Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          KrbYQ//78pGvFkeKDDx97xRttwNnBZvbFLb9cYhHZ2M=
Subject key identifier:   86:25:5B:4E:E3:DF:E9:C6:73:C0:2D:E5:45:AD:BB:04:2D:79:3D:2A
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       3175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          308B
Signing time:             Wed 20 Nov 2024 15:28:15 +0000
Manifest this update:     Wed 20 Nov 2024 15:28:14 +0000
Manifest next update:     Wed 27 Nov 2024 15:28:14 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: w8mVBgrNM9Qa/O3hrq4JeE58Zvd0+NN+vAdz5Ds++Ns=)
                          2: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: qfmqTirp8Zad7k+qaey18cYG4f26i7cc95OJ7RN7ki0=)
                          3: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: N5j7WOPf8R/W04K/g7J6exFJHjLoUKmGax2m8ylN8D4=)
                          4: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: QBgYyEawhn1JXFywm9CFNs+9U5jAgMIpTHNoQrJwCB0=)
                          5: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: jpqfykEtXXmj6Mk5ax89hq50WV+obiHvLv4IGmQnups=)
                          6: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: s74RqywlkpPNZd/k54OkOPZY0zBYS0LcSwqRFyhZCaQ=)
                          7: 3E745A08803611ECB2187650C4F9AE02.roa (hash: cUFz8UfvDLExFmEMk60M+pc6mMkgOxhkE3VX2EzmxPo=)
                          8: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: egxIsRPVPwb7u+XM60U1FKVzWzmGVCY2CjPdVmSsIoo=)
                          9: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: IzTsla0zxZKnGyuuEHhfVJkqXYrhwIme1eXrBSLQ8hE=)
                          10: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: v7dpF7DEHY5W9PehrFLFcsUWT8Jk0m5IH4U++CpJtnc=)
                          11: BE430FFA699011EE96387F19C4F9AE02.roa (hash: xQ1dIyyEBpGErrvo04MIQpHGcqYJjtLBlN+w8G4Dch8=)
                          12: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: T2It2LjErftea3TIF7gsdKaDme/4oTA0DOzxS3/YKlg=)
                          13: 6A721236977E11EBB7908378C4F9AE02.roa (hash: 4iGJOzeOe32jX6RwP3qwklB/DkGUI9G1IaXHJLvho9Q=)
                          14: 3F6A8A20953911EF9AAE0D26C4F9AE02.roa (hash: iEQanlRdJ4SvHiQ087d0/WllRm9J8TdexoGq8Ei75Dk=)
                          15: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: H0AaPyuEvO3VdNV9Lebtrz3gKClkKQyMQL7FYI1zL1o=)
                          16: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: liXETAeyiiRJUr4HKvyxOrH1rZms2Fhza+VaF2FQeog=)
                          17: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: VaB6pOWiJQ57BWYYsujqoAwA2X29FFnQlwvyPnBs8I8=)
                          18: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: n6J3lFAaIJdatXxciP20VhkBJmk/cgEYdscJZnx5wj8=)
                          19: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: uw4pwsuMVlOdst39HyvHTeiUfKLIfoUwRmRV8OdgqkI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12661 (0x3175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Nov 20 15:28:14 2024 GMT
            Not After : Nov 27 15:28:14 2024 GMT
        Subject: CN=673e000e-67d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:1f:04:33:63:5f:5a:f6:e3:33:88:c2:64:
                    21:08:ec:d3:6f:24:f1:a4:eb:92:08:8b:6e:5a:7d:
                    76:ed:f8:65:c6:60:b5:0b:5b:cb:8f:0c:06:37:da:
                    88:70:86:df:f8:9e:2b:0f:f3:f7:7a:e3:0c:40:2b:
                    31:49:ec:b9:3d:e3:d8:59:0a:27:ee:ff:50:84:88:
                    86:51:98:28:ed:f0:2b:21:c5:b1:87:85:10:46:83:
                    c9:3c:53:69:2e:6f:80:12:40:57:4c:6b:93:57:70:
                    fb:47:34:69:c2:a0:bd:e0:2f:b1:61:85:90:df:e9:
                    d7:c2:d4:02:e3:de:88:a0:43:fc:d6:6e:a5:af:66:
                    37:68:f5:79:88:ba:79:9e:9f:ee:ef:b2:3c:3b:db:
                    10:b2:9e:1e:a5:db:49:fa:24:33:cd:bf:c2:28:b8:
                    a4:22:56:c5:e5:c1:df:23:9b:db:45:7c:59:fb:bf:
                    e9:c6:6e:e5:2c:f1:f2:de:be:c6:99:fd:e7:bb:5a:
                    d5:e0:be:b4:a4:38:ba:d7:d1:4b:2f:c2:57:06:de:
                    79:79:62:4e:66:d6:7b:7e:ba:63:fd:27:b2:64:c0:
                    16:2e:08:4a:8f:82:d4:53:57:8f:ca:c4:77:fc:51:
                    e3:0e:9c:56:02:85:11:ba:28:90:8e:79:3b:54:59:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:25:5B:4E:E3:DF:E9:C6:73:C0:2D:E5:45:AD:BB:04:2D:79:3D:2A
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f2:ad:1c:f2:9f:82:4d:56:78:cc:38:9d:a3:bd:6f:2e:f3:
         67:4b:75:95:c6:02:7d:78:3c:56:16:1c:ab:ea:1a:e0:32:19:
         aa:b0:ac:37:87:f6:12:93:44:85:79:ce:0a:52:56:1a:46:e0:
         39:cd:99:2e:1a:28:2e:b2:cd:94:d0:8f:f4:98:6c:fc:d5:45:
         f5:88:e7:2c:39:97:47:05:17:a1:0f:a1:91:3b:1c:bb:8c:1e:
         0e:e5:ea:0b:34:47:bb:d8:03:01:a2:e1:80:b5:da:c2:85:26:
         32:11:ef:59:73:8e:85:a4:c9:8c:00:b0:47:fd:95:96:14:1b:
         7b:cf:02:74:8b:14:30:18:9f:1d:df:03:ba:70:03:f0:8e:18:
         b9:27:35:1a:56:30:55:88:fe:55:b6:15:cc:e2:51:e0:07:21:
         b6:27:a0:7d:14:9c:b7:4b:b8:93:4f:2c:c2:49:30:d8:33:59:
         b3:27:21:86:0f:84:3d:3d:72:e5:11:24:7e:a7:59:a6:f5:e8:
         31:fe:fa:59:da:36:b8:17:01:89:26:0d:17:4d:eb:da:5c:7f:
         42:ad:b3:a5:d2:46:ae:f0:17:03:06:cf:1f:9a:8f:f7:89:0a:
         88:01:74:79:0f:8a:79:cc:5a:3e:2e:f4:29:3e:93:f2:b6:f4:
         d0:00:3e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:17 2024 by rpki-client on console-ams.rpki-client.org