Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
File:                     yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json)
Hash identifier:          QKToUvzNkZFqimfiz0LpodzbN9yZL0hqGX73ON2+GsY=
Subject key identifier:   51:21:46:3D:CC:E6:23:C0:60:8A:C2:85:CD:0C:09:A3:EF:BE:2C:92
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
Manifest number:          0102
Signing time:             Sat 23 Nov 2024 03:16:51 +0000
Manifest this update:     Sat 23 Nov 2024 03:16:50 +0000
Manifest next update:     Sat 30 Nov 2024 03:16:50 +0000
Files and hashes:         1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: Iwj28+F1Wqv/dpbywWm5zS0pyywxPRPRsKDmY4brZwg=)
                          2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: nmT4orl0cbcTc9NjDNiHdTsciwQkVU+9vdaYW2GwsKo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
                          rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: Nov 23 03:16:50 2024 GMT
            Not After : Nov 30 03:16:50 2024 GMT
        Subject: CN=67414923-d73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:f9:1c:fc:3f:4d:14:5b:40:55:fe:6e:bd:
                    e2:53:e4:d9:0f:5b:28:1c:4f:18:89:eb:38:c4:20:
                    91:79:ed:a2:d1:da:ec:88:35:5d:ea:66:b9:aa:93:
                    97:5d:f6:e0:21:8a:da:c6:c0:7e:6d:35:93:37:19:
                    4e:1d:25:50:03:b6:3a:41:aa:c2:50:7f:c3:b2:0d:
                    02:6a:d9:cb:d7:ef:55:48:60:0c:dd:d7:de:e5:d6:
                    af:50:f6:a0:93:c7:da:ca:52:78:82:29:02:80:7c:
                    d3:7b:90:1d:db:d0:29:2c:ff:02:fc:4f:f2:6b:d4:
                    a9:4a:de:07:43:f4:12:52:b0:f3:26:02:11:63:c9:
                    b4:f5:50:0d:93:a3:f2:d1:65:33:05:23:ce:07:82:
                    b8:01:21:ff:91:4b:ee:06:09:8b:1c:cc:e8:a8:fd:
                    1c:ec:aa:ed:26:82:4b:18:a1:9e:38:fd:97:12:ad:
                    a1:a7:01:1d:a4:09:8b:10:d4:98:22:86:f7:9f:d4:
                    4c:e8:c3:f5:a0:2a:fe:d5:08:64:32:5d:dc:19:65:
                    98:40:63:22:37:f6:76:f4:71:15:da:db:76:8b:49:
                    bb:c9:67:da:17:88:73:fd:35:ed:c5:12:f9:fa:fd:
                    32:24:d5:d9:8e:b9:b8:7c:5b:52:cf:c7:4c:f1:1c:
                    4f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:21:46:3D:CC:E6:23:C0:60:8A:C2:85:CD:0C:09:A3:EF:BE:2C:92
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:25:d0:bb:16:06:f4:6d:01:22:79:ea:b4:92:a3:0c:f1:35:
         94:f5:5b:e8:c2:e4:f9:6c:b6:4b:13:4f:82:ef:7d:83:35:f0:
         d1:44:12:fc:ba:2d:8d:cd:42:5d:b6:66:f6:a7:d5:2b:82:1f:
         ce:77:38:5e:e6:42:ed:2e:67:75:89:3b:52:86:f3:3a:5a:0a:
         8b:9e:1c:09:96:f8:2c:8c:a2:5c:67:31:ca:6d:30:0c:f3:22:
         c5:56:e0:2a:ed:21:d5:87:e3:47:e6:bc:f0:d6:f4:71:84:e7:
         a7:86:bb:d8:7b:d7:af:e5:8a:e8:e4:e6:a4:24:4c:ee:a0:57:
         fe:08:da:72:c2:9a:50:e1:63:f5:25:2c:eb:0b:54:49:0d:9c:
         68:43:1c:63:6a:e9:d8:20:fa:03:b3:15:69:54:67:59:3d:c6:
         5d:ec:5a:20:a8:60:0b:1e:94:08:95:fe:be:52:e8:9c:70:82:
         57:e4:4d:14:4b:79:d8:aa:d3:02:af:60:f0:b2:70:3c:07:00:
         05:65:6f:d1:cd:9f:db:82:d6:2d:44:01:07:80:71:ba:52:f2:
         b9:1c:28:6f:11:07:41:96:8b:ef:ac:24:87:ba:88:e8:9a:5c:
         22:67:74:d2:b0:2f:57:c1:cb:fc:a1:25:f5:2b:9a:20:ac:2c:
         f4:78:dd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org