Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
File:                     zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json)
Hash identifier:          wRuHsEdiCZmsu4nRi1WoTeRDS+AlENQEbGZWbVDNHn8=
Subject key identifier:   67:76:CD:C6:F6:38:85:02:D6:FE:AF:4C:5F:B8:87:16:A0:3F:14:D1
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Certificate issuer:       /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
Manifest number:          BC
Signing time:             Thu 21 Nov 2024 04:10:50 +0000
Manifest this update:     Thu 21 Nov 2024 04:10:50 +0000
Manifest next update:     Thu 28 Nov 2024 04:10:50 +0000
Files and hashes:         1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: bq//3QpS/WY9NXMG96IukF03DOmq4d3szwCUxoD8Ewk=)
                          2: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: iiBaXq57eZp8X6c5iWgE7TvYtMfnJe4YRExnQe6QN9g=)
                          3: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: BfjQ13T33HJnXI6yOwnTUFJNl0yEXiv84R4LxwoIzH0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
                          rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
        Validity
            Not Before: Nov 21 04:10:50 2024 GMT
            Not After : Nov 28 04:10:50 2024 GMT
        Subject: CN=673eb2ca-b2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:d2:79:f8:2e:73:46:73:29:46:59:d6:8d:
                    d9:09:ea:f9:7f:56:99:b3:33:07:cb:08:f0:f3:7a:
                    12:95:86:fa:f4:5e:6f:f0:a2:49:79:dd:a9:9f:47:
                    7c:f1:8c:c0:db:68:98:8f:4b:29:72:f9:05:db:43:
                    51:61:92:47:6d:d0:0d:b6:9b:5e:29:6d:9d:94:02:
                    ac:9c:2e:09:62:ac:bf:53:1e:90:04:9f:b1:f5:c9:
                    2e:31:aa:1f:2f:6f:c9:61:9c:77:b0:08:9b:f0:21:
                    49:d3:89:77:57:3b:26:fb:03:ee:29:34:8d:bc:0a:
                    c3:91:2f:8d:6f:bc:4b:02:b9:de:1f:af:cf:66:02:
                    76:9d:fd:f4:df:8f:56:87:ae:e4:46:92:41:b5:d4:
                    8c:f5:c5:73:a4:2c:90:bf:6d:77:9a:73:5f:3d:70:
                    8d:22:6c:70:9e:7e:21:3d:28:63:4e:29:37:cb:43:
                    18:f5:35:4d:01:ca:16:65:f1:b2:ff:b6:18:7e:6d:
                    5f:9d:d9:3b:24:33:dd:b1:5c:fd:42:25:d6:8b:58:
                    1d:21:4c:33:60:fe:98:74:40:8a:6f:a4:08:3d:4d:
                    b0:26:f2:10:ff:84:2a:75:a3:17:94:15:f8:66:5e:
                    06:03:41:cd:8b:fb:6a:8b:66:77:8d:f2:2f:df:dd:
                    4a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:76:CD:C6:F6:38:85:02:D6:FE:AF:4C:5F:B8:87:16:A0:3F:14:D1
            X509v3 Authority Key Identifier:
                keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7c:67:bc:f0:ec:58:8d:7b:c2:87:32:26:8a:7f:0d:7e:7e:
         2a:ca:c3:68:3b:0b:67:26:0e:ea:39:d8:a7:70:1b:86:31:82:
         c4:a1:8b:aa:61:fe:46:f4:72:4b:aa:3e:26:30:81:d1:4e:ed:
         22:6e:ab:1c:60:75:67:83:9f:38:70:7b:3b:e6:13:1a:95:eb:
         de:15:fe:83:08:0b:b7:95:f2:e8:21:4d:90:02:06:14:0d:5d:
         4c:8b:72:28:4c:90:00:36:47:db:26:a6:e1:1b:e1:37:40:5a:
         3a:70:12:4e:24:4d:e5:79:2c:cd:2e:be:6d:5c:3a:91:b5:dc:
         40:9a:ec:f1:5a:2d:6d:60:c2:d9:8c:f9:0d:e5:ef:fd:99:75:
         54:cb:17:b2:02:4c:e6:1c:86:0c:50:75:7a:4e:09:0f:e3:45:
         47:96:1f:c4:1f:a3:3f:09:0b:ed:8d:40:65:05:41:1e:f4:54:
         ab:b5:fb:c7:39:8a:ac:5a:29:c1:65:58:cc:fe:6b:2b:4f:ec:
         68:6f:ef:af:12:59:33:ea:73:06:c9:df:02:63:81:ce:c8:6f:
         f1:23:e3:d2:d4:c3:1b:46:87:e8:9d:a8:3d:06:b2:c0:d7:71:
         53:ec:0b:9a:9c:6d:70:48:b7:5a:97:51:5f:9a:b6:97:64:18:
         d6:64:3d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:04 2024 by rpki-client on console-ams.rpki-client.org