Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
File:                     ETYYsNQQaCrAapAdZbuayVXtieA.mft (raw, json)
Hash identifier:          M0v7QThkqGHrb2YA65JDAaL+JmEWWIUkiNzJ4JTChR0=
Subject key identifier:   D6:46:1A:A6:49:79:E2:BB:9A:48:A6:83:03:C8:89:7D:FF:10:F8:75
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Certificate issuer:       /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial:       0E1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
Manifest number:          0DFC
Signing time:             Fri 22 Nov 2024 17:47:08 +0000
Manifest this update:     Fri 22 Nov 2024 17:47:07 +0000
Manifest next update:     Fri 29 Nov 2024 17:47:07 +0000
Files and hashes:         1: ETYYsNQQaCrAapAdZbuayVXtieA.crl (hash: OJ5Rq6rDcgBtNXllDLzEee/QM9tmR7+aJ09tewizkNw=)
                          2: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (hash: S0GYpjLrgBpDIxgc7Mwd0gNWlzaxzYWlC58o46vrKZQ=)
                          3: 93713A1442F311EDA8889068C4F9AE02.roa (hash: waf1h7ik7ZrcqnGRBQpJf5+RrdOOjf+DIh3oNjWsVkk=)
                          4: 04421FB4C2A911EBB201FE39C4F9AE02.roa (hash: 3WkaZdI0uhQVPS3Sr8DuXeFEO0b/iJ0J/L05bm/dHl0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
                          rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3611 (0xe1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
        Validity
            Not Before: Nov 22 17:47:07 2024 GMT
            Not After : Nov 29 17:47:07 2024 GMT
        Subject: CN=6740c39b-c218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:0c:e2:14:c7:39:c3:05:ef:cd:eb:a7:cf:
                    2c:e7:d8:88:02:91:9b:45:30:6a:f3:b2:05:c1:d7:
                    3f:54:63:ea:19:fd:0d:4e:87:c9:62:ce:90:93:2b:
                    a4:09:a1:38:cd:e1:59:2a:22:ca:2e:72:1e:64:50:
                    88:63:bc:97:59:ed:1a:44:4c:a2:a0:44:5a:30:b9:
                    fb:f4:1f:5d:3e:1e:c7:b0:15:95:78:08:33:b5:84:
                    63:d2:06:38:30:93:60:51:0e:fd:b3:e7:57:0f:5e:
                    0c:a9:9b:f7:79:60:6d:f1:c5:14:e9:c0:26:3d:4e:
                    78:6f:8a:b2:4f:25:b8:94:68:f6:f6:be:a3:dd:d0:
                    23:d6:c8:32:bf:9b:10:13:25:1b:d5:8a:eb:d5:67:
                    dc:c3:e3:b5:0e:da:f9:dc:fc:d0:d6:1a:29:16:6a:
                    2c:2d:05:6c:ef:87:66:19:33:e6:7a:a4:3b:fa:39:
                    f3:59:67:46:f2:36:28:18:77:3d:57:a1:dd:ba:60:
                    81:c4:f3:81:52:11:c5:e3:fa:41:af:07:3a:56:ff:
                    19:c2:8e:33:e7:e4:ee:df:2b:db:60:6b:97:fd:af:
                    d3:cc:3e:a3:43:ac:33:7e:09:1f:23:14:92:60:35:
                    4f:5e:87:a2:16:9f:75:14:e2:53:54:56:48:72:68:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:46:1A:A6:49:79:E2:BB:9A:48:A6:83:03:C8:89:7D:FF:10:F8:75
            X509v3 Authority Key Identifier:
                keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:cf:cf:c6:eb:29:37:fd:a8:b9:49:44:94:6b:b2:6b:1b:ca:
         8e:77:5b:8a:72:bc:9b:fd:2c:e3:d6:82:83:cb:b8:a9:86:62:
         56:0a:09:e5:bc:db:64:0b:a0:13:fb:82:3a:84:aa:b2:e5:9e:
         b6:64:43:5f:06:cc:96:00:6f:ce:0e:6c:24:0d:8f:cd:30:44:
         11:ff:de:12:df:73:54:cc:40:b2:dd:49:21:57:97:73:26:47:
         dd:fd:f9:cb:5a:2a:82:27:45:eb:36:ac:9f:bb:b7:14:4d:c3:
         1c:e3:58:fe:68:b5:7b:ef:1f:f1:04:10:ba:cf:3e:57:a9:b7:
         b4:f4:21:58:a3:3e:ed:48:de:bf:be:ae:50:82:e3:35:54:ed:
         67:18:af:a6:14:1a:65:a9:58:33:d5:7c:58:03:ec:ce:fc:ff:
         99:56:96:43:69:19:89:9a:a6:79:5c:83:73:79:1c:d6:58:c1:
         ff:c9:72:e6:3b:03:bd:a0:6c:23:d9:eb:88:22:1e:5a:d3:43:
         84:08:de:d5:04:4d:38:7c:4d:8f:4f:9e:d0:6a:27:6e:bf:08:
         c4:b7:77:a4:30:67:a4:d5:ef:08:59:16:1b:89:d7:95:eb:8a:
         cb:d3:18:e6:c0:45:5b:01:74:bd:39:4a:4a:5d:f3:84:67:ea:
         0c:cf:bb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org