b:96:bc:47:75:e8:46:72:81:91:00:04:
                    66:74:65:a0:37:b0:68:8c:dc:89:b1:67:d9:b3:1d:
                    5f:dd:dd:61:e6:80:99:2f:ec:54:c5:95:5f:46:b7:
                    38:64:6c:f4:84:89:e7:6b:2d:b5:68:da:37:76:c6:
                    cd:d6:7b:89:49:43:0d:d8:45:29:8e:f6:91:b4:c7:
                    de:64:f0:30:af:e7:b8:66:d0:b8:df:08:3f:44:2d:
                    ff:9b:89:ba:bc:7d:fa:ae:8e:64:2f:2f:1b:7b:1c:
                    f5:73:db:d5:c9:05:b3:8a:9d:12:09:3d:c5:c2:a5:
                    9c:6a:16:df:6f:a8:ca:30:21:cf:37:6f:c6:9b:89:
                    ac:0f:c5:a7:a3:31:3f:02:11:56:76:de:9e:ec:14:
                    24:d2:6f:c6:82:34:71:a4:b0:92:fc:af:1c:01:ce:
                    e6:30:08:57:99:c6:2a:9b:b5:d8:bd:15:5d:0c:00:
                    5d:c9:ac:99:d0:b6:cd:88:08:03:72:c9:02:ef:52:
                    a9:d0:ff:74:22:e3:49:45:a4:0f:b0:08:c8:23:46:
                    1c:51:65:52:04:b6:78:b3:b9:73:3e:8e:ed:30:99:
                    22:bd:8c:61:aa:9e:b5:04:d6:99:27:04:02:0e:89:
                    bb:c3:33:77:c8:ea:0b:b3:ef:4c:a2:f9:54:b3:81:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:40:EA:57:82:87:4D:5A:5D:AF:00:C9:A1:CD:9F:CA:03:79:D2:98
            X509v3 Authority Key Identifier:
                keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:39:85:83:10:ff:c8:43:d0:9a:ed:3d:72:73:a1:60:88:ce:
         76:0c:8a:09:36:ec:ad:c8:92:60:c5:d5:29:13:0c:34:96:70:
         c6:4b:0b:4a:ef:10:5c:21:d6:d1:8f:bb:ba:15:3d:f9:97:88:
         d1:d3:89:1b:b6:85:d3:e8:7c:d0:51:7f:64:e3:c2:1f:83:02:
         04:8d:fd:da:95:8a:ca:f9:85:2e:07:44:e1:cb:f5:b1:f0:19:
         c5:44:88:a6:99:cd:0f:79:72:5c:01:47:fb:2d:d1:71:6f:7a:
         79:ec:dd:26:eb:2f:16:fe:d6:2b:8c:fc:72:15:7d:d0:ad:0c:
         f2:cd:f4:6c:e2:77:3f:11:c9:5f:f7:03:aa:0a:3c:fe:82:be:
         18:bc:05:6f:96:50:d4:47:2a:75:af:d2:1c:23:8e:7c:67:b4:
         2c:14:21:14:e3:d1:6f:8d:e4:a2:c0:20:08:ae:db:4f:5f:66:
         b4:0b:b0:e6:fe:68:31:98:eb:ef:c2:f0:ae:12:df:e4:92:c0:
         0c:93:b7:2a:ca:cd:95:d1:a2:0a:55:13:6d:33:be:6d:3c:4b:
         33:0d:f4:5e:b2:7b:e3:67:99:25:cf:46:77:b0:3a:dc:a2:0a:
         02:2a:53:92:ad:cb:fe:55:ae:5f:a3:be:a0:60:77:85:99:2f:
         6e:dc:41:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:35 2024 by rpki-client on console-ams.rpki-client.org