Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
File:                     W9MkppvSbt2t9RKc0Y93odgFI7Y.mft (raw, json)
Hash identifier:          a7sy/UqdaSUKtXDtmeFNxf2UV3K0tfqVlYfY/pm6WGo=
Subject key identifier:   1B:2E:06:82:88:C8:D3:F0:C0:BB:DF:B9:B0:AE:68:2A:0E:DC:BA:7F
Authority key identifier: 5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6
Certificate issuer:       /CN=A91B0380/serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
Manifest number:          11
Signing time:             Wed 23 Oct 2024 06:43:19 +0000
Manifest this update:     Wed 23 Oct 2024 06:43:18 +0000
Manifest next update:     Wed 30 Oct 2024 06:43:18 +0000
Files and hashes:         1: W9MkppvSbt2t9RKc0Y93odgFI7Y.crl (hash: Hc3MFrVuRJwZXQif5NrDRloD2TdNPVbNhsfD6yptDho=)
                          2: 09FB57587C7411EFB8CF8A27C4F9AE02.roa (hash: EfqdiAfFoa0ZonYMj3ssTP4hOkGO4+MLqEbn+7K2Sak=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 05:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380/serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
        Validity
            Not Before: Oct 23 06:43:18 2024 GMT
            Not After : Oct 30 06:43:18 2024 GMT
        Subject: CN=67189b06-6259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:07:7f:53:2a:6d:ab:44:0e:3e:2b:12:c0:
                    c8:40:6e:06:91:ef:60:9a:3a:f3:c6:a3:40:4b:62:
                    28:0e:f4:01:55:74:ed:47:81:1e:29:97:f8:91:03:
                    40:7d:51:3b:68:dd:6a:8c:a9:68:97:48:89:d8:50:
                    32:4e:b5:1c:88:ba:c4:21:2b:9a:01:69:48:ba:2d:
                    df:4b:e5:81:33:52:c1:f3:44:c5:6c:ff:03:f2:c0:
                    c5:1e:c0:86:93:a9:ba:02:7a:06:21:90:2d:99:21:
                    ac:76:cc:7a:b1:10:70:0b:80:d9:52:e7:da:b4:be:
                    56:38:db:8a:45:cd:38:9f:70:a0:89:06:71:48:30:
                    69:26:9d:a6:ee:23:64:bc:73:9a:d0:d3:25:75:7c:
                    27:18:a6:00:bc:1f:20:67:94:9c:01:ee:27:eb:91:
                    e7:b8:d0:3e:0d:e1:d5:5b:b6:b4:17:cd:a1:e9:c4:
                    13:c1:df:fc:02:9b:38:9a:0c:ee:7d:d5:ad:8b:3d:
                    e2:c6:c5:61:70:69:c8:8f:0a:c1:67:6e:0a:5b:79:
                    9f:1b:6e:d2:fe:13:f2:82:6b:cc:05:5a:23:70:3e:
                    3e:7c:f4:e5:62:f0:5d:87:9e:56:d9:76:eb:0d:e5:
                    8b:8b:d9:47:80:97:8d:d2:d7:c9:c4:3b:85:26:ff:
                    3e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2E:06:82:88:C8:D3:F0:C0:BB:DF:B9:B0:AE:68:2A:0E:DC:BA:7F
            X509v3 Authority Key Identifier:
                keyid:5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:36:74:8a:39:6a:f5:f1:ca:04:8a:72:e0:96:36:e9:86:14:
         35:7c:77:b3:ee:4b:41:ac:1e:75:04:dd:d8:57:c9:34:b9:3d:
         b8:75:ff:d1:58:d0:97:15:60:09:09:bf:c6:90:71:e8:f1:ec:
         c7:d5:e1:df:0f:e9:25:d6:42:ee:e0:fb:fe:97:e7:de:58:4b:
         f4:84:09:10:65:e7:42:a3:90:03:ee:89:e7:a6:ba:83:51:5b:
         68:7e:b1:58:59:47:64:9f:fa:f9:9a:03:ca:03:cf:cc:fc:ab:
         a9:23:30:e2:4f:d9:21:f3:e1:c7:d9:5b:7b:76:60:d8:0b:2a:
         0e:f7:c4:7f:75:fe:79:48:52:64:3c:63:3f:4c:4c:b9:12:cd:
         0c:d3:3b:1d:96:69:a1:11:6f:00:ae:3a:03:66:8d:d5:f2:9b:
         0d:37:97:95:ee:d2:bf:22:25:d4:7a:0b:eb:a2:ad:c3:33:e2:
         0e:3d:60:9d:58:e5:29:60:06:34:e1:a3:ba:33:2f:0a:e2:80:
         82:e5:a5:75:90:11:75:98:97:95:51:99:25:f3:17:b0:9a:45:
         4d:69:ec:7d:b2:87:71:79:97:5a:8e:17:fb:e6:56:1c:02:f2:
         34:f8:0d:a3:59:76:bf:24:47:35:d2:e3:4a:f3:ca:8a:24:57:
         d2:a6:97:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org