Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
File:                     5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft (raw, json)
Hash identifier:          ZqF83VnA8Thnw6ulb8zcoY5jf7lBDLa1Ckeh2tnccf8=
Subject key identifier:   4B:8C:CD:ED:69:E9:73:C0:1E:D8:45:2B:42:E7:19:BC:8F:D7:D8:4F
Authority key identifier: E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46
Certificate issuer:       /CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246
Certificate serial:       0334
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
Manifest number:          0330
Signing time:             Sat 23 Nov 2024 00:40:55 +0000
Manifest this update:     Sat 23 Nov 2024 00:40:55 +0000
Manifest next update:     Sat 30 Nov 2024 00:40:55 +0000
Files and hashes:         1: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl (hash: M3jEcU2eR03x1T3aU24UW1OieOmF9v+G2plKzBUJLVM=)
                          2: 6664BEB29F8611ECBE806D30C4F9AE02.roa (hash: 3Zz0SoScV6fPNZfJ9ERkFkDBxGo2mzRnK0TlcOdgOTI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl
                          rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246
        Validity
            Not Before: Nov 23 00:40:55 2024 GMT
            Not After : Nov 30 00:40:55 2024 GMT
        Subject: CN=67412497-f755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:72:c0:83:66:f6:df:3e:b5:f5:79:00:2f:9e:
                    34:29:87:06:66:fb:e5:1f:43:5e:8f:e9:50:17:4a:
                    37:41:50:a2:e7:9f:ea:03:d5:32:f9:d2:1b:95:57:
                    13:ad:75:06:7b:d3:b7:14:94:cf:fa:61:de:9a:a6:
                    d4:43:17:fa:66:15:0e:99:8d:b6:13:2b:e1:f6:5f:
                    f8:46:99:62:2d:9a:46:5b:5a:7f:eb:b9:7e:55:95:
                    38:0a:e1:5e:45:1a:d2:9d:18:81:ed:f3:47:ba:d6:
                    5d:cf:51:7a:87:19:85:00:a2:9d:9a:1e:26:bb:68:
                    28:61:a4:c9:b7:a2:22:f5:a0:8d:35:47:36:10:16:
                    64:bd:27:37:fb:bf:28:5e:51:6f:4b:36:c6:f6:ce:
                    6d:24:f5:c3:5f:c6:be:85:86:57:ff:5f:cd:33:95:
                    e7:3b:6e:47:76:cc:20:62:b3:75:c3:b2:92:c1:ba:
                    e1:26:0e:0f:56:30:39:55:be:f9:a7:e5:10:bf:25:
                    9a:68:20:8c:b1:22:23:ce:36:70:29:57:60:cc:ab:
                    87:ed:90:c0:4c:18:a5:21:cb:42:37:3c:61:57:20:
                    c0:c4:d6:d0:6e:3d:11:ae:e2:60:ee:cc:2f:cc:9c:
                    32:42:76:a7:bf:08:4a:53:d9:f2:6f:44:27:f9:5e:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8C:CD:ED:69:E9:73:C0:1E:D8:45:2B:42:E7:19:BC:8F:D7:D8:4F
            X509v3 Authority Key Identifier:
                keyid:E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:93:6a:54:0c:cc:5b:bb:b9:12:9d:f8:e0:2b:8c:92:86:28:
         84:12:ea:08:99:74:3a:2d:fb:87:03:80:10:19:ed:b7:16:d5:
         fb:18:cf:76:d0:f8:fd:94:00:bd:34:e5:8d:23:f6:7a:2c:52:
         a9:c7:1f:0f:20:3a:bb:ab:be:36:06:23:75:15:1e:27:b3:4c:
         77:48:59:b6:d1:ae:7f:82:36:4d:36:08:5d:d1:7a:f8:80:44:
         4c:29:db:59:6c:e3:d6:f2:fa:48:50:f7:1a:e7:e5:b5:d4:a3:
         56:89:21:1c:10:c5:8a:33:54:63:d6:4b:60:f5:fe:8d:9e:7c:
         5d:4f:49:d1:6f:0d:f0:e4:ca:43:8d:92:d7:ea:40:37:95:5b:
         89:a3:56:22:41:f2:3f:dd:51:84:66:18:d6:08:01:36:86:f5:
         40:5d:aa:0b:d5:1f:35:79:f6:18:47:74:f6:9f:6a:32:4d:c8:
         10:82:15:24:a3:7c:85:0d:0e:a2:56:dc:9b:70:47:51:fb:04:
         ff:22:3c:2b:a8:27:df:fb:79:c8:e2:f8:fe:55:24:f4:28:71:
         41:da:6e:3c:0d:ec:a4:c9:5c:bc:a4:00:01:e6:cb:b0:44:36:
         6d:c9:92:81:f9:55:ce:c2:aa:81:a6:00:19:3e:47:ac:3f:19:
         9e:ed:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org