Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
File:                     LLYWECl31MkLI_OvA7iR6JuAXMM.mft (raw, json)
Hash identifier:          /w29tB9UnQ1udT95Y2S6ntbRLD28BIE27l4K7nYqnoM=
Subject key identifier:   26:26:F7:F9:48:A4:60:AB:C2:20:EA:8D:39:61:2F:CA:EF:EA:D9:30
Authority key identifier: 2C:B6:16:10:29:77:D4:C9:0B:23:F3:AF:03:B8:91:E8:9B:80:5C:C3
Certificate issuer:       /CN=A91F9ADA/serialNumber=2CB616102977D4C90B23F3AF03B891E89B805CC3
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
Manifest number:          0297
Signing time:             Sat 23 Nov 2024 01:06:39 +0000
Manifest this update:     Sat 23 Nov 2024 01:06:39 +0000
Manifest next update:     Sat 30 Nov 2024 01:06:39 +0000
Files and hashes:         1: LLYWECl31MkLI_OvA7iR6JuAXMM.crl (hash: 14eEfcUJz/WfddGCzwiej5oVcS5dkaVuzEqv7PNRcqQ=)
                          2: A6389578DAD111ECA6DEA174C4F9AE02.roa (hash: 0aHQ/W/LdgnWiw5GELB7uzgXtwyzmWGhbPD/OciLfY0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.crl
                          rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9ADA/serialNumber=2CB616102977D4C90B23F3AF03B891E89B805CC3
        Validity
            Not Before: Nov 23 01:06:39 2024 GMT
            Not After : Nov 30 01:06:39 2024 GMT
        Subject: CN=67412a9f-b9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:28:09:c7:6b:d9:8e:1c:ac:93:9a:84:2d:
                    9d:4b:7b:1e:d2:4e:76:2a:98:1f:cd:f9:d1:bb:66:
                    62:7f:ac:80:f2:d6:07:3e:c7:e4:38:09:42:ee:f4:
                    be:35:6a:1f:16:04:e5:c1:d6:0e:fe:a0:aa:78:ae:
                    81:16:d1:66:02:4e:7f:ee:48:b5:7a:9f:c2:e0:f5:
                    83:91:e7:d1:45:c0:fe:97:0a:3e:91:8d:44:d0:69:
                    67:bc:45:04:78:3f:d8:58:48:5c:5b:3e:b2:ce:f8:
                    3c:46:a4:18:dd:1a:1c:09:ba:7c:a2:73:b6:6b:e8:
                    85:d1:a0:e1:3e:5c:b5:92:0a:f1:80:5a:39:e0:93:
                    79:f9:81:98:8f:b7:b9:3e:c3:b5:56:96:29:8f:65:
                    23:5c:4d:88:98:30:8f:7a:3b:8b:88:7f:93:8a:b9:
                    f0:45:fe:0e:c9:a1:e2:ac:d0:df:d4:9a:8b:52:71:
                    c1:ff:04:6a:fb:62:76:00:8b:c0:d5:aa:ea:3c:1d:
                    75:fd:71:cd:5b:b1:6c:e5:2f:91:7a:fe:e3:cf:32:
                    55:1a:81:7c:e3:41:b2:2f:18:08:a6:b3:ba:5c:93:
                    2d:09:08:77:c3:50:75:24:8e:e0:6a:db:2d:12:cc:
                    6f:95:ca:62:18:45:d0:bc:88:e4:98:f4:93:3c:63:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:26:F7:F9:48:A4:60:AB:C2:20:EA:8D:39:61:2F:CA:EF:EA:D9:30
            X509v3 Authority Key Identifier:
                keyid:2C:B6:16:10:29:77:D4:C9:0B:23:F3:AF:03:B8:91:E8:9B:80:5C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:47:e0:48:3d:37:cc:70:b8:42:1a:d4:95:41:e0:a5:a9:6e:
         f5:92:1f:b0:d0:03:9e:3a:57:50:dd:e8:51:51:f2:36:a2:f1:
         e5:6b:8d:89:ca:04:11:a3:a9:41:ce:f4:f7:87:2d:ff:ad:0a:
         e1:57:4c:8c:f5:d3:e0:5b:9d:73:84:7a:02:e3:38:20:76:61:
         3b:47:9c:e2:b0:0d:c4:65:fe:ad:19:b7:61:c8:3e:2c:66:5b:
         06:02:1d:0c:71:3c:db:eb:f5:ff:02:c9:3f:41:fc:c7:31:b5:
         45:1d:33:20:74:83:90:1f:f8:00:47:c1:97:c7:be:5b:f0:0e:
         ed:2b:2b:0d:9b:a6:b7:d4:c1:6a:62:06:3c:75:c4:4b:a9:e1:
         f7:45:e4:8f:79:54:7d:03:69:50:52:83:93:1c:b7:e4:2d:27:
         59:c1:d9:d0:a1:cc:fc:8e:9f:df:b4:15:4e:f1:ad:97:be:fb:
         68:3f:06:ea:28:b3:60:bf:17:ee:ce:4e:f8:ea:ae:82:80:03:
         55:3c:e6:a5:42:91:d8:e6:4d:ef:e0:42:68:a6:8a:87:69:6c:
         c0:54:ed:26:16:99:fa:c0:fd:aa:37:81:20:0c:e1:9f:d7:72:
         7c:7e:da:de:05:cb:a8:12:07:f7:ee:88:4d:22:3b:c9:fd:3d:
         2b:f5:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:59 2024 by rpki-client on console-ams.rpki-client.org