Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
File:                     e9TVxajvXN_HTFmgk2RZTl75-uc.mft (raw, json)
Hash identifier:          V/PzXOSfu3YGsj0IFXmf0Fs0ruq2v89E2XSeeR+BwKA=
Subject key identifier:   6A:DA:27:15:0B:D1:A6:1D:D6:78:1A:81:45:45:F7:AC:1E:11:EC:BB
Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7
Certificate issuer:       /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
Manifest number:          0B28
Signing time:             Thu 26 Dec 2024 18:56:52 +0000
Manifest this update:     Thu 26 Dec 2024 18:56:52 +0000
Manifest next update:     Thu 02 Jan 2025 18:56:52 +0000
Files and hashes:         1: e9TVxajvXN_HTFmgk2RZTl75-uc.crl (hash: FxRFXhn8GhFibogDjDFPZ5lCPM9SnT9x9MrZs/TaYww=)
                          2: CF834404B27511EFA614D07EC4F9AE02.roa (hash: 25yQyo1UNKg5eSyiIIMMirEfRLria39lDAViqcBQ5E4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Jan 2025 18:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
        Validity
            Not Before: Dec 26 18:56:52 2024 GMT
            Not After : Jan  2 18:56:52 2025 GMT
        Subject: CN=676da6f4-2d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:39:e9:58:7f:ed:19:66:e6:fb:ac:60:40:
                    e9:23:7f:62:6f:c9:66:a6:f4:5a:96:7f:ff:f2:2a:
                    28:e3:b9:78:97:33:0b:0d:b2:c5:a3:c7:86:8e:14:
                    7e:b6:ca:13:92:8c:82:ad:86:d8:a6:95:0c:1d:72:
                    96:0a:8d:f8:80:0c:9e:e0:0a:f0:d8:42:c5:b9:6c:
                    38:95:ff:c6:68:38:83:c4:ba:b9:16:e6:02:61:2f:
                    ec:f7:7e:8d:2c:d1:7a:30:07:38:9c:b1:40:99:72:
                    24:13:d8:2d:65:2e:86:a8:e2:f2:43:4c:27:75:60:
                    0d:51:27:50:b5:81:8d:52:57:76:55:9c:4d:99:cc:
                    88:e6:3c:22:2c:9b:35:be:ab:7f:f2:c0:c5:8f:c7:
                    45:11:69:07:53:18:4a:71:69:c4:23:90:7e:16:c1:
                    e6:44:6c:a3:da:7d:8d:5e:1f:73:92:1d:4d:a5:54:
                    4b:d0:50:c8:c2:1f:50:9b:b8:7b:59:06:4f:b5:99:
                    9c:b1:96:24:b9:4f:87:24:69:bd:6a:52:be:e7:41:
                    d2:c8:4f:d7:ff:e6:2e:58:c7:8d:45:d6:ff:11:36:
                    5b:44:09:05:0e:95:a9:86:dd:4d:b4:c2:43:9f:47:
                    d1:16:57:32:e7:cb:ba:1a:6e:41:cc:a3:d0:1b:0d:
                    6b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DA:27:15:0B:D1:A6:1D:D6:78:1A:81:45:45:F7:AC:1E:11:EC:BB
            X509v3 Authority Key Identifier:
                keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a6:f2:cb:5d:aa:8a:e4:67:cd:71:81:d7:1b:bd:7d:93:62:
         f7:2d:47:42:bf:c6:a0:32:4c:82:82:60:21:f8:e6:31:00:99:
         79:74:39:35:c3:09:7a:10:d3:a0:4b:e9:7e:45:56:08:d2:b9:
         ef:b3:33:f8:a4:23:6f:bb:ff:67:f1:e5:83:e0:1f:75:c3:47:
         54:42:86:92:9b:cb:c8:d7:b2:a6:1c:a3:4f:f2:96:02:e1:9d:
         44:9a:e4:91:9f:57:37:20:df:14:f7:49:e7:ab:5f:53:d3:22:
         81:b9:f0:56:af:23:50:2c:15:aa:38:0b:6f:35:7f:9b:78:be:
         f8:57:ca:89:f9:ad:c2:58:2b:90:a3:28:a0:45:ef:89:c6:1b:
         f3:f4:16:a9:bd:5a:76:c3:5d:19:55:6c:64:dc:93:ce:41:13:
         27:b6:8b:75:a8:5a:9f:e0:00:7b:cd:1f:b2:b4:42:bb:b6:0c:
         8a:cd:84:ca:64:01:2c:1b:fa:fc:ce:a7:41:ec:40:9d:05:53:
         cc:5d:e6:ff:28:75:0c:18:78:70:a2:07:94:34:98:c1:94:29:
         52:84:35:00:6c:21:8d:4f:76:72:a8:97:ba:09:6d:7a:61:34:
         0b:f8:eb:21:e7:b4:fc:01:37:09:56:77:1f:ea:9a:36:b5:ea:
         ee:e7:31:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 22:30:59 2024 by rpki-client on console-fra.rpki-client.org