Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          W6ni+SPM4EuMPkxdCC4UUFVM3Eo9AEsdXEEBZBYHE5w=
Subject key identifier:   1D:26:21:3F:6C:E7:28:05:F5:2A:22:BA:9A:28:6C:92:91:AD:FA:6D
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       0882
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          0861
Signing time:             Fri 22 Nov 2024 20:28:51 +0000
Manifest this update:     Fri 22 Nov 2024 20:28:50 +0000
Manifest next update:     Fri 29 Nov 2024 20:28:50 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: 52PdRHRgzQjG9iaJbk3/kQG463OTIDQFd/dE93LH7VI=)
                          2: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: TccZk/TGvx3r9QdnASoZVSxv2kMWJg57Q5cy6O+RFSA=)
                          3: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: fcDSO/sb2ishtHrFu2bzf2l9xwmLRSMg0lfcyJWjJ+k=)
                          4: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: ty5BYEXKZV5AWkkmYV4pnoWKf56lpR/zLBDndr/xc/8=)
                          5: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: lUm2TNPxrCXgL1T7LIO3Y79aFpYIYcK/d2SLX4eq438=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2178 (0x882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Nov 22 20:28:50 2024 GMT
            Not After : Nov 29 20:28:50 2024 GMT
        Subject: CN=6740e982-ad06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:49:52:87:d5:94:77:dc:1f:4f:16:3b:be:
                    84:03:44:7a:eb:5e:2f:36:54:7f:e7:bb:71:ee:e7:
                    e6:32:b4:09:89:fa:2a:68:29:40:91:62:d1:00:f2:
                    a4:69:60:59:a3:2a:3b:41:01:66:2a:ed:56:bf:82:
                    5d:3e:c1:2b:7a:17:6e:44:f3:ba:9a:d0:23:78:73:
                    1e:85:3d:27:27:2a:0d:5f:12:99:29:78:99:d7:19:
                    50:25:2d:7f:ac:b8:39:db:5d:25:32:32:e6:3d:ed:
                    e0:e9:74:82:37:b5:39:86:81:ca:f7:ac:3b:b1:2f:
                    1b:70:49:c4:db:83:35:4f:43:f6:bc:a2:34:b8:1d:
                    3b:b1:58:ac:4b:87:f4:49:89:ab:3f:8d:b7:41:b6:
                    a3:e2:e8:67:eb:92:6e:a8:0e:68:2a:4f:68:07:f4:
                    3d:88:71:1b:8b:37:e5:91:88:d9:86:98:85:19:dc:
                    29:36:ef:c9:71:07:8e:cc:91:6f:b3:df:08:de:59:
                    e8:dc:7b:f0:bd:63:59:c5:9d:cd:93:85:bb:05:a7:
                    92:2f:5b:66:95:c0:2f:a4:59:2e:50:c0:1a:1e:fa:
                    a9:9e:62:f2:22:37:c3:a6:f1:d5:fd:9d:38:a4:d2:
                    16:27:c0:1e:f3:33:92:11:ab:44:3e:95:14:87:2a:
                    0c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:26:21:3F:6C:E7:28:05:F5:2A:22:BA:9A:28:6C:92:91:AD:FA:6D
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1d:f5:3d:5f:c1:3d:c7:67:0f:ed:b8:53:78:fb:46:4c:2c:
         11:19:b5:c3:fc:cd:13:17:66:c5:db:30:f3:86:4a:d3:d1:13:
         e4:12:d7:85:21:a8:76:62:55:84:91:d7:45:58:57:ae:19:f3:
         1a:9e:b4:28:c3:83:fd:65:99:8d:19:ba:24:2c:b9:a4:44:74:
         3f:07:90:6b:de:6b:f4:b3:eb:5f:0f:df:d8:5b:89:73:6a:37:
         f2:0b:4a:21:ca:30:a3:ba:20:14:62:0c:aa:40:8c:6f:8d:ad:
         a9:9e:d1:16:54:d8:7d:a8:fb:96:c7:60:20:d0:85:76:22:c2:
         73:dd:90:54:80:02:73:7d:c0:30:74:05:54:c2:4e:ff:9b:a4:
         79:af:14:a4:d9:4b:46:32:ae:cc:b1:5a:74:bc:98:ee:83:59:
         5a:d4:42:d6:38:22:11:56:79:dc:b9:85:cf:87:97:a9:80:d4:
         f9:17:5f:06:cc:d3:19:9b:6d:84:9d:8c:67:b0:5f:33:b9:0d:
         ff:40:71:fb:46:81:a8:97:37:74:b3:8d:af:61:03:65:f8:32:
         10:e9:58:5a:60:0d:85:7f:f2:84:ca:8b:d8:1d:70:0c:c1:e3:
         a4:45:01:aa:cd:52:6f:84:11:02:97:08:21:5d:ee:8d:d6:cf:
         86:f5:9d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:28 2024 by rpki-client on console-ams.rpki-client.org