Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
File:                     WYYa7M8NRdskqH6ohHvxmZH--vY.mft (raw, json)
Hash identifier:          UNgsTm1jEd+8+zaajnnJiVI5cBq3Qq6+LY8DJUYgi5I=
Subject key identifier:   B1:4D:2D:4F:A4:B1:A2:80:A7:EC:0F:53:F0:18:FA:80:78:D0:17:E7
Authority key identifier: 59:86:1A:EC:CF:0D:45:DB:24:A8:7E:A8:84:7B:F1:99:91:FE:FA:F6
Certificate issuer:       /CN=A913A7CB/serialNumber=59861AECCF0D45DB24A87EA8847BF19991FEFAF6
Certificate serial:       08DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
Manifest number:          08D5
Signing time:             Fri 22 Nov 2024 20:11:42 +0000
Manifest this update:     Fri 22 Nov 2024 20:11:42 +0000
Manifest next update:     Fri 29 Nov 2024 20:11:42 +0000
Files and hashes:         1: WYYa7M8NRdskqH6ohHvxmZH--vY.crl (hash: 2LHgYYd9CQEzYoDK6CkWzP5WKfKnFMq4YNj8jESjW0g=)
                          2: 0D7DDD3A9D0B11EAAD024D44C4F9AE02.roa (hash: lX+JZDDq3ZYyafGSIvld6YBtL+lupg7yLEB2CMhRXcg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.crl
                          rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2267 (0x8db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7CB/serialNumber=59861AECCF0D45DB24A87EA8847BF19991FEFAF6
        Validity
            Not Before: Nov 22 20:11:42 2024 GMT
            Not After : Nov 29 20:11:42 2024 GMT
        Subject: CN=6740e57e-70d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:57:ad:6f:ab:67:c1:b2:e9:69:30:43:34:80:
                    7a:4c:bb:3a:61:bd:ec:5f:9e:ed:f3:b1:af:07:13:
                    aa:92:f7:66:2b:33:94:3b:ae:bd:d5:c8:3c:a2:ce:
                    d4:17:a6:13:90:04:87:b3:d0:ec:8a:78:11:c8:bc:
                    48:a6:e3:db:ae:41:cf:cd:30:5f:cc:f3:1c:7e:37:
                    23:b6:47:dd:7b:dd:7a:ee:7a:69:e2:58:a7:bc:03:
                    26:cb:ed:82:df:16:e4:c1:6c:30:ec:4a:20:75:3c:
                    73:0f:cf:75:5d:86:34:71:b8:c6:d6:04:63:90:33:
                    6b:80:5c:e1:3f:0e:8a:87:9d:9b:7b:d0:c8:93:f6:
                    ea:63:42:2b:80:ea:85:3b:18:79:e1:6a:74:d4:72:
                    fc:e4:35:32:d3:73:f5:18:d6:d6:45:7f:cd:d1:af:
                    9b:2d:72:e3:05:21:dd:22:c6:0c:52:6c:a3:2e:88:
                    74:94:3b:a7:9e:cb:a2:3e:80:ec:e5:ca:d8:3c:f9:
                    60:85:02:6b:81:b4:80:da:1e:5b:d9:64:45:0a:16:
                    ff:2e:0f:26:79:0b:c8:53:6d:c3:e9:b3:98:f1:b8:
                    cf:ec:73:0d:85:62:33:be:9a:bf:e8:44:ed:11:96:
                    51:aa:1a:b7:b6:05:5b:e2:39:cd:6a:e1:d4:39:dc:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4D:2D:4F:A4:B1:A2:80:A7:EC:0F:53:F0:18:FA:80:78:D0:17:E7
            X509v3 Authority Key Identifier:
                keyid:59:86:1A:EC:CF:0D:45:DB:24:A8:7E:A8:84:7B:F1:99:91:FE:FA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:04:be:ba:56:ed:10:20:95:e1:2a:cb:ff:5c:9a:68:fe:c7:
         d7:e5:ac:93:85:52:53:ae:30:b0:69:d8:b7:de:88:47:91:1e:
         6b:ca:63:98:24:d0:dd:43:07:dd:08:77:e3:e8:e0:a7:91:0f:
         7e:59:6c:e9:8a:23:02:e5:43:e6:03:ec:41:39:1e:6b:9a:17:
         68:4e:69:3c:1c:b3:91:8c:3b:2f:58:0b:c4:a2:d1:5f:67:34:
         99:81:c7:fd:4a:da:36:50:64:90:1b:4d:47:6b:d0:03:16:59:
         5e:1a:8a:82:3d:88:97:cc:45:a4:11:e6:9a:f5:4f:d4:95:fe:
         7d:7b:b0:33:a0:44:de:ab:a0:5e:be:f4:3a:0a:88:f8:b3:6b:
         b0:3b:4c:c8:7a:c1:93:28:f4:b6:2c:fc:8a:4c:c2:18:60:c2:
         9d:dd:e0:4f:7a:ee:27:f2:f5:c4:e0:9d:f3:6e:02:4b:de:5d:
         d8:30:2d:8d:d8:2d:70:82:79:0f:af:56:6d:d1:8e:e0:c3:0c:
         a5:08:c9:2e:df:39:8c:00:6a:a3:89:f7:f6:9d:ab:a5:c6:3c:
         25:12:8c:0e:f4:6b:10:62:56:fb:c4:22:64:8f:dd:09:23:ae:
         45:0d:46:e8:ad:3f:95:a3:30:d7:5f:80:ad:51:3c:19:ae:bb:
         fe:ff:3c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org