Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
File:                     pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json)
Hash identifier:          JgVUXxETkq0SW5pQswypgLHwWF+EsK91Y+CzChwD9kE=
Subject key identifier:   BB:78:32:5E:FA:F7:83:29:CD:C1:17:F2:7B:A3:3B:5D:54:9B:9A:55
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Certificate issuer:       /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial:       0D1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
Manifest number:          0CF5
Signing time:             Fri 22 Nov 2024 18:02:40 +0000
Manifest this update:     Fri 22 Nov 2024 18:02:39 +0000
Manifest next update:     Fri 29 Nov 2024 18:02:39 +0000
Files and hashes:         1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: 3Zb/DCSmsXwww+9eZFS8k/rydWPG7Kdsu8VjkIN7tx4=)
                          2: 8B7535762B3711EFB204951FC4F9AE02.roa (hash: nZZH1TkhhBhJLj/9m0btmE/wmixe74oHGPq+NZpAiD0=)
                          3: 3971266E4A4A11EE9424B146C4F9AE02.roa (hash: MlmgVIO/d4DiH2A4MDbsrJXD1BIjrXh5EpB8PgHUvGE=)
                          4: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: MMURfJSKmXIALtdxYffDlMp75DQKdDxlaB+1HF062RY=)
                          5: 3FE1B696271011EFA1B8D00EC4F9AE02.roa (hash: 8CP371nOHvu9dYxHG2ApZR9uMe/lywhobBs7Iao4wCY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
                          rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3355 (0xd1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
        Validity
            Not Before: Nov 22 18:02:39 2024 GMT
            Not After : Nov 29 18:02:39 2024 GMT
        Subject: CN=6740c73f-c9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:06:76:1a:8e:ec:42:dd:80:61:88:d8:12:
                    1f:c5:4a:ce:16:38:c8:a5:54:08:c0:b6:66:3c:8f:
                    e8:7c:d9:2b:ef:db:07:b3:16:6a:34:e0:f2:c3:0b:
                    c5:62:2b:29:2e:67:a2:8a:54:53:f8:e2:78:2e:2e:
                    67:12:65:e8:fa:09:10:09:c5:62:45:5b:7a:e8:6f:
                    d7:73:d0:90:9d:67:42:65:8d:23:50:5f:be:8b:70:
                    82:f8:b8:3a:ef:1f:05:4e:fe:0c:6e:e9:f8:e7:bd:
                    bd:a5:a9:42:4d:60:d9:b1:06:28:2e:88:08:79:68:
                    cc:42:da:ed:7b:73:f9:6f:0e:a7:1f:cf:46:68:ea:
                    d9:ca:4a:8b:50:a5:1e:9f:6b:19:97:8d:77:16:9f:
                    6b:29:7d:ca:60:0e:19:ef:10:e3:57:78:8a:ce:4e:
                    c5:96:7c:2a:94:76:27:60:69:fb:d6:99:1d:f3:db:
                    6f:71:9e:d3:e0:60:e3:6d:ae:8c:d2:23:96:ce:24:
                    23:fb:b6:61:3b:cf:8e:fb:40:a3:9d:42:34:ba:a8:
                    01:7e:a0:55:cd:ef:40:5e:51:f9:29:a3:d1:80:09:
                    fc:4b:41:07:a1:31:8c:32:8d:49:05:7a:87:23:36:
                    e2:8c:da:5a:56:aa:5d:ab:7f:1e:0b:db:f8:4a:fc:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:78:32:5E:FA:F7:83:29:CD:C1:17:F2:7B:A3:3B:5D:54:9B:9A:55
            X509v3 Authority Key Identifier:
                keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f2:c8:60:9d:7f:34:cc:68:b0:1d:f0:10:d2:3b:b8:95:96:
         89:f5:4f:c1:62:07:6d:b0:38:ee:e4:ab:cb:53:81:0f:43:1d:
         fa:33:63:c2:7f:b2:9d:e4:8a:c4:ea:3d:bd:37:19:6a:5b:72:
         df:3a:42:41:09:23:82:64:31:d9:42:cb:9a:e8:e4:cd:04:85:
         b4:19:84:b3:96:59:16:fb:db:a6:12:bd:7c:34:b9:b8:9d:c2:
         56:84:99:06:fc:ba:d3:19:1b:43:2a:af:06:b2:d3:dc:21:48:
         c4:6b:9e:43:8c:88:c3:ca:ec:38:18:95:87:b3:bc:cc:d6:43:
         83:e7:7a:98:03:c1:35:55:d5:bc:9b:e6:5e:5b:45:67:ad:d7:
         bf:79:e2:d5:27:bd:e6:4a:c7:79:1f:a6:c1:59:c0:89:91:d7:
         51:f9:e7:f0:6b:58:0f:51:8c:5c:3f:48:2c:83:39:c1:00:f5:
         63:0c:e0:cf:32:85:dd:ed:a3:96:f5:fa:19:a2:ce:1f:38:41:
         4b:da:fa:08:0c:7e:38:fd:85:1b:4e:f8:a2:8d:a0:41:0d:ee:
         f9:3c:78:19:9f:18:32:a9:37:90:41:6c:65:50:df:3e:74:1b:
         8e:a0:63:b6:9b:59:dd:2d:4d:aa:dc:2d:e9:b7:6f:d0:db:f9:
         44:d4:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org