Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft
File:                     YPTPqWb55eIDdMsu1HBkEt2iHE8.mft (raw, json)
Hash identifier:          HeheZPxi37mZZUBvqz3UY4ORNN7QjKDV9q9vNPGrFqc=
Subject key identifier:   E2:68:A1:D4:34:FD:13:E1:17:3E:CD:8D:A3:FF:B7:F0:22:58:3C:6B
Authority key identifier: 60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F
Certificate issuer:       /CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F
Certificate serial:       0773
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft
Manifest number:          076D
Signing time:             Fri 22 Nov 2024 20:58:42 +0000
Manifest this update:     Fri 22 Nov 2024 20:58:42 +0000
Manifest next update:     Fri 29 Nov 2024 20:58:42 +0000
Files and hashes:         1: YPTPqWb55eIDdMsu1HBkEt2iHE8.crl (hash: Zr0aAS/YWjvRPKgp5CKbFBvu+x3FmDau6GtkgFa9Za4=)
                          2: 4B696C52F34311EAB4034710C4F9AE02.roa (hash: WyMJ1jUI8RllCu4tUSg8X7OX8QYWAuhM07CgjE9LNa4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl
                          rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F
        Validity
            Not Before: Nov 22 20:58:42 2024 GMT
            Not After : Nov 29 20:58:42 2024 GMT
        Subject: CN=6740f082-fbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:00:98:11:b3:bc:34:f7:91:e4:72:e1:29:
                    c3:7c:e4:f5:34:cd:e8:1f:89:58:78:df:33:65:14:
                    03:bc:9a:8f:31:fb:d6:0c:4c:79:26:06:b5:6a:1d:
                    bf:65:cf:8f:e9:fa:be:5a:66:0a:5a:2d:53:e3:95:
                    e0:ff:4f:ee:a5:99:35:b0:34:9b:df:6d:b4:df:c0:
                    4c:3b:21:5d:00:71:27:be:ac:2c:0e:9a:a7:f2:45:
                    f6:a9:be:bd:98:b7:c9:1e:d9:99:8b:0d:9a:27:55:
                    9e:f9:54:12:c6:a2:d2:dd:8d:a4:2c:b0:95:cb:5e:
                    b6:89:a6:77:20:ba:cd:e8:e8:d1:ec:0f:64:0e:54:
                    34:ba:75:b3:d6:df:02:57:62:a4:8b:a7:bd:d7:a9:
                    1c:c8:19:8c:41:93:3d:61:cb:0b:32:3a:35:96:3c:
                    35:36:0c:b5:f7:1a:4d:93:19:8e:11:0a:de:11:11:
                    61:f4:23:f4:63:9e:64:f7:bb:37:9a:7e:64:02:bc:
                    c5:89:9f:b7:ab:bc:b8:41:50:b9:ea:41:77:8c:98:
                    f0:ea:39:3d:a6:61:6b:a0:68:e4:24:ca:55:55:52:
                    7a:36:74:7a:3f:29:49:f7:5e:f4:08:92:7b:1c:27:
                    28:7f:48:82:e9:c5:5a:d6:1f:ef:ff:37:18:4e:7e:
                    df:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:68:A1:D4:34:FD:13:E1:17:3E:CD:8D:A3:FF:B7:F0:22:58:3C:6B
            X509v3 Authority Key Identifier:
                keyid:60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:c1:d3:96:4f:1d:bc:c4:8b:a6:fc:e4:a5:fb:c4:e4:d8:
         ca:10:5a:fa:eb:d1:ed:33:bc:4b:bc:65:01:03:72:99:7f:ec:
         72:51:83:f3:e7:58:ad:45:32:e5:ec:6e:1f:45:53:b1:bf:1c:
         27:25:0c:be:59:1b:0b:f0:ff:47:b4:24:0f:9b:50:ce:95:63:
         d0:4e:2e:fb:8e:c0:4d:5b:51:42:75:5c:cb:58:49:c1:5b:e3:
         fa:8b:f9:81:53:87:0f:7e:31:09:89:50:e3:52:54:53:26:78:
         b4:f3:e6:81:88:04:03:c7:11:7e:63:93:6b:06:ea:af:2b:8a:
         3b:ea:62:c3:bb:a6:83:b7:4c:71:cd:42:5a:af:d7:e1:da:5b:
         7c:e2:86:2d:49:73:04:ee:c8:42:f0:54:d2:b7:84:df:80:e5:
         39:ea:f3:76:08:df:ca:9f:22:24:6c:2e:c6:a9:7d:0b:a0:ba:
         0b:a9:d7:8c:35:16:21:d2:03:05:ab:7b:c5:b1:64:4e:8b:0f:
         b7:2b:be:52:40:cc:c4:00:bb:c8:92:bd:bd:4e:d3:7b:cb:e2:
         81:bb:2c:8d:f0:80:39:f6:0f:90:1a:23:13:8e:cf:b8:1e:41:
         44:8d:73:6b:41:47:56:7e:3c:51:17:be:eb:44:5b:48:35:13:
         4e:1f:60:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:28 2024 by rpki-client on console-ams.rpki-client.org