Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.mft
File:                     W63-0zDWXKC6s_c5AcuVMFogfcM.mft (raw, json)
Hash identifier:          ij+LJEROZ8YuSLya8CMSLwWH+3NER5hm0AZ6bD9AvEo=
Subject key identifier:   05:5D:43:3B:D4:01:9B:DB:DC:C6:0E:B5:B2:7A:17:EE:7D:D3:EC:A8
Authority key identifier: 5B:AD:FE:D3:30:D6:5C:A0:BA:B3:F7:39:01:CB:95:30:5A:20:7D:C3
Certificate issuer:       /CN=A916B95C/serialNumber=5BADFED330D65CA0BAB3F73901CB95305A207DC3
Certificate serial:       0663
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.mft
Manifest number:          065E
Signing time:             Fri 22 Nov 2024 21:57:39 +0000
Manifest this update:     Fri 22 Nov 2024 21:57:39 +0000
Manifest next update:     Fri 29 Nov 2024 21:57:39 +0000
Files and hashes:         1: W63-0zDWXKC6s_c5AcuVMFogfcM.crl (hash: PvpxBWxtswxMvQW9nj/TMrYegscbiy9OGyCSF0WIppE=)
                          2: 2428B7AE5D3A11EBA0F5C625C4F9AE02.roa (hash: uGyiffgSVa017Vx7fUECky0Rn5Nr1nPji4RP81NPr/I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.crl
                          rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1635 (0x663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95C/serialNumber=5BADFED330D65CA0BAB3F73901CB95305A207DC3
        Validity
            Not Before: Nov 22 21:57:39 2024 GMT
            Not After : Nov 29 21:57:39 2024 GMT
        Subject: CN=6740fe53-b369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ec:f8:0f:1b:a2:9c:65:a2:24:70:5d:54:1d:
                    34:c2:33:e9:56:fe:3e:b5:2d:1e:a5:08:2a:aa:58:
                    d7:22:68:7c:98:22:e3:dc:06:b3:f9:f9:c0:0e:27:
                    9c:01:58:8e:04:2e:28:d6:cd:a6:6d:8c:c8:71:04:
                    48:e8:86:9f:3c:25:3b:63:ce:1d:d8:70:dc:db:bd:
                    07:3b:da:d4:83:cf:75:e9:fc:c1:aa:3c:33:d4:5c:
                    79:76:7a:2f:f2:84:81:6e:4f:be:24:17:f0:f8:f9:
                    64:a7:a4:dc:36:33:60:c6:1e:c0:0d:3d:00:16:04:
                    a4:59:65:40:d3:77:fb:a1:eb:2c:d9:1f:e0:45:0f:
                    94:46:ea:04:99:1d:cb:3f:49:a9:06:17:50:ad:2a:
                    cb:d7:e3:92:f2:6d:00:c0:f2:35:6d:61:d7:a1:8b:
                    30:86:01:62:96:ce:42:34:4b:36:a8:7b:cb:58:b3:
                    07:20:61:fe:68:c9:36:8d:53:bd:e9:17:97:56:8f:
                    d0:6a:ae:d0:be:fb:cd:c2:28:ad:a4:5c:6f:49:b4:
                    0c:00:6c:4b:d1:a6:27:a7:2f:36:0f:79:80:07:ca:
                    86:4d:76:78:0f:09:cd:0a:83:ee:56:10:c5:03:f9:
                    86:84:6f:1b:de:3c:6f:8a:6f:d8:33:85:bc:71:50:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5D:43:3B:D4:01:9B:DB:DC:C6:0E:B5:B2:7A:17:EE:7D:D3:EC:A8
            X509v3 Authority Key Identifier:
                keyid:5B:AD:FE:D3:30:D6:5C:A0:BA:B3:F7:39:01:CB:95:30:5A:20:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:bf:2e:5b:01:2a:75:df:05:d7:de:8a:85:fe:25:72:f0:00:
         2f:57:46:de:6d:fe:9d:26:37:22:ec:b8:fe:ae:5a:65:a2:73:
         ad:0e:47:14:7b:de:b8:83:8b:b0:11:7e:0c:e0:0a:f4:d6:36:
         07:04:ad:ed:2d:d7:70:b8:40:2d:ea:ee:7b:7c:b8:e6:ff:4a:
         2f:09:bc:31:cd:89:26:08:d8:57:1c:eb:86:ff:86:c5:03:e9:
         70:58:1e:21:d7:cf:7e:15:5c:b5:2e:82:87:d8:06:49:a5:57:
         50:fe:db:ae:6b:fc:2b:df:95:40:71:64:69:a6:f4:ba:9a:78:
         3a:e0:46:8c:de:63:a5:25:ab:73:85:27:8d:e5:04:e9:6f:20:
         1d:c7:8f:f5:c0:83:e8:af:61:29:0d:e7:5e:d0:45:0a:bc:dd:
         a3:e6:3a:f3:06:cc:65:ab:1a:23:67:7d:15:e6:87:19:38:52:
         b2:e6:ab:f1:35:72:26:5d:0e:e7:fd:d2:84:df:b2:c8:e9:f9:
         ac:ab:06:f1:ac:2a:be:71:fa:17:80:a6:c6:7b:9c:1d:8d:4b:
         06:ec:f3:3b:65:5b:38:5b:71:f1:3c:db:31:f2:d6:a7:6e:74:
         d3:0e:ef:88:34:84:5f:fd:cf:98:0a:df:63:f4:70:54:53:b0:
         7f:cb:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:28 2024 by rpki-client on console-fra.rpki-client.org