Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
File:                     ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft (raw, json)
Hash identifier:          I2j2fXdfgPd2D/OUD53XJazU7U9cOwzAyA8KvXSZg6o=
Subject key identifier:   83:57:CF:F8:B2:C4:E1:12:02:5D:59:4E:AD:A3:1B:86:0A:A0:69:F8
Authority key identifier: 7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04
Certificate issuer:       /CN=A915E18D/serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604
Certificate serial:       06ED
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
Manifest number:          06E6
Signing time:             Wed 20 Nov 2024 21:34:58 +0000
Manifest this update:     Wed 20 Nov 2024 21:34:58 +0000
Manifest next update:     Wed 27 Nov 2024 21:34:58 +0000
Files and hashes:         1: ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl (hash: s4Z9++vNovzJ+f1+5v24QMVXN8Os3vwElSztDcVEU3Q=)
                          2: FFCBC5B4819B11EBA2616775C4F9AE02.roa (hash: RGi1AxOawoRwJgRmO0k5Zv8or/SKX/S2c9c3Whib2CM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773 (0x6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D/serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604
        Validity
            Not Before: Nov 20 21:34:58 2024 GMT
            Not After : Nov 27 21:34:58 2024 GMT
        Subject: CN=673e5602-c6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:a9:69:4f:c5:29:52:96:c4:b8:4d:f8:7c:
                    d9:07:84:0d:5b:66:e1:d7:6c:4a:e1:2a:f0:8a:97:
                    39:0d:24:d7:d9:ca:3c:8d:11:61:c4:f1:dd:b2:f1:
                    b6:25:55:73:4c:d5:75:df:2f:1d:23:6f:50:dc:b3:
                    3d:d6:3a:b4:61:e8:40:7a:56:3e:9d:4b:2a:73:6b:
                    b3:8a:52:58:65:b6:a0:5c:aa:92:cf:22:cc:66:b2:
                    d2:12:4e:48:38:cd:d8:34:79:15:c1:d3:7c:c8:2f:
                    90:3f:c6:9a:dc:0b:96:69:ea:b4:d7:be:1a:68:62:
                    82:d5:01:d7:84:0c:fc:ae:0a:c2:6f:ad:50:aa:db:
                    27:a8:7f:39:59:3c:bc:c0:2d:62:14:0e:77:a5:44:
                    f2:2a:90:d4:78:b0:1b:6c:d8:85:d5:ca:81:5c:67:
                    d6:77:ae:0a:c1:ba:fd:48:f4:4b:10:24:3b:3c:cf:
                    d5:ba:65:46:30:b7:b7:b6:5d:0a:8e:29:bb:62:c4:
                    9d:fb:c8:57:b4:6b:5b:94:d6:ea:11:1f:c3:b3:f2:
                    29:74:d2:76:e9:4d:82:19:56:28:4c:8a:07:8e:c0:
                    55:eb:12:30:2a:79:5c:bb:61:59:ba:98:19:cc:87:
                    11:11:be:a8:f1:63:98:c4:0f:ba:b1:10:ff:5c:da:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:57:CF:F8:B2:C4:E1:12:02:5D:59:4E:AD:A3:1B:86:0A:A0:69:F8
            X509v3 Authority Key Identifier:
                keyid:7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:52:92:94:4f:37:c2:d3:ae:da:15:68:69:3f:1c:ef:d4:15:
         f9:dc:7b:73:d5:1e:8f:50:33:25:71:56:ef:ed:86:c2:34:c9:
         77:14:fa:2b:c2:4c:5d:31:f8:87:21:e9:4a:b6:62:d5:ee:18:
         7e:ba:9d:26:81:ea:9a:de:eb:44:f8:c5:95:c8:41:dc:65:04:
         23:61:97:eb:c4:22:75:4b:b8:44:97:7a:b3:06:75:06:39:40:
         2d:a4:1a:06:3b:24:8b:57:ce:bc:06:6c:7c:1d:c3:44:b4:a1:
         dc:84:32:2d:66:49:57:81:91:ce:4f:3f:2d:fe:4e:2c:4b:23:
         2c:09:0f:ba:4e:47:94:f8:aa:6e:d4:38:e5:61:de:a7:56:f4:
         d0:c0:d9:fe:e9:8b:c8:8d:d7:b0:49:11:19:4b:41:11:d1:d7:
         f8:fd:10:9e:83:88:b3:46:24:28:f3:d4:8e:b8:03:07:d8:b4:
         5c:7c:c9:83:88:b4:fc:38:67:a4:01:17:31:c7:f0:b4:dc:f1:
         5d:32:45:8c:6b:1e:37:b4:83:e6:3d:dc:02:1b:ff:65:aa:a3:
         10:c5:a9:1a:1d:18:a1:28:bf:7e:fe:c3:a9:da:02:a0:7f:35:
         9e:0a:9f:4a:59:ee:16:a3:3a:52:c3:9d:51:df:2e:0a:6c:3d:
         09:37:86:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:41 2024 by rpki-client on console-ams.rpki-client.org