Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
File:                     YYQdHtq_n_D2AYxhEBevcZYnok0.mft (raw, json)
Hash identifier:          ce8h+HGsWKS0AAOibLZPM9uoG+TsPW18lGtGjfJVcHc=
Subject key identifier:   CA:19:96:B8:8C:17:6E:41:89:2D:3B:DF:01:91:13:F7:84:86:7F:A0
Authority key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
Certificate issuer:       /CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Certificate serial:       04C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
Manifest number:          049C
Signing time:             Wed 20 Nov 2024 23:39:30 +0000
Manifest this update:     Wed 20 Nov 2024 23:39:30 +0000
Manifest next update:     Wed 27 Nov 2024 23:39:30 +0000
Files and hashes:         1: YYQdHtq_n_D2AYxhEBevcZYnok0.crl (hash: 1muI+UeCBWie5129vTbo6sqwfQHdD4UQPO6ryaYYoTg=)
                          2: CBCD14C8471B11EEABCACF68C4F9AE02.roa (hash: UQXQ0zih1R4yEWTzxa6D1G/eVXXNcEV+g1pp2duHg7A=)
                          3: CF9E64BED65711EE8623B920C4F9AE02.roa (hash: KFSR8nqG2sOGDYAgAFeqv4yoVxNtWdp8vNs36B/HOmY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl
                          rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
        Validity
            Not Before: Nov 20 23:39:30 2024 GMT
            Not After : Nov 27 23:39:30 2024 GMT
        Subject: CN=673e7332-c8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:d9:b5:81:0f:09:ea:69:7f:f6:e8:b8:9a:
                    48:47:4d:22:d8:00:d7:f4:09:76:bf:88:95:c5:0e:
                    1c:8a:57:e1:d5:a5:9e:a4:82:57:d2:c4:78:7a:7b:
                    4e:1c:10:58:35:61:78:8b:74:86:1d:88:29:44:fb:
                    36:d6:2b:a6:3a:15:00:79:45:c5:38:1e:db:3b:79:
                    51:2e:b2:bc:1d:cb:8d:e5:f6:2b:f7:40:a4:3e:92:
                    2c:d8:7f:04:ce:d8:6a:5c:37:67:9f:52:e8:6b:74:
                    1b:08:7a:ea:b5:45:e2:ed:65:b3:50:ea:84:cc:c4:
                    41:9c:5f:df:38:71:13:6a:03:79:15:11:11:ab:43:
                    fa:d4:85:3b:09:d8:91:57:24:a7:71:43:21:58:31:
                    61:5f:32:3c:29:86:7c:55:ff:ff:67:95:bb:b6:89:
                    32:a8:91:d3:2f:84:c1:a8:f1:72:4c:e6:86:89:fa:
                    5b:ef:d1:53:df:de:f2:70:fb:83:84:b8:ff:09:8b:
                    a6:ef:c1:ba:42:f4:36:eb:18:d1:d3:79:4c:04:7f:
                    30:c6:c1:8b:7f:a5:8d:7d:ee:b7:71:54:c9:1f:02:
                    f0:44:04:2e:6d:6b:bb:cf:59:a5:68:e4:ba:2d:7c:
                    26:58:bb:6a:51:60:5e:05:d1:67:81:01:9e:8a:f0:
                    6d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:19:96:B8:8C:17:6E:41:89:2D:3B:DF:01:91:13:F7:84:86:7F:A0
            X509v3 Authority Key Identifier:
                keyid:61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:fd:a6:fc:f3:2e:09:2f:91:1e:4a:76:8f:14:a4:ab:24:07:
         c3:d3:0d:75:29:35:9c:a0:4d:73:9a:3b:79:4c:a2:a7:a0:ff:
         44:5a:86:9d:26:71:b5:a6:3d:51:01:7d:b5:e5:29:26:b6:b4:
         04:e5:ed:c3:c1:bb:03:f9:0f:69:17:ac:80:b5:5b:62:89:3a:
         c9:7f:b3:b6:2a:31:89:52:b2:8a:7a:ff:43:7b:54:b8:77:ab:
         37:12:70:17:bf:16:41:8d:39:51:67:06:09:ab:82:bc:55:55:
         11:8f:25:f9:c7:16:98:4c:71:97:ad:27:86:7e:1c:4e:2d:ca:
         ff:3a:01:35:a9:d2:cf:ba:bd:67:4b:fc:30:4a:5c:4a:75:09:
         df:df:84:12:0c:bf:36:15:0e:60:5f:4d:05:7c:a4:0a:b7:f2:
         26:e5:d0:d3:9a:23:21:77:65:ef:2c:50:50:e5:d4:6d:2a:ec:
         a4:60:5f:30:80:70:d8:a5:69:47:57:aa:5d:c9:a1:f1:77:0e:
         8e:1d:d7:5e:06:b8:7a:e3:8d:96:b6:5e:b5:1b:96:23:8d:fa:
         7e:15:00:3c:b1:4e:4d:3e:24:fe:ed:b8:e6:c4:5c:04:e7:89:
         7a:c5:af:ab:00:06:d3:20:aa:3c:2c:ac:56:0d:ab:c7:ad:83:
         f2:39:58:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:18 2024 by rpki-client on console-fra.rpki-client.org