Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
File:                     yiPsANw26PNUZ_BZkXTqC-_bQfk.mft (raw, json)
Hash identifier:          AQS4YRx6FaLgR9FIDXoP/h33YfdgEiFD7jpxSG2KKzA=
Subject key identifier:   91:B1:B3:B7:CE:8D:61:3B:1A:1A:3F:5D:94:D5:27:6D:8C:38:70:1D
Authority key identifier: CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9
Certificate issuer:       /CN=A9142182/serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
Certificate serial:       07B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
Manifest number:          07AA
Signing time:             Wed 20 Nov 2024 20:46:13 +0000
Manifest this update:     Wed 20 Nov 2024 20:46:13 +0000
Manifest next update:     Wed 27 Nov 2024 20:46:13 +0000
Files and hashes:         1: yiPsANw26PNUZ_BZkXTqC-_bQfk.crl (hash: zT6ban04OaASV1DY3D79htr3APgDo/uEPkqiCfBNpiY=)
                          2: 584ED0CCDD1A11EA96723D11C4F9AE02.roa (hash: 5kUDYmJ4yH0CUdMpxOxfk0FcArn01dfqkN25Zg1CXyk=)
                          3: 180F88DEDD1611EABA2F7C82C4F9AE02.roa (hash: t4Mlw7tJOEB0j00nJw/m4xLHs7JGJvrbxajz+Hi3W7w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl
                          rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1977 (0x7b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142182/serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
        Validity
            Not Before: Nov 20 20:46:13 2024 GMT
            Not After : Nov 27 20:46:13 2024 GMT
        Subject: CN=673e4a95-c8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:27:3b:8a:59:c7:85:49:c0:b0:c6:d0:7e:2d:
                    1b:0d:d6:3b:71:6c:07:18:35:ba:9a:50:86:87:ff:
                    c2:31:82:f7:b3:a4:92:7e:d0:a4:bb:21:fd:5f:f0:
                    4d:b4:19:85:28:3f:3b:07:cd:88:6e:7a:46:87:33:
                    f0:1f:8b:1b:f3:c1:9d:4d:dc:bb:12:b6:ba:26:90:
                    44:f4:09:54:66:bc:29:be:73:a6:08:cb:9d:e8:5b:
                    a7:86:6d:cd:17:8d:66:6c:00:c1:c8:0e:3e:83:22:
                    cf:02:8e:83:e3:55:27:6c:89:a3:1a:db:04:00:5c:
                    af:a6:e3:fd:20:2a:04:99:01:8c:15:80:c1:35:98:
                    65:b1:fe:57:81:a4:06:32:ba:64:33:9d:03:8f:86:
                    bd:a3:01:f4:f6:6d:c4:7c:d5:b2:58:09:44:78:cf:
                    9c:58:dc:a9:2f:de:d3:1b:d1:c0:bf:e5:e4:f3:42:
                    62:1c:84:1e:b2:1a:8d:86:f1:e4:80:ea:95:f3:76:
                    4c:1c:47:f5:e7:6b:ef:8b:89:5f:f7:3d:6a:b2:a0:
                    a4:05:c2:53:7a:e2:9e:72:0b:d4:7c:13:74:74:85:
                    08:01:e1:91:5c:54:3d:21:da:ce:b4:82:85:c7:c4:
                    f1:08:d9:d9:58:69:36:51:a9:af:09:7a:f8:f7:9d:
                    91:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B1:B3:B7:CE:8D:61:3B:1A:1A:3F:5D:94:D5:27:6D:8C:38:70:1D
            X509v3 Authority Key Identifier:
                keyid:CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:20:28:97:61:64:af:2e:9c:e9:78:be:01:cc:0b:13:58:e6:
         f7:a2:0d:8c:9c:5c:77:0d:39:8b:46:2f:6f:ff:57:ca:52:42:
         ba:e1:29:d6:12:d5:d8:e8:ad:bf:33:9b:e1:5d:b2:ef:8c:da:
         50:d8:fd:cc:90:2b:36:3d:05:df:38:4a:19:8f:30:16:d3:da:
         e5:c5:1d:7b:7d:89:98:89:4e:d3:65:2c:2d:58:f0:f9:de:e7:
         4f:ba:f2:90:0e:50:85:8f:05:65:4d:12:75:09:43:86:5d:7a:
         c3:cc:93:34:32:fa:c2:5e:16:0d:5e:69:3a:6d:82:01:e6:2e:
         97:4c:f9:52:8c:6e:9f:c6:0a:ce:4d:68:16:4d:4c:df:4e:cb:
         a5:61:78:6a:0d:cb:3f:29:ed:ce:d3:98:df:c9:8a:7a:ad:2a:
         dd:b3:b4:b5:bc:91:32:89:d5:bb:44:db:6b:30:e7:bb:19:82:
         c9:f9:89:11:42:f9:41:6c:63:4f:70:34:01:88:42:7d:a9:8f:
         69:f2:20:97:d5:01:a5:92:d7:6a:d9:24:73:ba:3f:fc:58:29:
         28:df:2e:94:e6:67:46:9a:58:fe:32:71:ad:d8:dd:5d:f5:ce:
         90:f4:b8:55:d5:87:45:47:60:c3:f3:1a:ab:fb:51:46:c3:04:
         76:bc:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:38 2024 by rpki-client on console-fra.rpki-client.org