Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
File:                     wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft (raw, json)
Hash identifier:          7Ly0b3rp+Ujb9ZSx3poALAvWmm/WO5orB3NKP3oxqMk=
Subject key identifier:   A4:BF:7B:B7:82:6E:9A:AB:65:19:10:14:2D:33:0F:88:23:44:19:A9
Authority key identifier: C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF
Certificate issuer:       /CN=A912FF31/serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
Certificate serial:       0722
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
Manifest number:          071C
Signing time:             Fri 22 Nov 2024 21:20:23 +0000
Manifest this update:     Fri 22 Nov 2024 21:20:22 +0000
Manifest next update:     Fri 29 Nov 2024 21:20:22 +0000
Files and hashes:         1: wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl (hash: E54Dl/qkfC9qzLnNGVaoIudYHj/xlD03/uMF6/qLY3Q=)
                          2: 575CFFB013BE11EB943B905BC4F9AE02.roa (hash: q3e1SxYN4gO4HKEGgzyUKFkCIiem6r+fmpGDRyBSWN8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl
                          rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1826 (0x722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FF31/serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
        Validity
            Not Before: Nov 22 21:20:22 2024 GMT
            Not After : Nov 29 21:20:22 2024 GMT
        Subject: CN=6740f597-a7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:a7:6d:02:05:02:86:d5:46:20:77:28:80:
                    79:57:2f:0a:ae:c7:9e:ca:40:d2:0a:63:7c:84:97:
                    37:c8:1c:f7:23:7a:77:10:9e:af:6b:6b:71:8f:f5:
                    11:8d:2b:c5:ad:00:12:b9:2a:63:8d:2d:3c:ca:3f:
                    40:7f:fd:c7:b7:b7:67:85:f4:54:2e:68:62:93:f3:
                    93:ed:d8:41:d2:9d:3b:9b:fa:5f:0b:bd:fb:e8:9f:
                    99:aa:76:bc:10:44:6d:b8:95:31:02:2d:01:89:05:
                    d0:9d:53:52:24:40:46:f5:4c:a4:cf:43:e8:bb:37:
                    27:26:40:80:75:9b:9b:88:db:ca:c0:fe:31:f7:59:
                    34:ef:3d:94:2b:07:83:8d:df:5e:28:3f:f2:dd:61:
                    1e:a7:b4:d9:a3:c5:4d:53:61:b4:7a:2d:26:82:bd:
                    b2:0f:d9:ad:d7:06:c5:11:84:38:e0:c2:38:c4:61:
                    87:84:aa:39:5d:7c:d6:e3:26:fc:46:c5:d2:82:c4:
                    9b:ff:f7:a3:45:85:84:5e:09:74:66:06:93:19:a7:
                    16:a8:46:a8:d8:97:6c:f5:74:a7:a8:b9:21:59:20:
                    ff:de:92:64:6d:45:db:0c:45:4d:cb:e5:5b:28:26:
                    41:61:bc:f0:cb:f4:59:07:2a:8b:90:46:75:5e:cf:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BF:7B:B7:82:6E:9A:AB:65:19:10:14:2D:33:0F:88:23:44:19:A9
            X509v3 Authority Key Identifier:
                keyid:C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:37:a3:4e:03:ff:9e:12:ba:7b:3c:88:01:fb:31:39:e7:1b:
         0b:45:80:35:bd:37:f3:9a:e3:cc:bc:5b:05:ce:37:08:8f:58:
         e4:4a:bb:96:6d:a2:70:83:c3:eb:4d:49:ba:68:12:df:fa:f3:
         66:04:cc:17:15:f4:1a:b9:0b:5b:4f:b8:48:6f:ac:48:13:9f:
         f2:32:c3:6a:52:25:22:33:78:91:b1:a8:9c:a5:a3:29:3e:d6:
         f6:fc:12:31:1c:e7:a6:a3:12:d9:f3:ac:36:6f:a5:2c:d1:1d:
         ce:2d:8d:06:bc:61:68:4d:4b:d8:1d:55:f3:60:5e:c3:ec:96:
         cf:14:da:19:e3:d5:ac:4a:e7:a0:d1:69:d4:2c:e6:24:7f:a1:
         1d:f2:9c:93:d2:63:3a:c1:bf:5b:c4:d8:c6:c9:7d:08:32:e7:
         8b:b2:61:d5:0c:1b:f6:9d:a6:5b:5e:94:35:5b:f5:c4:37:d8:
         0c:7d:6f:e9:a8:67:ba:a3:a5:39:5f:9e:d5:9a:ff:e2:a0:ba:
         03:4c:15:99:56:fc:b3:d5:38:ea:14:cd:b1:66:a9:51:91:14:
         a2:fc:e0:96:b7:85:de:37:05:20:b1:51:c4:23:cd:40:3d:9b:
         35:10:22:d6:61:4c:57:1c:2c:5a:fa:3f:e2:1d:41:05:cc:2d:
         71:09:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org