Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File:                     dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier:          B3+KcvgSyjHhVxtj5601xZ7GbqOnNNeRoJMogTP7l9c=
Subject key identifier:   60:38:71:3F:2E:10:9C:A7:E5:C1:CD:C6:A7:41:E1:32:C6:F5:FA:2C
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number:          01CC
Signing time:             Thu 21 Nov 2024 01:49:42 +0000
Manifest this update:     Thu 21 Nov 2024 01:49:41 +0000
Manifest next update:     Thu 28 Nov 2024 01:49:41 +0000
Files and hashes:         1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: bo6KMYt7hIxgypF7kCXMf8NzmkfTnPwoKhDsSobwIwg=)
                          2: 4A82F578377111EDA5C68B0DC4F9AE02.roa (hash: crvAWfSU4cUDblQBIJE2EpNRvqCqivyWgcP1Unt1EK0=)
                          3: 49CA1D50377111EDA5C68B0DC4F9AE02.roa (hash: FxlXMb1VDjKPp2gvaZUru1qfhHQyZGjKWzaIqCuCA0o=)
                          4: 36FD50B6DB2111EEB3E9271CC4F9AE02.roa (hash: rU7CKGeUYqs3tXjTNBrmzDAuCsCviqHRyl1+U/nK1dQ=)
                          5: 2EDAFB36DB2111EEA9D71A1CC4F9AE02.roa (hash: 1ERleHaw+rTHzWpLs7esUgy0v8wwV8FCkRkK+QHZ+lA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: Nov 21 01:49:41 2024 GMT
            Not After : Nov 28 01:49:41 2024 GMT
        Subject: CN=673e91b6-e23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:07:c7:77:c8:84:28:03:81:04:85:cd:cb:
                    bf:a8:c0:03:6a:f5:41:6a:49:1a:57:f8:89:40:ce:
                    aa:f4:56:3a:f1:c6:a8:8b:51:99:a9:19:71:b4:17:
                    1e:fa:6a:dd:18:0d:83:4e:59:b2:41:35:66:db:c4:
                    a1:b0:cc:87:60:98:b2:1a:df:c1:82:43:5c:c8:8d:
                    45:f7:fe:f6:39:d7:e2:7a:fe:01:a5:93:78:ac:76:
                    51:43:c7:08:b1:51:7b:3e:79:9f:fc:cb:c5:80:0b:
                    5d:6c:9c:23:14:70:d6:2a:20:9e:b6:53:3c:eb:cd:
                    13:28:0b:57:73:77:ea:7d:60:86:ba:57:36:ce:78:
                    f2:ab:eb:e8:70:a1:da:67:d6:a3:09:c3:3a:99:20:
                    fe:61:4e:d0:2e:34:a4:f0:a7:86:ea:20:97:30:9e:
                    57:ad:67:d5:c9:27:f3:3f:38:78:91:99:da:63:7d:
                    17:6c:c5:23:01:b8:61:a5:6e:06:8e:3e:ca:88:b0:
                    55:de:42:7d:91:e3:19:b8:6d:6d:11:94:fe:d4:2e:
                    39:9e:d1:2c:8f:95:e2:3e:07:b6:52:8f:51:5b:45:
                    8b:85:66:a0:98:e7:ac:03:91:8d:52:56:84:e4:8b:
                    0e:22:cf:9b:2e:04:8a:7b:87:22:76:5f:0b:d6:2e:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:38:71:3F:2E:10:9C:A7:E5:C1:CD:C6:A7:41:E1:32:C6:F5:FA:2C
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c0:29:18:42:aa:20:ec:cd:07:05:ea:37:ea:bc:bf:9a:3f:
         b3:a0:74:d3:96:37:17:9f:90:a9:e8:c6:be:76:b4:bd:e8:00:
         74:f0:3a:88:f7:28:ad:00:8b:4b:91:f3:4d:59:61:5c:03:61:
         1e:67:d0:db:f5:b9:28:d7:55:62:44:3b:13:2d:af:89:d1:9b:
         d0:42:80:af:14:49:ff:84:a0:e6:66:69:d6:6b:c9:fc:89:d1:
         a2:72:c4:13:ad:ed:20:48:74:89:f2:48:b6:02:79:c0:c9:58:
         98:db:0b:ab:41:85:92:87:be:19:6a:8f:f8:40:24:72:0b:9a:
         c4:22:74:5d:ca:c9:32:f0:21:15:8b:df:27:92:0a:5f:bc:44:
         c0:09:b6:04:cb:fb:c2:b2:20:79:37:e5:82:66:3e:5b:44:d7:
         33:13:c0:bc:ce:94:5c:b6:3d:81:9d:f8:d0:f5:fd:99:96:bf:
         e9:3f:5b:b7:e1:7f:ff:ff:d4:a7:5a:4d:cb:2b:02:ef:12:73:
         e2:0d:55:1f:7d:b4:a5:3b:71:f0:bf:18:bd:2f:ea:72:7a:e5:
         67:39:da:42:9e:cf:a9:04:3f:aa:2c:16:82:64:65:77:f0:73:
         e3:76:15:ea:ec:b9:84:89:de:c4:ae:c7:e3:9d:06:8a:c8:61:
         9b:c0:23:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:35 2024 by rpki-client on console-ams.rpki-client.org