Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
File:                     RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft (raw, json)
Hash identifier:          Uhhst+vTz9JzAYbuB4DJC/BqM5rt4LBntlUMMdRf1xU=
Subject key identifier:   FB:F5:50:39:9A:ED:92:F3:EA:D9:72:D9:95:91:E3:F0:F1:44:1D:28
Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
Certificate issuer:       /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
Certificate serial:       04D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
Manifest number:          04C9
Signing time:             Fri 22 Nov 2024 23:23:26 +0000
Manifest this update:     Fri 22 Nov 2024 23:23:26 +0000
Manifest next update:     Fri 29 Nov 2024 23:23:26 +0000
Files and hashes:         1: RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl (hash: LMRGht3+oO8uixz/f/UYWh6KaUKyE6cGwXkmvKYfGfw=)
                          2: 0006ED8263DD11EC9A50031BC4F9AE02.roa (hash: wRribXkCp4s0JF1oTM02hSLF0pchc7JmKUBHKJxUnUY=)
                          3: D249CE5EFE8911EBA7BEB564C4F9AE02.roa (hash: Kl/jYxUXqCil/0G6LuLn2peWneSNh/bHX1vc6KhRG0E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1234 (0x4d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
        Validity
            Not Before: Nov 22 23:23:26 2024 GMT
            Not After : Nov 29 23:23:26 2024 GMT
        Subject: CN=6741126e-a3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:c5:4e:61:40:75:1d:e0:a7:57:ec:67:03:
                    3b:a4:06:da:f5:66:1e:84:d0:6b:18:51:a8:f9:b4:
                    99:66:bc:82:19:98:f6:90:a4:da:12:37:56:78:23:
                    9e:7b:b4:32:63:11:c4:6f:98:7c:71:fe:f3:fb:95:
                    83:6c:b4:1e:87:fa:59:dd:35:74:33:17:a5:8c:a6:
                    ea:53:e2:e0:83:a9:74:60:50:89:ea:4b:d1:ae:ea:
                    4c:79:85:50:bc:fc:7e:bc:6c:f7:6f:4b:f5:59:3b:
                    9e:cb:2b:dd:93:0d:b0:74:28:fc:de:09:db:49:30:
                    81:9e:f7:e7:3d:49:d1:dd:b4:37:77:88:38:64:ef:
                    59:f0:ec:67:2f:9a:dc:a4:9f:e9:b2:f9:47:9e:58:
                    3a:89:c1:3b:3a:a9:47:27:4e:f4:56:4c:ce:c4:58:
                    93:33:2b:89:b9:ed:8a:8f:83:50:ca:67:e1:53:c5:
                    85:d0:24:43:0e:36:3e:10:3e:41:df:56:1d:34:6e:
                    2a:fc:cd:52:c3:27:20:34:37:65:b2:7a:5c:96:f9:
                    b1:f7:56:99:64:81:90:1b:62:08:19:6d:7e:51:67:
                    80:fb:34:41:51:0c:ac:cc:5f:88:91:86:c2:13:f9:
                    d0:f9:0e:e4:4f:02:1b:c4:af:10:20:db:30:2c:14:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F5:50:39:9A:ED:92:F3:EA:D9:72:D9:95:91:E3:F0:F1:44:1D:28
            X509v3 Authority Key Identifier:
                keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:17:a6:83:00:3d:55:07:c3:83:44:90:9d:a3:45:23:e1:25:
         18:ab:8f:48:f0:61:32:d6:29:e9:d3:7f:21:80:96:e0:18:36:
         ae:aa:48:8c:83:5f:dd:e6:c2:31:49:9b:ae:36:0b:eb:c5:8b:
         7b:9e:ba:3b:16:90:6f:95:da:c4:ac:65:53:3d:fc:8c:73:54:
         f9:12:a3:db:54:29:44:76:dd:7e:4e:0c:ad:bc:2f:26:31:54:
         5e:43:bd:20:df:97:b0:4e:89:c1:49:d4:e9:02:1e:e9:5e:5a:
         4f:3e:1d:b1:dc:1c:45:c3:68:21:62:40:b8:0a:74:69:7e:97:
         c9:23:62:58:f9:57:26:39:06:32:7c:7c:55:f6:dd:19:6f:6d:
         9e:0d:62:c2:d2:e9:03:72:8e:a8:fc:9e:71:4b:f0:1f:b9:39:
         80:1b:07:ae:57:89:86:8b:33:12:8d:c4:da:19:fd:a8:1c:3f:
         ba:cf:89:0b:28:67:f4:37:c3:c7:a3:2b:b3:a2:68:87:b5:e8:
         84:d6:eb:2d:c8:34:1b:15:1e:c9:07:c2:50:0d:94:b8:61:b2:
         8e:6c:52:9f:ab:47:e6:6a:98:6f:41:e3:34:4f:a5:2f:8c:6b:
         69:07:22:c1:27:7a:54:23:e7:ba:67:7a:89:15:d5:ea:a1:9b:
         e4:f1:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org