Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
File:                     bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json)
Hash identifier:          KK660v8la7Qv4ViNcWFMm5CmjMKKlmOXlFc2VRd16q4=
Subject key identifier:   80:29:5A:85:15:0F:E4:41:F4:C2:3C:B2:E0:35:E6:28:2E:9B:E3:60
Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91
Certificate issuer:       /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
Manifest number:          0106
Signing time:             Thu 21 Nov 2024 03:14:49 +0000
Manifest this update:     Thu 21 Nov 2024 03:14:49 +0000
Manifest next update:     Thu 28 Nov 2024 03:14:49 +0000
Files and hashes:         1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: oJvY4zbzXvBf2Z6K9h9s0vfWSeE+VTahwFd/WgVi5UU=)
                          2: 6001781C1A6411EE8DCBF20BC4F9AE02.roa (hash: ZseofxVBmk1oHOZeOfz67oZDHtFAev5piCEWlzQMVS4=)
                          3: 608D76E61A6411EE8DCBF20BC4F9AE02.roa (hash: euvqXX/ht0bd6COd/tt0UFecv29A1PLRz8kYzYfkuMo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl
                          rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
        Validity
            Not Before: Nov 21 03:14:49 2024 GMT
            Not After : Nov 28 03:14:49 2024 GMT
        Subject: CN=673ea5a9-d052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:da:13:03:3c:fa:08:96:b8:ff:8d:c3:39:05:
                    f3:84:9e:af:9b:d7:ad:92:78:eb:36:44:1d:b9:4a:
                    df:fd:75:48:3f:b1:74:68:05:0d:9a:d8:67:52:7d:
                    10:cd:28:0d:1d:c6:d3:fd:f2:1e:c5:3d:38:25:a8:
                    95:c7:96:22:a2:4e:9f:f4:6c:ef:fe:79:a8:45:4c:
                    eb:ef:25:04:f9:3d:24:3b:00:6a:79:dd:fe:0e:be:
                    c5:15:ce:99:c9:dd:e4:b4:04:ba:64:63:f1:b0:e8:
                    cd:30:17:a9:d8:97:a3:a6:b5:f4:e8:7b:63:7d:85:
                    ca:7d:dc:f8:cb:d1:87:0d:e1:66:7c:04:30:ef:96:
                    b0:da:fb:a1:57:aa:6c:ad:ce:0c:fe:97:79:8d:45:
                    b6:b9:3a:b9:77:3d:1c:93:30:90:94:79:af:ae:23:
                    b5:34:01:08:7c:59:db:b8:82:87:c4:e1:4a:2a:14:
                    c7:8b:4a:43:f2:e1:92:1f:d3:5f:15:68:40:b9:84:
                    92:3b:77:26:f3:80:f4:4d:5d:21:84:cf:2d:f2:43:
                    aa:28:a7:14:a3:1c:3f:a2:cc:c3:10:21:79:14:38:
                    ef:89:d0:54:44:44:d4:11:ab:87:29:79:ce:ad:0c:
                    f0:b6:6b:67:dc:07:f6:d9:34:75:44:3d:19:b2:30:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:29:5A:85:15:0F:E4:41:F4:C2:3C:B2:E0:35:E6:28:2E:9B:E3:60
            X509v3 Authority Key Identifier:
                keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:16:d1:90:18:d8:16:f0:49:62:13:37:cf:93:13:fc:d4:95:
         52:de:fa:9f:d2:09:fb:db:d0:6f:9d:0f:5d:13:f8:cd:03:82:
         3a:e1:c3:c0:45:83:23:2b:89:5c:87:54:f3:36:83:cd:75:95:
         35:42:f8:97:c5:ec:a4:01:ac:82:de:61:e5:22:23:ab:6a:45:
         e8:0f:7b:27:f9:dd:d6:c7:39:92:d4:02:f8:e2:7b:8a:63:0f:
         ac:3e:5e:a9:44:9e:e9:4e:09:ec:ff:42:c2:26:eb:c7:d0:dd:
         a3:12:b8:f6:8a:fc:e7:d7:4a:d4:75:da:b6:17:96:fd:0c:30:
         ad:e4:56:2b:f0:a4:cc:33:75:ef:44:0d:0b:16:ea:be:54:a3:
         33:dc:b5:ed:3c:ff:1f:66:31:be:ce:c7:0c:8f:a4:82:bc:d2:
         83:fa:2b:47:1c:a6:57:7a:56:4e:e2:86:f6:2b:ff:7c:b4:cc:
         d9:3f:78:e9:2d:28:4f:0f:63:5d:24:36:94:9e:32:be:ca:41:
         36:cb:1a:c9:fe:4d:35:0b:ab:02:5c:88:0d:79:3e:3b:e1:9b:
         e0:b4:d5:a7:d9:15:eb:6d:5d:27:a5:b8:2a:70:fb:f5:7c:f9:
         66:f5:f5:98:ab:47:9a:d5:71:28:d4:ce:cc:45:1d:1f:3b:9b:
         9b:9c:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:01 2024 by rpki-client on console-fra.rpki-client.org