Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
File:                     r1VYG6En4gkKClRi_nvOcGFvLNw.mft (raw, json)
Hash identifier:          20G33OcFTdCJsjO9hZ/ZY+0+Z3ihGqRygeQGnU/xv88=
Subject key identifier:   69:3D:6F:81:A9:06:D9:09:76:24:49:B5:43:0D:26:55:D1:7D:5F:34
Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC
Certificate issuer:       /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
Certificate serial:       02B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
Manifest number:          02AD
Signing time:             Thu 21 Nov 2024 01:03:52 +0000
Manifest this update:     Thu 21 Nov 2024 01:03:51 +0000
Manifest next update:     Thu 28 Nov 2024 01:03:51 +0000
Files and hashes:         1: r1VYG6En4gkKClRi_nvOcGFvLNw.crl (hash: fpYGGscyyrSOZzGd+1hn9SdhIBqzguJaansOzKyi8Z0=)
                          2: 1B22E756D37711EC9A8FF526C4F9AE02.roa (hash: n3tV3xCdGKrXtayf300FEN17BZ98v1+YuTGqNoc8EF8=)
                          3: 1CA2FA08D37711EC9A8FF526C4F9AE02.roa (hash: x1s3eQy6LeBQljvpss9e0xqe6y4ivgOueGGP5hZZQd4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl
                          rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
        Validity
            Not Before: Nov 21 01:03:51 2024 GMT
            Not After : Nov 28 01:03:51 2024 GMT
        Subject: CN=673e86f7-6bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:be:46:2a:34:48:44:4f:5d:c3:fe:a1:c0:
                    54:b9:85:17:a1:6b:19:3f:a6:dd:ff:b2:52:22:9e:
                    ba:f0:98:55:76:9a:8a:03:90:83:21:0c:80:fd:7a:
                    f0:14:af:32:43:af:02:0e:1d:b5:9a:f2:47:c0:fd:
                    ac:46:dc:34:41:c8:4b:0b:16:d8:10:13:d6:83:c7:
                    45:af:2d:21:41:07:fb:c1:43:65:c9:83:48:80:85:
                    5b:fd:fe:df:42:34:72:6d:ef:76:0e:4a:c2:77:cd:
                    18:11:6b:72:cd:c9:ce:13:58:3e:8b:4a:14:6e:17:
                    d2:7b:51:ad:00:83:64:9c:b9:98:bb:df:8d:21:03:
                    3e:d8:a9:d2:2a:d6:07:f7:4e:33:85:5b:29:f4:ae:
                    03:bf:a1:9f:13:ce:c4:dc:07:b4:57:66:42:b2:d5:
                    9a:38:54:76:57:ee:7f:eb:40:8d:b5:72:8a:fb:9d:
                    fe:ec:32:c8:5b:75:ac:76:90:3c:52:52:cc:fb:c1:
                    2d:60:bb:01:47:83:2a:b4:c5:67:59:f7:92:77:27:
                    72:71:17:2f:f0:d6:c0:38:62:92:00:7b:3b:5f:43:
                    a6:ed:7c:35:7a:d6:29:9d:54:53:4f:20:e8:8b:af:
                    0c:80:0c:02:99:6e:a9:f4:69:15:95:93:9f:a8:7b:
                    be:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3D:6F:81:A9:06:D9:09:76:24:49:B5:43:0D:26:55:D1:7D:5F:34
            X509v3 Authority Key Identifier:
                keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:4d:7c:c0:9d:1b:f3:ed:3c:f6:24:4f:e7:99:ea:25:19:96:
         cc:cb:3a:89:a5:73:07:32:40:f0:44:99:97:91:8d:e8:57:14:
         b8:6a:67:35:39:06:50:93:5c:23:76:2d:eb:eb:dd:4d:7a:9c:
         38:e5:15:c6:70:55:96:24:fb:69:96:97:57:94:e3:c2:50:9d:
         81:84:fc:2e:1f:21:6f:df:44:e3:3d:65:79:d3:7e:af:a0:b5:
         09:d0:ba:65:31:bd:69:d7:6d:ef:a1:68:c8:0c:95:4d:36:c7:
         1a:8b:9c:ad:95:63:9e:36:cc:61:db:f1:2a:1d:41:0f:d8:b9:
         6c:84:b5:91:ac:89:df:88:f5:4b:4f:d7:5b:82:8a:d9:44:93:
         05:99:9b:9d:a1:3a:7b:71:c7:54:17:c3:87:35:6c:a3:0f:63:
         63:89:5a:bc:50:92:52:ed:3a:a4:f0:be:03:38:92:62:00:3d:
         4a:22:b2:58:f1:33:c8:a5:6d:e8:66:fd:a5:65:d8:00:fd:c6:
         83:78:ae:9c:03:f0:8f:e4:aa:80:23:87:95:31:32:5d:9f:97:
         bb:23:03:11:40:2c:eb:f7:29:77:4c:d7:59:b0:e3:80:0e:3e:
         ef:b0:ca:e7:4e:2d:1f:b0:c3:89:2f:58:cf:d6:40:7f:e7:a2:
         66:26:c4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:55 2024 by rpki-client on console-fra.rpki-client.org