Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File:                     y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier:          4LwCoFlWB+TjqJGfG1AAsB7UGKt5FX7SDW3OxtJyzVA=
Subject key identifier:   34:D5:89:80:92:7C:0C:77:BA:DC:9C:42:24:48:21:CC:59:B6:6F:80
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number:          66
Signing time:             Sat 23 Nov 2024 05:01:35 +0000
Manifest this update:     Sat 23 Nov 2024 05:01:34 +0000
Manifest next update:     Sat 30 Nov 2024 05:01:34 +0000
Files and hashes:         1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: I/oIV0u8HU9LlbRgMSg6IwBdb6sZZE/JZ99Zzu92V+0=)
                          2: CD802A9A1BE511EFBC630883C4F9AE02.roa (hash: de4vNWdwOETkj9mhz2ImDDVKUmbG+1KIQgOwEqbfGeE=)
                          3: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: 2ZvR8MHi7NyojTKS1eQiZr7s7ixPWXKlZzJWOILwSsE=)
                          4: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: wXFw1WCYOzN+C3+tE/wlw+YhUZwlxJ82iP5vfZ3R23g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: Nov 23 05:01:34 2024 GMT
            Not After : Nov 30 05:01:34 2024 GMT
        Subject: CN=674161ae-34bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:da:e1:35:ed:87:6a:03:d2:bb:86:ff:de:
                    f2:1f:15:bd:91:26:94:25:4d:98:b1:e9:75:19:cb:
                    90:f6:24:c4:02:87:d6:b2:44:f8:ac:df:ce:8f:45:
                    cc:5f:da:0b:78:4c:dc:26:f0:19:96:a2:15:03:67:
                    2d:9e:a2:cc:2e:e3:e8:38:bd:6c:db:be:16:70:43:
                    a6:bb:f6:c9:13:69:f3:53:3e:c3:9d:c9:a7:0c:50:
                    d6:84:a9:92:48:16:50:43:be:e8:28:15:54:ea:a4:
                    52:ee:56:20:fd:e5:8e:14:13:8a:f0:d6:52:95:88:
                    dd:ab:78:d4:b1:2d:f9:f9:f0:ab:86:dd:0c:34:cc:
                    37:e1:42:b2:65:99:6f:e7:8f:17:50:29:f9:6d:b8:
                    0e:76:d1:36:40:a4:6f:3f:e5:2b:f2:de:0c:fe:0c:
                    21:18:67:cd:ce:74:d5:84:93:98:e3:0b:8b:a4:57:
                    b6:37:fa:48:0e:c0:10:93:ab:95:23:78:92:7f:68:
                    1a:0c:5b:27:6d:eb:1f:89:b4:7e:34:f5:6b:12:bb:
                    e4:43:06:67:72:64:cd:9b:ee:1e:5e:31:f5:17:ad:
                    3c:ab:4f:5f:5b:39:9e:0d:9c:42:da:a5:22:b4:56:
                    d2:e0:9e:09:f6:f0:8e:94:db:dc:56:d5:3e:6a:e5:
                    7f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D5:89:80:92:7C:0C:77:BA:DC:9C:42:24:48:21:CC:59:B6:6F:80
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ba:64:84:c3:6a:02:8b:7a:c4:47:c5:79:2e:f4:6e:da:1f:
         c2:be:d8:bf:41:92:ad:68:00:4b:fd:15:e6:c0:8c:dd:cb:96:
         de:b7:79:6d:f3:17:d3:f0:73:b4:f4:6d:42:72:a6:2b:ac:fa:
         e4:bb:da:35:bd:ac:50:57:8f:7f:86:ce:12:d5:d2:fc:c3:21:
         e0:5c:2d:f9:cc:be:69:d3:6b:d0:93:64:15:6a:9a:91:dd:d2:
         40:20:6c:a6:58:22:6c:66:73:37:87:2e:59:31:75:7f:18:d8:
         2c:e9:ea:43:cb:ba:14:85:0f:0d:c8:6c:4c:19:13:d8:88:73:
         64:89:9f:7b:e7:47:f5:72:a0:0e:5d:63:4f:9c:25:de:3a:65:
         49:e3:b4:24:a9:50:3c:f6:93:7a:42:24:d2:0b:9b:9b:35:28:
         f9:49:30:d0:82:ac:83:99:55:b3:46:33:c3:bd:5c:c3:67:eb:
         bc:15:05:6c:0d:0c:15:f9:e5:f4:3b:c0:65:23:21:67:c1:0f:
         30:b7:7e:ca:22:da:a3:8c:21:ad:97:2b:81:94:89:6e:3a:78:
         6f:54:64:87:a5:c0:44:33:6b:2b:cf:eb:e7:aa:47:22:13:a0:
         af:3e:2d:14:0f:39:99:e9:91:b0:7e:85:bf:4e:36:84:d1:ba:
         c9:af:4b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:25 2024 by rpki-client on console-fra.rpki-client.org