Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
File:                     ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json)
Hash identifier:          AMGOpRuVGgE9UzNiWQncEJqZRHqiDWK0DREVO9OJj98=
Subject key identifier:   6A:D7:A9:EC:E7:EA:14:95:BF:11:B8:DC:23:E2:6E:F6:87:A4:2F:D7
Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
Certificate issuer:       /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Certificate serial:       07B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
Manifest number:          07AD
Signing time:             Fri 22 Nov 2024 20:46:07 +0000
Manifest this update:     Fri 22 Nov 2024 20:46:07 +0000
Manifest next update:     Fri 29 Nov 2024 20:46:07 +0000
Files and hashes:         1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: EjlOcQpQGIXcgk2Pjz6oLCixXRjYOnrJ2roLWOSHhNw=)
                          2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: OOAGuEy3dNxhof0DuDCrqOBB7Z16rn3wikl56pkPDKs=)
                          3: E228BE42DBDB11EA9D395E41C4F9AE02.roa (hash: iklcKY1p6cUV63DgFPNd0VTuCZO3jzabdmCYH2W3rsU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
                          rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1975 (0x7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
        Validity
            Not Before: Nov 22 20:46:07 2024 GMT
            Not After : Nov 29 20:46:07 2024 GMT
        Subject: CN=6740ed8f-818c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:d0:0b:9d:f4:b7:44:cc:c4:93:b4:bc:96:
                    73:4b:65:2e:b2:30:29:e0:df:13:b1:db:ac:78:de:
                    72:06:a5:88:3e:24:db:de:d9:29:0e:ea:0d:0b:f7:
                    8e:cf:b8:a6:a5:ec:ae:8d:c2:09:29:92:5f:32:4d:
                    34:2f:27:e7:7e:67:bd:24:a7:f6:a2:4e:7c:67:ce:
                    e0:1c:1c:34:f1:55:99:7d:df:7b:8a:e2:5e:75:b3:
                    7f:e2:75:49:28:9b:cd:db:7b:44:66:9e:b5:b5:d1:
                    98:20:b9:d2:59:ea:dd:e7:e4:a6:fe:68:9e:5b:dd:
                    94:1a:0f:ad:39:d4:16:26:01:c5:7a:24:19:96:86:
                    de:96:24:9d:a1:8b:96:56:93:a4:5f:6e:0c:f5:26:
                    30:a0:82:ca:6f:e5:48:3c:0f:8f:50:6f:a8:76:19:
                    3b:38:7b:c6:56:30:fc:84:4a:4f:21:18:66:0b:1f:
                    35:35:98:d0:a6:5e:5c:8a:8f:b2:cc:d5:06:a0:21:
                    b9:85:1c:63:de:86:09:2d:c7:f9:76:64:ec:a3:77:
                    b6:a5:a7:0f:50:33:9f:8e:8a:8b:b1:00:c8:f9:d6:
                    4d:d7:60:4e:2b:60:8e:2e:99:1b:98:ad:e5:d6:e5:
                    c3:19:0b:5e:05:00:2d:67:67:a2:04:ed:a5:28:a3:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D7:A9:EC:E7:EA:14:95:BF:11:B8:DC:23:E2:6E:F6:87:A4:2F:D7
            X509v3 Authority Key Identifier:
                keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9a:30:57:ee:f5:80:25:d6:03:e1:a3:9e:17:f9:07:49:55:
         35:62:21:2d:3a:dd:4b:b0:8c:a5:eb:bd:58:a9:0c:fd:61:d3:
         11:e4:92:7c:b1:f1:c5:45:36:64:4b:0d:2d:db:81:db:18:b7:
         60:9d:2f:ac:ca:d2:25:9f:f2:bc:9a:6e:45:a7:ea:cd:0b:3d:
         5a:65:0f:2e:f2:e4:7a:ab:eb:42:40:85:18:aa:c3:0f:80:34:
         5a:bd:97:28:5b:c9:b7:22:cf:9f:43:62:43:44:c6:bd:15:68:
         d0:d3:9a:07:2b:b2:4c:14:ed:9d:5d:a5:bf:94:5f:23:66:9d:
         4f:54:b9:60:26:83:2d:c2:16:84:ec:80:eb:72:32:97:93:a7:
         39:58:10:20:fc:62:2a:9f:9e:ee:43:3e:e7:98:8a:58:dd:8f:
         de:cd:50:62:c8:5e:dd:6a:fd:b3:88:75:ee:41:82:1c:71:23:
         b4:87:1f:86:ea:17:b3:08:fd:ce:b4:56:f7:28:ee:ac:40:79:
         94:ed:11:50:fe:44:c3:fd:4e:ad:5e:d5:aa:f7:b9:9c:2a:52:
         ad:67:99:98:ee:43:7e:1b:07:62:b7:3a:a4:61:77:96:e7:c0:
         50:21:7f:a4:47:c2:14:0f:93:af:57:2c:ae:55:c7:b7:ad:ad:
         14:27:26:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:27 2024 by rpki-client on console-ams.rpki-client.org