Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
File:                     0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json)
Hash identifier:          ISzoooIdf8mpaA9SJkrJ+e17zeCW3GrR/8iLgIIpZYM=
Subject key identifier:   57:0A:F6:70:07:B3:F8:ED:14:8E:9C:34:48:8B:2C:F0:3D:78:5E:D8
Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
Certificate issuer:       /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
Certificate serial:       1830
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
Manifest number:          182A
Signing time:             Fri 22 Nov 2024 15:49:41 +0000
Manifest this update:     Fri 22 Nov 2024 15:49:41 +0000
Manifest next update:     Fri 29 Nov 2024 15:49:41 +0000
Files and hashes:         1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: u+wXlmgxE3C7yG3YFoeLsCbroL3IHAq+1FtVd4EJ4fE=)
                          2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: 7SxWILLdTrzJpYEt8Y/6XTCMP3sdZqZUyA4GDfqu88g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6192 (0x1830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
        Validity
            Not Before: Nov 22 15:49:41 2024 GMT
            Not After : Nov 29 15:49:41 2024 GMT
        Subject: CN=6740a815-6596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:f5:2d:1c:3d:23:1b:df:d1:15:9a:f9:1b:
                    52:47:2c:c6:1b:eb:71:b9:07:39:c7:62:77:5f:5e:
                    8a:8c:cd:34:d3:1d:73:7e:8a:fd:88:9f:9b:0c:a2:
                    d8:c7:b9:41:d7:8f:50:85:f3:53:03:d2:98:0d:83:
                    96:4c:ea:47:c2:af:c9:16:ab:97:dd:85:1d:87:9c:
                    5c:ae:bf:1a:56:53:f9:60:6d:a1:60:9a:9a:28:ee:
                    5e:40:fb:2a:b9:e6:9d:b0:8a:96:b4:15:a7:c7:b5:
                    ae:53:46:54:11:fa:65:d9:a3:b0:92:ea:30:7d:2b:
                    fb:f3:98:d7:71:cf:c9:c1:57:38:da:b3:aa:52:ad:
                    a1:71:07:42:2a:26:f4:ce:1a:bb:83:7b:9f:04:e5:
                    9d:cb:3a:01:cd:4b:ef:5b:3f:e3:d7:e9:3e:66:74:
                    7f:89:02:db:d8:43:cb:bc:c5:80:c7:72:0c:ae:70:
                    d7:ce:24:f3:75:50:93:a2:61:10:7a:88:ad:58:c9:
                    01:ed:cd:36:e3:3c:c1:b5:04:29:8b:cc:42:fe:ec:
                    d2:0f:be:90:e4:a9:4f:b0:f7:69:18:05:52:fd:52:
                    57:83:f0:d2:39:1d:a5:83:bc:3c:69:0a:8a:2b:1e:
                    07:a1:33:1d:0e:ce:28:7e:5a:b1:d1:da:52:53:e4:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0A:F6:70:07:B3:F8:ED:14:8E:9C:34:48:8B:2C:F0:3D:78:5E:D8
            X509v3 Authority Key Identifier:
                keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:80:21:9d:f5:80:6b:a7:a9:c4:be:5a:19:b7:b9:12:c0:6f:
         86:5c:54:cd:b2:b8:41:85:6d:ae:41:8d:ab:66:37:69:8f:f7:
         35:b8:db:2e:b5:61:7f:20:77:d3:9f:7e:ff:e7:f5:47:9a:de:
         a8:58:3c:0a:d6:0b:61:a5:09:02:46:5c:5b:92:a2:92:e7:97:
         16:7d:ca:c5:c4:37:b4:83:6a:c1:07:ed:68:f7:18:bd:8d:60:
         65:eb:6e:4e:21:0e:2b:df:f7:03:b8:0d:16:eb:9e:66:a1:94:
         c1:cf:78:52:ff:3f:37:92:e1:8a:d6:82:53:5e:f4:66:1b:42:
         d5:47:a7:bd:32:43:ba:7b:70:a3:c2:0a:ed:db:54:15:42:6b:
         d9:4e:18:de:dc:70:ca:fd:7b:17:19:2e:48:94:7b:b7:a6:36:
         7e:a9:d8:c4:bf:97:8e:94:99:ec:58:13:76:2c:50:9a:c3:45:
         cc:26:ba:b5:44:c4:88:3b:7f:67:2c:15:76:5d:5f:db:c4:10:
         e3:95:97:c8:3f:09:d7:0e:63:0b:c8:6c:d7:9f:8b:3f:17:a4:
         33:4d:4e:4a:fc:d6:c2:75:ec:5b:58:63:6f:cc:18:26:ac:e9:
         6b:c4:4b:78:c8:ad:b6:00:33:37:c3:69:b0:c8:59:04:16:6c:
         05:9b:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org