Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
File:                     SyWxRyDwREuz1mj5Y1hDVPf6whM.mft (raw, json)
Hash identifier:          /uE/e62ou0I7Mz5D1rhFZw7MujzmyLTl8SqtkePxLpE=
Subject key identifier:   27:D1:33:8E:7A:C8:55:A2:F8:5B:26:00:00:9D:FD:A0:B8:2F:88:D3
Authority key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13
Certificate issuer:       /CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
Manifest number:          87
Signing time:             Sat 23 Nov 2024 04:35:28 +0000
Manifest this update:     Sat 23 Nov 2024 04:35:27 +0000
Manifest next update:     Sat 30 Nov 2024 04:35:27 +0000
Files and hashes:         1: SyWxRyDwREuz1mj5Y1hDVPf6whM.crl (hash: L3pQxPQEIVPKHxJNg25KalEB/9xIHtch75W/kVXc1k4=)
                          2: D0F245E0D76711EE99C72C29C4F9AE02.roa (hash: JK0bPzT8yakMMRyYc7JiDFGO+FB67qkctv2hOGSnM1U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl
                          rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213
        Validity
            Not Before: Nov 23 04:35:27 2024 GMT
            Not After : Nov 30 04:35:27 2024 GMT
        Subject: CN=67415b8f-6868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:3a:89:e1:94:fc:f8:d5:3f:2a:00:83:81:
                    69:5a:47:82:cb:b0:85:29:ff:fb:25:be:ac:e5:b3:
                    31:f4:e9:34:53:4d:be:51:3b:c6:9d:3c:cc:17:8c:
                    eb:95:88:e2:74:2f:45:be:eb:db:c1:12:66:ad:6f:
                    1f:61:4c:97:b4:3d:7f:3b:76:81:27:18:78:4f:c2:
                    d5:d6:b2:89:a5:a7:b8:a7:74:f2:f0:d6:af:c0:be:
                    78:7a:c1:9d:0e:4d:02:30:91:1c:7f:80:dd:8d:af:
                    a5:fe:82:26:0c:3c:98:d0:81:47:ee:55:33:8b:39:
                    5e:57:c0:24:ee:05:45:aa:8c:94:63:9b:e6:3c:e6:
                    3a:fc:8f:41:69:16:08:c8:9c:e9:b8:b2:b1:1d:77:
                    91:89:37:ce:40:19:e5:fe:0a:86:bc:f3:87:95:2e:
                    dc:8b:88:68:e3:f3:01:40:a7:a5:0a:56:b4:a3:7b:
                    b9:0c:ca:77:8e:df:80:ef:cd:2d:d4:63:b1:f9:90:
                    ec:f0:29:d6:98:99:3f:08:4c:d6:23:a2:7d:28:38:
                    2b:3f:96:c6:cc:86:b7:84:8d:3b:1a:67:54:7b:90:
                    02:9b:1e:ab:9c:07:78:8e:e2:2a:4a:91:40:02:1b:
                    f0:a3:8a:b3:97:c9:70:07:23:e4:5e:e3:bf:ce:99:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:33:8E:7A:C8:55:A2:F8:5B:26:00:00:9D:FD:A0:B8:2F:88:D3
            X509v3 Authority Key Identifier:
                keyid:4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:e0:f0:e1:17:73:97:a9:68:4b:37:53:65:ad:12:8e:59:
         35:3a:78:b2:bf:3e:21:62:25:bf:0a:db:04:94:21:13:c4:d1:
         1a:80:ed:c0:4e:ce:6d:1c:ff:06:71:bc:ed:72:be:fc:e1:d3:
         e7:61:9e:f3:71:3b:51:50:fa:6c:49:b8:30:cb:c9:85:a9:66:
         97:fd:3c:65:bc:dc:40:b6:d0:13:04:e3:fd:9e:93:b9:76:9c:
         3c:36:80:78:a7:08:4d:f3:18:bf:74:ba:39:4c:f9:90:2e:a4:
         ec:14:5d:26:0f:b9:54:15:68:cc:d0:8e:79:3e:0a:f0:11:12:
         2f:2e:4f:2a:d8:9b:5b:b4:aa:13:73:11:fd:a8:1d:b0:a9:40:
         0d:38:0b:4a:b6:01:a8:04:ea:42:af:2c:a2:e5:ff:f1:8c:90:
         04:4e:89:9b:79:28:7b:70:ab:e4:65:de:10:c7:aa:36:9f:77:
         8c:be:8a:24:58:17:5e:91:cf:7e:60:ba:75:3d:48:38:7b:4a:
         12:30:59:e6:9d:c1:8f:25:13:b3:d0:02:c7:a6:7e:23:5e:95:
         55:10:7e:bf:e7:00:1f:fa:ad:0b:58:37:f0:ee:62:c8:58:20:
         50:62:71:b5:51:36:3b:56:24:ea:33:11:a2:a2:42:07:fa:b5:
         1e:78:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org