Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
File:                     ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json)
Hash identifier:          8wnXkOdajo8I6CPNphmpQ7k1H3HoVGBn84EqybJnffI=
Subject key identifier:   40:86:F3:E4:0B:0C:2F:C4:04:62:BA:9E:B8:12:23:E3:4E:A2:2D:A4
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Certificate issuer:       /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial:       061E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
Manifest number:          060D
Signing time:             Fri 22 Nov 2024 22:15:45 +0000
Manifest this update:     Fri 22 Nov 2024 22:15:44 +0000
Manifest next update:     Fri 29 Nov 2024 22:15:44 +0000
Files and hashes:         1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: rq68jCDDC7ftG38XYOWe+Y437/Lpwf6wvw/s0flyC+8=)
                          2: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: vO8BJ986/mLBngVCPGye7C9+jhQy/7A58iRckkgaf5o=)
                          3: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: ydw76epyjXbZhwBlfsXtLnXh1HYx108LFVcke+cDAAQ=)
                          4: D2CFD4468D6D11EB9DB49A32C4F9AE02.roa (hash: Q6tSeAB9SXDJytuvhS/k9VLqC1gwcOY00UC/xNHWsMA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
                          rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
        Validity
            Not Before: Nov 22 22:15:44 2024 GMT
            Not After : Nov 29 22:15:44 2024 GMT
        Subject: CN=67410290-5efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:40:dc:8a:34:a4:b9:4a:26:39:6e:81:9c:
                    93:55:25:ee:9d:37:2d:41:94:41:b7:56:84:b3:52:
                    e8:62:d8:84:a4:2d:d4:15:d9:42:7a:54:ad:75:a0:
                    e6:4e:ac:bf:f9:1d:70:11:ff:dd:6e:2a:2f:16:17:
                    a4:9a:95:5d:1c:0e:90:f0:80:1b:cc:85:89:bb:62:
                    77:f5:d4:b4:5e:b5:9f:33:5d:6e:41:09:c9:87:6f:
                    df:52:b5:b9:89:40:6e:0c:ae:e0:0c:df:98:35:fa:
                    36:ba:c3:25:9d:fb:2a:39:28:4f:c0:5f:a2:a3:e4:
                    d5:6e:82:b9:51:1c:e6:36:f1:7a:31:8e:3e:da:b1:
                    40:81:81:58:d2:17:83:e9:d0:70:67:e0:85:91:84:
                    fb:f8:d6:59:e6:b8:1a:ca:4b:fd:27:11:1b:73:7b:
                    a9:5a:94:b6:e5:82:aa:43:55:04:cd:75:4b:c7:a5:
                    f6:85:82:55:40:9a:fd:a5:b8:4c:aa:9c:16:89:6d:
                    59:70:7f:30:a2:67:d5:c2:99:c9:ab:2d:c0:86:1e:
                    f4:f8:bb:54:65:fd:3d:10:0f:7d:78:2c:f5:06:14:
                    83:8c:c4:c6:9d:32:cd:6b:1d:18:02:dd:16:ce:52:
                    68:70:ae:1f:93:fd:48:c2:ee:5e:d7:87:2d:5f:c5:
                    b9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:86:F3:E4:0B:0C:2F:C4:04:62:BA:9E:B8:12:23:E3:4E:A2:2D:A4
            X509v3 Authority Key Identifier:
                keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4e:2a:44:9a:ea:23:5e:60:49:15:0e:7e:eb:c3:5f:6a:5f:
         ff:ce:74:10:c4:d5:c3:77:e7:23:19:2e:06:df:77:93:76:6a:
         03:ea:a3:b9:f2:95:f4:63:55:71:d8:14:57:19:30:28:58:72:
         c1:80:37:db:a2:d3:f8:3c:a6:4a:69:f8:f4:8a:a1:9d:ba:b4:
         4b:71:ee:91:b1:28:84:88:88:31:08:67:50:10:12:f5:c3:3e:
         de:53:89:d3:44:17:75:15:74:c9:8f:a5:6b:29:f3:44:ab:55:
         d0:df:31:11:6d:c9:67:bd:08:c3:be:36:27:ab:2d:95:fc:1f:
         b0:60:53:39:6a:3f:ba:28:21:1b:0c:75:27:78:0a:49:8a:f7:
         a2:cb:19:bd:64:bf:55:b1:42:5d:4e:2d:03:03:a6:6f:22:4d:
         7d:49:65:14:8f:7a:56:8c:85:56:c7:50:66:5f:67:d4:73:f1:
         d5:7d:96:6f:30:33:3f:4c:0f:de:9f:9e:8c:ef:16:c6:b0:e7:
         03:33:68:9b:11:0b:a7:e5:81:29:78:26:3a:fd:b2:b5:82:d6:
         c6:c7:26:bf:9c:eb:39:be:bd:55:89:fb:72:b4:63:e9:a9:db:
         43:c7:63:2c:51:ec:90:8b:ab:d9:d4:3a:87:78:02:85:f0:c0:
         21:db:0c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org