Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
File:                     YptQlj68agIuJ67LYTQg5A5020o.mft (raw, json)
Hash identifier:          l9mqHpgIhkbm3q5MUxLHvVkDzVl16luXvkcP8NE7KqE=
Subject key identifier:   BC:87:A3:5C:97:EA:40:62:67:58:47:D8:25:3D:E1:E5:32:53:B2:C9
Authority key identifier: 62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A
Certificate issuer:       /CN=A911392E/serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
Manifest number:          3F
Signing time:             Sat 23 Nov 2024 05:25:34 +0000
Manifest this update:     Sat 23 Nov 2024 05:25:33 +0000
Manifest next update:     Sat 30 Nov 2024 05:25:33 +0000
Files and hashes:         1: YptQlj68agIuJ67LYTQg5A5020o.crl (hash: qpaPSyRYDLbYz65B6Zv0yyJgTaTHCVsU1KxCAaxJKSg=)
                          2: 8E9B074050E311EF8624AC36C4F9AE02.roa (hash: OMwuM+GLC4j4NcdExvOXIOxilMsEBWQawa7SmPYWVzY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl
                          rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911392E/serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
        Validity
            Not Before: Nov 23 05:25:33 2024 GMT
            Not After : Nov 30 05:25:33 2024 GMT
        Subject: CN=6741674d-05dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:d4:0f:d7:88:b6:62:ac:62:9f:e6:3c:01:
                    58:bb:f8:3f:ed:01:ff:dc:28:b7:04:2e:12:55:e7:
                    0b:c4:21:cc:4b:46:99:27:36:1c:a3:75:f5:33:0c:
                    35:cd:4d:14:77:08:a2:d3:4e:60:2a:bd:f8:82:6f:
                    b7:fb:20:cf:b4:e6:74:9e:c2:1d:44:55:d8:a0:49:
                    1d:1c:66:1d:d1:64:d3:ec:d5:d5:58:dd:dc:6a:2c:
                    ee:48:98:64:3f:47:ff:41:5f:03:68:be:4d:86:1f:
                    da:de:1e:ee:37:d5:1a:e1:4e:0b:7e:81:74:8c:81:
                    22:0a:ab:61:02:58:12:63:0b:f0:56:c4:8a:83:c8:
                    4c:ec:23:5a:8b:85:47:d9:b2:2e:38:73:a0:f5:6d:
                    fb:ff:c4:7a:81:5d:98:b4:42:c7:cf:50:55:c7:83:
                    f7:b0:be:a6:1d:3b:04:da:f5:a1:05:05:fc:59:84:
                    cf:b6:dc:a2:1e:77:d8:e3:26:1c:6c:fb:02:9e:4d:
                    d1:74:ff:38:0b:98:fb:04:6c:a4:0e:20:7f:79:0a:
                    ee:66:8e:09:69:38:83:f8:38:0e:39:85:9b:1e:6a:
                    16:f6:63:b7:9f:fb:b7:6d:59:0d:f0:29:f8:a2:01:
                    7f:c7:59:51:dc:69:03:11:ce:60:6c:1c:e1:cb:42:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:87:A3:5C:97:EA:40:62:67:58:47:D8:25:3D:E1:E5:32:53:B2:C9
            X509v3 Authority Key Identifier:
                keyid:62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:89:10:36:16:03:e7:a6:48:d2:3c:f7:d6:b5:59:b4:e7:bf:
         80:12:b4:3d:7a:d8:7d:e0:1b:7b:99:99:8a:73:5a:ee:68:33:
         c5:34:58:4f:c7:79:05:f8:22:68:a4:e1:56:15:de:3a:1d:b1:
         95:57:fc:30:97:ed:17:2c:a4:99:57:9b:ac:b5:58:87:c1:d6:
         fd:af:71:3c:9e:20:f2:9c:d2:62:29:0a:41:0c:39:28:f3:f8:
         88:0e:cd:ce:5f:d5:8f:fd:97:c2:61:72:43:aa:5a:25:43:bf:
         39:e4:f9:45:02:c3:a3:09:fe:30:17:7f:cb:9a:1a:e3:d3:87:
         a7:83:46:ee:98:18:d2:a1:2c:8a:df:0a:39:ec:95:36:5d:d7:
         3f:31:6c:fc:11:ea:26:23:54:12:6e:a0:b5:e7:db:bf:a0:78:
         b6:99:50:69:a7:e2:93:91:d2:80:fb:0f:5c:b2:a3:7c:11:e1:
         7c:22:21:20:b9:20:25:5f:d6:b4:3f:e6:06:89:99:bd:94:14:
         91:18:aa:55:36:7e:29:56:3a:22:db:ed:e7:24:c9:2d:2f:68:
         35:cb:60:4a:54:e6:85:bf:c8:53:98:4d:15:fc:89:f3:06:c4:
         68:db:1e:50:7d:a9:00:c9:10:60:28:bc:a2:d8:e1:a7:a6:07:
         d1:db:32:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org