Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File:                     ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier:          RrG0LDm7XCqElKnctmYvZGObQyI4XL3yc4/K4PBuFxM=
Subject key identifier:   E6:F2:5D:8E:55:71:85:60:A6:46:29:E9:CA:54:63:1D:0C:ED:E9:5B
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number:          88
Signing time:             Thu 21 Nov 2024 04:50:34 +0000
Manifest this update:     Thu 21 Nov 2024 04:50:34 +0000
Manifest next update:     Thu 28 Nov 2024 04:50:34 +0000
Files and hashes:         1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: wazwrpmEgtdu2skh42GrUOnYc6OEJGX0C0EEqDnx/XM=)
                          2: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: mSOklUnaiy8SK/FfFJGwlI3WJcVIKNR78eJJYjas9Z8=)
                          3: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: Vm/sPmIab/U9OiYVa9+A5YsRVFrpJm56x8WhE16vn+E=)
                          4: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: mcClfxKa9uWF/j7dnojdzff39MRT3F+Ocj/LoLSS9jw=)
                          5: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: 2lKk6v8L+otxkXH3Z6ztUescMpEPEHQiPb/n8LYQ7iQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Nov 21 04:50:34 2024 GMT
            Not After : Nov 28 04:50:34 2024 GMT
        Subject: CN=673ebc1a-1aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:3d:7d:d3:66:ce:9b:dc:a3:61:ee:bb:87:
                    88:f0:41:8a:c9:68:2d:31:cb:a5:4f:95:b7:d9:18:
                    8e:98:65:10:ac:82:ff:95:bc:76:32:23:61:9c:17:
                    6f:32:fb:a0:1d:4e:e9:30:83:75:71:93:50:72:25:
                    18:58:bb:52:c8:02:2d:be:86:dc:3c:60:18:ff:fb:
                    27:0f:6f:43:ad:25:bc:b3:3b:41:32:48:ed:af:5a:
                    2f:6b:22:cf:a5:53:fb:85:37:3a:14:a9:9c:a2:fd:
                    e3:1e:be:df:b8:8c:1c:2c:03:16:f4:61:f5:6d:64:
                    a4:a4:eb:05:f3:dd:68:d5:69:53:63:16:e7:bf:30:
                    c5:f6:20:68:8a:ba:64:64:02:fd:ef:b8:95:13:f2:
                    1c:4a:52:8e:d6:3f:30:9c:21:7a:23:c1:59:01:95:
                    c9:62:2b:13:5e:c5:ea:b4:e1:81:b2:7f:77:96:ad:
                    8c:7b:84:5f:e8:d9:57:67:0a:e2:75:1f:ef:7a:1f:
                    9e:81:84:5c:80:c8:70:be:4c:9f:8a:7b:69:94:29:
                    fe:4c:c6:0b:c2:92:4c:31:da:13:72:94:d7:3f:9f:
                    d6:56:45:90:b0:8f:f2:29:0c:4d:01:02:81:f2:04:
                    10:21:3e:a3:68:dc:55:7c:1a:eb:ab:89:7e:f3:3f:
                    71:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F2:5D:8E:55:71:85:60:A6:46:29:E9:CA:54:63:1D:0C:ED:E9:5B
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:00:c8:1b:7f:65:01:99:7a:2a:b6:3b:85:27:c1:5f:fd:4e:
         3e:a0:e9:12:a6:20:43:be:2a:a5:74:55:3d:27:2e:2d:78:1e:
         4a:33:46:c7:4f:f6:f1:2c:2e:2e:b7:b3:05:53:7c:4e:54:f5:
         16:03:1f:0b:fd:51:6f:92:08:4c:0c:0e:f4:80:f3:8d:5f:90:
         38:0a:4b:5d:e1:79:00:bf:95:1d:65:2b:94:9b:34:84:93:74:
         46:24:c2:53:67:aa:d1:1f:a0:18:75:db:a2:8c:f2:bb:ac:8a:
         1e:47:52:8b:2b:70:b7:c0:bc:5c:eb:7e:58:92:c9:73:db:f5:
         2c:eb:e2:ab:e2:7d:1b:2e:87:21:83:4a:ec:42:40:6a:4b:92:
         ed:82:35:e9:8a:25:19:cc:d3:b2:78:02:a9:97:59:0c:e9:59:
         fe:07:25:5a:24:42:a9:81:10:1e:72:b6:78:5d:be:f8:e6:e6:
         ff:ea:4e:0d:3f:47:14:d3:60:7a:ad:fd:db:80:21:d0:a9:85:
         79:cf:23:a4:df:b8:d3:fe:b3:59:5d:8a:52:e0:3a:f8:26:5e:
         83:eb:ef:59:38:c9:de:6b:a5:ce:9f:63:60:41:b8:0b:44:84:
         a8:d9:24:d1:b2:5c:39:3a:a6:a0:cd:df:fa:01:65:a5:90:26:
         19:7a:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:47 2024 by rpki-client on console-fra.rpki-client.org