Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
File:                     ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json)
Hash identifier:          3IJxEpcriHdKSq+tPFtHBmzkUFxn2ya5AuimuhFGGls=
Subject key identifier:   D3:98:F8:21:07:18:EB:DE:4C:0C:78:8E:BB:F0:F9:B2:87:6E:04:1F
Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Certificate issuer:       /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Certificate serial:       0BEE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
Manifest number:          0BE5
Signing time:             Wed 20 Nov 2024 18:21:17 +0000
Manifest this update:     Wed 20 Nov 2024 18:21:17 +0000
Manifest next update:     Wed 27 Nov 2024 18:21:17 +0000
Files and hashes:         1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: THmOTWNaQPXaC51JoE9iDWAIP806HnaMElsl5Sq9/Vo=)
                          2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: JpCVaZ9JZD1Afq3DjPUJqYLTP1v40h6qnEBodBPkfj4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
                          rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 18:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3054 (0xbee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
        Validity
            Not Before: Nov 20 18:21:17 2024 GMT
            Not After : Nov 27 18:21:17 2024 GMT
        Subject: CN=673e289d-aeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:71:7d:f0:ed:98:a5:8f:7e:1c:2c:dc:7b:
                    ff:77:5d:88:59:d6:ba:25:b2:e9:59:09:0f:46:c3:
                    e0:48:5a:39:40:6a:12:ae:6f:d9:b2:d5:af:f8:76:
                    11:66:19:17:6f:bb:28:8d:bc:01:c2:c1:6f:84:46:
                    b6:0e:a8:3b:2e:4c:b0:32:7c:01:8b:28:b7:e6:e6:
                    1d:ab:20:da:d4:b2:fe:32:83:b9:1a:4d:f8:a1:14:
                    c8:db:eb:d6:9d:f0:52:bd:87:6f:21:cc:df:05:b5:
                    eb:2c:b3:46:61:d6:9a:36:a5:54:64:58:23:9d:ae:
                    46:59:28:44:1b:cb:8d:7a:07:38:81:71:4b:45:e2:
                    17:78:12:52:05:95:98:41:a4:4f:ee:76:d3:10:1f:
                    99:75:4c:64:2f:49:bd:a9:8a:ae:14:24:b8:bb:90:
                    b7:5c:ef:1f:50:6f:51:14:d1:1d:60:b0:81:39:6b:
                    0c:8f:7c:87:20:1c:28:e2:31:28:bc:f3:2f:18:e0:
                    ac:c8:d3:62:ec:90:2d:eb:3f:39:2f:f2:fe:f4:14:
                    5b:37:fd:8f:ad:7b:41:24:bc:3f:3b:5f:e0:6a:94:
                    18:62:14:31:28:75:9e:86:a3:d5:17:d9:ab:8f:5c:
                    6b:8e:a7:3a:2b:33:36:a1:d7:2c:ae:fc:87:16:4b:
                    42:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:98:F8:21:07:18:EB:DE:4C:0C:78:8E:BB:F0:F9:B2:87:6E:04:1F
            X509v3 Authority Key Identifier:
                keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a7:55:a7:a9:26:d5:7d:ec:de:21:a6:a0:4d:d4:73:df:cb:
         c0:e8:08:5e:21:ad:39:b6:46:5c:74:28:34:66:80:84:08:66:
         b0:0a:6b:10:ea:0a:04:70:31:ca:a9:c1:33:1a:bf:5b:e5:d3:
         f7:19:26:7f:93:66:66:0d:4e:2e:98:ec:75:87:7c:42:dc:f3:
         a2:fe:74:fc:1f:61:29:a3:69:aa:2b:00:e9:62:15:89:70:c1:
         dd:b5:cd:f2:39:51:66:fe:5f:9f:42:c8:bc:b9:e6:e7:24:27:
         f9:9e:f5:35:c4:93:74:9c:cc:c0:a4:07:e9:bf:71:4e:07:27:
         53:b3:3d:1f:e7:0d:7e:6a:29:40:91:29:49:81:59:fc:cb:33:
         9f:b9:d0:ec:9e:9b:44:2b:d5:ac:fd:d6:1f:72:af:c6:19:24:
         a1:39:cd:3f:d0:27:b5:96:ca:86:13:d4:89:61:9f:76:a0:31:
         b7:5b:5b:93:d8:bf:38:4b:46:48:ce:b7:3b:c8:4c:b1:51:96:
         d5:49:50:a8:83:a9:ba:03:72:c9:fd:36:85:05:e9:9b:bb:fc:
         3e:21:e3:d2:f3:d4:75:21:f7:a9:4f:8a:20:2e:b6:74:bb:17:
         be:c3:c5:0c:66:f8:39:bd:51:87:88:93:7e:cb:3b:fe:da:5a:
         8e:71:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:49 2024 by rpki-client on console-ams.rpki-client.org