Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
File:                     EclyfKUpLOXaXXC6iCvC1kP0EIU.mft (raw, json)
Hash identifier:          ZgW7PsSP5OsSxbT23dD3nxaRJTRatR1vi3kkm9SOB/A=
Subject key identifier:   91:DC:3C:5C:41:91:A8:67:6F:DC:86:AB:96:71:17:DE:67:9A:E8:BA
Authority key identifier: 11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85
Certificate issuer:       /CN=A911849D/serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
Certificate serial:       0867
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
Manifest number:          0858
Signing time:             Wed 20 Nov 2024 20:22:46 +0000
Manifest this update:     Wed 20 Nov 2024 20:22:45 +0000
Manifest next update:     Wed 27 Nov 2024 20:22:45 +0000
Files and hashes:         1: EclyfKUpLOXaXXC6iCvC1kP0EIU.crl (hash: fLkWtav+zpXIQvDMT4wp6w5aBX84N04HgRJy1DpPG+c=)
                          2: C2D236E6B70E11EAAE6CE049C4F9AE02.roa (hash: /Mx3d0Z7c2OKLIky6yATaeUHAoc7j+jEdKfqglnvKk8=)
                          3: 3AD34AA4B66F11EAAA29FB47C4F9AE02.roa (hash: WjzW89/4SljG9UbpjM3OAjMCVBiPQFjT99+O9KpZA9g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl
                          rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911849D/serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
        Validity
            Not Before: Nov 20 20:22:45 2024 GMT
            Not After : Nov 27 20:22:45 2024 GMT
        Subject: CN=673e4516-bc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:cf:98:12:e4:2d:67:8e:80:f5:b6:aa:c6:
                    6a:17:1d:59:c6:d7:18:0e:3d:9e:f0:d7:12:e1:f0:
                    fc:13:54:be:c6:5d:4e:bb:b0:36:fb:ea:77:c2:76:
                    3c:ce:77:2f:70:60:53:8f:4e:87:2d:9f:c3:d2:ac:
                    c9:84:7b:01:d8:3e:ce:ab:0f:48:6b:80:fe:60:c6:
                    5f:72:4d:dd:a3:9e:35:69:98:0f:43:41:85:99:1d:
                    d2:57:f2:9b:62:d8:0d:e6:6b:7d:c4:6b:72:f6:82:
                    cb:34:c6:a8:2a:d1:dc:ab:42:4a:08:32:7e:19:22:
                    63:e1:a5:9e:c7:f9:63:48:f5:8e:14:ea:9a:51:ac:
                    da:41:99:61:a6:59:b5:4b:c2:7a:cc:54:2c:48:01:
                    24:81:37:bf:b2:33:22:be:5c:d4:55:d5:e2:34:06:
                    73:c2:63:94:35:68:4d:9d:69:6b:d0:64:ff:71:be:
                    1a:06:08:05:ad:13:e3:15:e7:b2:a2:0e:e0:8e:18:
                    2e:d8:ed:aa:12:07:27:d1:5b:26:e5:a1:60:bd:00:
                    f9:df:b0:d9:43:ca:e8:af:78:0f:f8:b0:e5:5a:65:
                    cb:8d:2c:fc:f4:a3:e6:34:55:c5:ef:81:c6:a6:77:
                    b5:26:4c:62:d7:9c:ba:5d:99:7f:12:a6:d9:cd:9f:
                    c0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DC:3C:5C:41:91:A8:67:6F:DC:86:AB:96:71:17:DE:67:9A:E8:BA
            X509v3 Authority Key Identifier:
                keyid:11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:23:3e:39:9b:5e:9e:24:a5:73:1c:37:39:81:16:32:ec:46:
         14:cb:74:15:33:98:39:4f:da:bb:45:dd:7d:c3:b4:2e:70:29:
         ce:f5:80:ec:31:76:8d:4d:9f:d6:d4:06:1c:46:14:f9:19:a9:
         6c:27:8f:17:e0:ff:25:99:f0:67:a5:b5:87:20:c1:50:eb:f6:
         56:a9:18:e1:ae:7f:16:a9:65:5b:ee:61:58:b9:78:c9:61:bc:
         b4:8c:51:47:71:29:0b:a4:7d:e5:97:3e:a4:32:34:24:dd:e3:
         11:e2:4f:63:45:d6:38:ea:76:00:b3:19:ae:f5:39:24:f0:bb:
         bd:b3:42:d5:71:c2:4a:8c:01:03:b9:18:f4:9d:03:58:76:b1:
         04:73:76:2b:6a:35:fa:20:38:0b:d8:d4:ff:87:b1:60:74:cd:
         47:a1:46:7f:d5:7a:c7:3b:67:b2:1c:98:58:22:58:26:fd:16:
         3a:dc:a1:6b:33:e5:7e:e6:d4:d1:fc:75:1b:ea:12:8a:e8:cf:
         5e:1a:0c:41:63:98:d3:8c:d5:3d:b1:d7:08:69:50:94:79:9b:
         57:88:b4:cd:d8:34:c5:a0:f7:3a:c5:ee:66:76:28:d0:72:a1:
         5d:7e:68:fe:31:6a:8b:a4:e9:94:ee:cc:a8:b7:86:44:56:5b:
         a7:bc:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:44 2024 by rpki-client on console-ams.rpki-client.org