Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
File:                     EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json)
Hash identifier:          1bK3RANXC0XUygqMqiz0DVS7f9Zjo1sdgXavWOHTRE8=
Subject key identifier:   77:48:B3:C7:FE:D0:21:72:D6:01:AB:B0:EC:34:74:5B:33:44:C3:CC
Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98
Certificate issuer:       /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
Certificate serial:       0595
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
Manifest number:          0590
Signing time:             Wed 20 Nov 2024 22:46:49 +0000
Manifest this update:     Wed 20 Nov 2024 22:46:49 +0000
Manifest next update:     Wed 27 Nov 2024 22:46:49 +0000
Files and hashes:         1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: wG+8UuA16V8lhDammSx03DRtQNPHagzQuVe/G/V8XDQ=)
                          2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: KeDjzKypgQHXzMMCw525U76eYPfXZKl/2OFa/SSqsKg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl
                          rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
        Validity
            Not Before: Nov 20 22:46:49 2024 GMT
            Not After : Nov 27 22:46:49 2024 GMT
        Subject: CN=673e66d9-70ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:65:73:29:1d:d3:c6:c7:95:b5:1f:80:be:
                    01:25:7d:29:b2:a5:5f:57:3c:1c:53:1c:de:ac:a1:
                    35:73:64:54:72:d3:76:4e:5a:13:ad:57:af:7f:a6:
                    59:b3:19:c0:7a:7f:44:cd:5f:77:cb:04:77:38:1d:
                    ec:c2:34:39:18:20:21:91:c7:5f:90:55:f8:4c:5f:
                    e6:d8:1a:d4:fc:a4:5b:a9:ec:f8:54:14:2e:0c:d2:
                    35:8f:6e:0b:a5:08:e4:9f:27:3d:de:7a:a9:e7:26:
                    11:5e:a5:52:41:57:7a:73:59:e5:5e:73:b6:ef:9f:
                    15:fa:f9:e2:8f:87:96:b5:34:77:10:5b:36:99:c1:
                    64:d1:e1:f0:1a:e6:26:c1:89:b8:a7:76:ea:20:74:
                    65:86:91:d3:a8:1c:20:02:6b:80:f1:6d:b8:42:e8:
                    95:ae:68:69:0d:66:af:5b:18:6b:c5:cd:f5:d7:d0:
                    0f:95:21:24:eb:de:50:c6:31:0e:39:d0:20:fa:ef:
                    81:1a:50:2b:d7:4f:e6:a8:61:8c:e1:2b:82:b8:cd:
                    d0:ad:c0:f8:a2:9f:c1:2c:df:04:84:f6:ef:8e:b0:
                    93:0b:1b:92:76:e7:a7:c8:f0:d3:03:fb:14:f5:68:
                    cc:d9:86:17:d5:57:70:fc:6d:40:eb:a5:99:94:4d:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:48:B3:C7:FE:D0:21:72:D6:01:AB:B0:EC:34:74:5B:33:44:C3:CC
            X509v3 Authority Key Identifier:
                keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:33:5e:05:3a:74:0a:9d:09:17:bb:7d:b3:9f:2a:23:35:a9:
         63:7a:18:77:fe:21:23:fa:61:a7:aa:35:66:e3:32:d8:d5:21:
         86:96:1a:c4:43:b8:04:9f:39:1f:f1:2a:7c:94:03:e5:62:32:
         ae:d2:e7:1b:fb:07:7f:28:ec:b4:30:01:f0:a6:23:a7:7a:90:
         94:58:a7:b7:b9:2e:ec:a7:4e:d2:74:0d:b8:36:19:df:f0:80:
         00:9d:ac:a3:f6:29:39:ec:8f:c9:d1:59:03:4e:cf:ef:9b:5a:
         dd:96:17:3c:0d:b2:f9:a8:8a:61:bd:d5:15:54:bc:e1:a1:3f:
         1f:6c:f2:cd:d7:21:c9:49:0b:01:36:26:a7:9a:f8:7e:a7:4e:
         fd:5e:9d:2b:b4:d8:88:49:1b:8b:84:b1:b7:91:df:d3:62:31:
         9a:45:5f:60:12:7a:e5:c0:a5:4f:6a:4b:06:97:8d:90:f6:74:
         8a:e6:99:5b:3d:39:a7:74:04:47:31:97:c4:e5:47:f3:35:d6:
         32:d9:0f:98:e5:04:12:e7:31:e0:8c:e5:4c:2f:62:b7:7f:38:
         70:aa:d4:77:db:18:68:20:01:c7:7a:be:30:a1:f4:40:27:c7:
         34:bd:57:19:06:2e:d6:60:96:16:73:fa:11:12:dd:51:00:d9:
         cf:da:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:39 2024 by rpki-client on console-ams.rpki-client.org