Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
File:                     1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json)
Hash identifier:          P/8UC2nc6C+ai6plIzZWw54n2mgCyYwWK89LCNKP9wI=
Subject key identifier:   CB:8E:03:E3:9B:6F:E9:01:15:95:94:AC:64:F8:FE:87:17:CD:C3:3B
Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Certificate issuer:       /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Certificate serial:       02A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
Manifest number:          029F
Signing time:             Sat 23 Nov 2024 01:05:28 +0000
Manifest this update:     Sat 23 Nov 2024 01:05:28 +0000
Manifest next update:     Sat 30 Nov 2024 01:05:28 +0000
Files and hashes:         1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: k1H1R6BlC8LF5zgQXkv2Tki/zA28klUVzP6ObtAEStI=)
                          2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: CSGiYLZ6NekAj6P19BCgjbtyPLp1eMOjuUs3W4mDezA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
                          rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
        Validity
            Not Before: Nov 23 01:05:28 2024 GMT
            Not After : Nov 30 01:05:28 2024 GMT
        Subject: CN=67412a58-2064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:27:3d:78:43:31:6f:97:f6:18:22:ec:6b:
                    99:a8:c7:ca:37:90:a3:5a:d0:a2:25:0d:b6:8d:b8:
                    80:db:08:fa:2a:3d:18:61:2e:16:40:39:38:9d:0d:
                    a4:af:a8:83:75:a4:65:12:61:61:e6:95:8d:92:5d:
                    93:e0:a2:3e:dd:8f:76:88:63:0c:f9:63:cc:1a:07:
                    12:86:38:9f:10:4e:db:bf:01:68:50:d1:8a:9c:51:
                    58:3b:c2:57:06:2d:8b:65:27:b6:16:6e:e1:01:f0:
                    4b:70:b9:2a:e9:af:1f:4a:a3:92:75:a3:8e:3b:93:
                    7a:3a:43:1f:82:14:bd:93:7f:9d:d9:62:38:ee:ee:
                    92:c9:e0:fc:7b:36:8d:0f:eb:26:14:1a:35:e9:53:
                    a3:c6:95:92:f0:70:3e:72:f9:00:9e:10:dd:cf:15:
                    c6:07:96:92:41:ba:50:f4:9c:c9:9e:7a:ea:7c:52:
                    12:5c:e7:89:94:9d:19:d9:00:e1:35:c2:9d:b1:73:
                    40:27:98:61:cb:81:de:cf:a0:9b:98:fb:70:65:4e:
                    2e:d4:39:05:02:00:a1:12:c1:b8:96:d9:d9:6a:a7:
                    26:78:5a:08:cd:cd:d2:e0:c1:37:de:12:f4:b0:3f:
                    32:ea:b5:66:68:97:20:3a:06:f3:ec:59:56:a5:7b:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8E:03:E3:9B:6F:E9:01:15:95:94:AC:64:F8:FE:87:17:CD:C3:3B
            X509v3 Authority Key Identifier:
                keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:71:3d:bf:ab:82:e4:dd:b5:a0:d5:8f:06:6b:fc:23:40:39:
         6b:af:9d:ca:a6:f0:3a:b6:90:84:79:04:da:88:e0:c9:00:46:
         86:0e:db:92:be:31:f1:1c:67:db:cb:38:eb:71:d7:59:0f:a3:
         c5:a1:38:c6:00:8d:0a:e8:0d:db:f5:66:6b:25:38:28:9b:c9:
         ce:52:82:f3:32:b3:b8:9e:7f:30:c3:8c:a3:cb:c8:a1:29:f1:
         a6:d1:91:64:6c:f4:59:63:3f:06:31:ff:70:30:fb:be:06:48:
         7f:a7:0d:09:f1:7b:a4:df:54:cb:fe:07:74:dc:64:93:69:f8:
         e9:47:77:f8:a0:11:78:cd:12:02:b0:6f:12:8c:61:7f:b0:10:
         42:4a:db:fa:8a:f9:ae:df:c7:80:75:35:f7:17:98:b4:df:a1:
         b7:ad:41:c8:f8:23:5e:f2:ff:22:91:a8:00:3e:91:4a:b1:4f:
         ed:82:4b:90:05:1d:38:63:3f:d1:cd:e4:cd:70:ca:32:2b:fc:
         d2:ee:aa:3c:23:4b:32:9b:14:e3:26:ee:6e:44:93:b2:26:ee:
         92:55:65:04:09:86:66:6f:bc:67:81:37:2c:f5:d6:63:c8:4c:
         17:41:e8:3b:e7:41:12:c5:f9:7b:b6:d4:69:81:50:f6:09:ee:
         bf:3a:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org