Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
File:                     P3MTY_5HQEYaWciPp2e9ijbsDfY.mft (raw, json)
Hash identifier:          O5rjDF/e+XHyoDnOpWXH5b1X2ZYrgdBR4Eq5UAW6H/Y=
Subject key identifier:   8E:52:62:B5:64:02:79:F4:E8:3B:94:64:65:87:DE:B1:B1:83:38:86
Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
Certificate issuer:       /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Certificate serial:       06B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
Manifest number:          06AD
Signing time:             Fri 22 Nov 2024 21:46:10 +0000
Manifest this update:     Fri 22 Nov 2024 21:46:10 +0000
Manifest next update:     Fri 29 Nov 2024 21:46:10 +0000
Files and hashes:         1: P3MTY_5HQEYaWciPp2e9ijbsDfY.crl (hash: IEQwpmBbWbAwO7c1kQ/NeLGDjNmj8q2Ky1S7WhGb5fo=)
                          2: 7D3B257298C411EC97E3503CC4F9AE02.roa (hash: ce4ePTxD5Rw6/EXwAE6IKueifUBmCporSH8E9XxekiY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
                          rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1717 (0x6b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
        Validity
            Not Before: Nov 22 21:46:10 2024 GMT
            Not After : Nov 29 21:46:10 2024 GMT
        Subject: CN=6740fba2-6404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:4a:87:06:ba:a0:4d:b4:f8:95:44:0b:fe:
                    27:7c:eb:ba:32:56:7c:67:af:8a:3e:58:a7:b5:4c:
                    a0:7f:00:45:83:76:a3:a8:35:79:07:d6:f6:e8:0a:
                    b6:bc:2f:3f:83:69:62:ca:29:8d:37:12:78:8c:38:
                    4d:b6:d8:ca:79:1d:ee:33:eb:0e:b2:94:d5:0c:54:
                    10:3f:7b:d5:91:1d:7f:ff:b6:5c:71:a6:ff:3e:c4:
                    dc:2d:a8:0c:b7:00:89:f0:90:d5:d7:f7:66:d9:56:
                    99:c9:ae:af:2b:75:39:13:b5:96:ec:2f:72:3a:96:
                    9e:cb:60:42:a2:95:80:13:b1:94:53:9a:27:0f:55:
                    df:3b:47:a5:0d:35:cf:f2:c4:f9:5d:5a:d3:ac:12:
                    3e:db:e1:da:29:fc:b1:41:df:89:47:1d:3c:b1:f1:
                    d0:5e:24:b3:20:35:6c:66:11:aa:2e:17:8b:41:c6:
                    46:52:a7:d7:30:69:3e:89:f1:75:86:a3:fa:c7:d7:
                    30:43:4a:57:14:51:52:cb:1b:02:07:8a:55:88:b8:
                    91:7a:5d:43:32:57:8c:ba:a4:4e:82:96:52:c1:43:
                    30:e7:05:92:1e:11:63:e4:db:8d:05:e4:d8:d2:12:
                    c8:19:b0:ac:39:b8:d1:50:1e:76:6f:78:bc:89:cf:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:52:62:B5:64:02:79:F4:E8:3B:94:64:65:87:DE:B1:B1:83:38:86
            X509v3 Authority Key Identifier:
                keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2d:0c:86:6b:14:ae:f9:2c:0f:88:0f:d8:7e:c5:ac:14:bf:
         a8:c8:10:62:16:a9:96:e6:1f:07:f0:6f:50:d6:d4:0f:e1:f2:
         40:b3:fd:01:b9:3f:70:d7:a2:36:8c:b7:15:97:cf:24:06:b3:
         30:cf:be:2a:8b:df:dd:de:98:e9:e9:9a:78:42:0d:ab:c9:c9:
         4d:f6:eb:de:98:51:9c:6c:19:3f:53:a4:26:26:9b:42:e7:58:
         67:02:2d:10:3c:ba:58:98:86:19:72:66:ee:65:ef:43:f5:86:
         c1:a2:06:b6:45:ea:19:67:72:22:ad:63:ae:f7:97:fa:f4:05:
         89:30:70:8e:84:e2:d3:6f:29:24:a3:93:d6:d1:fc:55:bd:a7:
         eb:db:31:10:7a:1d:a2:71:bd:b8:ac:60:bb:a6:90:bd:25:a6:
         d6:68:57:46:8a:f6:aa:ad:7c:9b:8c:11:f3:54:2b:b2:09:ad:
         d4:fb:a2:7e:50:68:a8:24:49:f3:2a:12:3d:11:16:45:55:3a:
         1f:92:eb:fa:63:5f:20:0f:93:fc:ea:a6:9f:ca:09:f6:2c:d5:
         95:92:4f:2e:ff:52:85:54:7d:98:e5:74:e4:bf:1f:6d:cb:71:
         b8:ff:12:f2:94:3b:d2:79:82:04:fd:a8:b9:a8:0e:7d:c6:02:
         0f:89:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org