Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
File:                     wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json)
Hash identifier:          AHFEgr1wP0IgqhIxThkNo0n7NcsIHL3oiw9sQ0UycNA=
Subject key identifier:   EB:18:FE:CB:85:83:57:03:D8:87:BD:3E:1F:90:49:2E:C3:8E:0E:29
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Certificate issuer:       /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial:       0748
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
Manifest number:          0743
Signing time:             Fri 22 Nov 2024 21:08:21 +0000
Manifest this update:     Fri 22 Nov 2024 21:08:21 +0000
Manifest next update:     Fri 29 Nov 2024 21:08:21 +0000
Files and hashes:         1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: pDU0ELV3PTfjytllH38BOxc5YyYDu3IMHD+elSUu2y4=)
                          2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: AVie/3r3Cv2E5zLZN+Oa2f/YcfZCV4nyOlsn+CIPmSM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
                          rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864 (0x748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
        Validity
            Not Before: Nov 22 21:08:21 2024 GMT
            Not After : Nov 29 21:08:21 2024 GMT
        Subject: CN=6740f2c5-0974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1e:01:b5:6a:32:e9:33:a3:21:ba:62:84:f3:
                    bb:62:75:b0:fe:7b:f3:5e:d9:7b:cf:ff:13:9f:b7:
                    c5:ec:a2:6a:10:e5:99:4c:3e:3c:88:32:38:a3:d2:
                    e2:19:9b:da:10:0d:90:ab:55:f9:ad:a4:e6:74:a1:
                    2f:e5:d1:1d:44:bf:08:86:02:d2:fb:1c:a9:fe:d2:
                    9d:af:44:a2:a9:27:18:21:be:ac:6f:75:b5:46:67:
                    77:ce:e3:e6:fa:a2:be:e4:c4:93:11:f1:02:f0:f2:
                    08:ed:8b:4c:a2:6c:27:5f:1c:a3:25:9d:f1:f1:35:
                    70:6e:19:e7:51:f2:b1:44:a5:98:8b:1c:77:58:b6:
                    3b:e2:f3:a5:2a:a0:d0:16:51:4b:e5:a3:af:4d:df:
                    08:03:c6:ce:a6:33:44:99:30:c9:61:34:ff:f6:07:
                    fb:70:a9:b1:fa:df:30:c6:37:fb:ab:8d:ba:3c:0f:
                    f7:ea:b2:0f:cd:11:a4:af:1c:18:17:2d:99:0c:9a:
                    ce:7e:f2:e2:a1:ac:ae:88:4d:8c:a7:d6:bb:01:62:
                    6d:a3:1c:fe:79:ac:28:7e:af:bd:73:db:a2:90:c7:
                    0d:19:86:e3:99:33:6f:7e:df:1d:0e:5e:8b:77:5c:
                    a2:d5:ee:82:ea:c2:b1:c1:50:db:13:05:db:a3:f1:
                    d4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:18:FE:CB:85:83:57:03:D8:87:BD:3E:1F:90:49:2E:C3:8E:0E:29
            X509v3 Authority Key Identifier:
                keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9b:c2:98:c2:29:52:30:85:c1:40:dd:39:08:6a:43:fd:85:
         fe:b8:1c:fd:4f:2d:42:c1:5c:ee:36:3b:74:7c:c9:0e:db:0a:
         64:a1:c3:e1:12:b6:5c:d2:63:f6:4f:ce:e5:de:ae:45:bc:34:
         c5:2c:99:84:8d:88:7a:a6:02:7b:60:fe:74:04:45:12:38:cb:
         e4:6d:44:3c:93:53:af:00:0b:50:15:42:68:92:9f:04:34:0c:
         cf:f4:19:88:17:f2:ed:50:7f:c3:d3:e1:c5:f4:86:a4:21:46:
         de:ac:b3:04:ca:93:c7:37:9b:1f:e8:91:d0:5b:8a:37:76:3d:
         2c:2e:87:9e:26:a6:ba:32:82:0d:02:ea:54:a4:19:a0:7a:52:
         3f:fb:67:83:70:b4:bf:1b:4f:19:a7:80:47:9e:b9:f5:f3:2f:
         6c:93:bb:90:21:53:ce:55:04:19:7a:68:0a:22:d2:6c:3e:a0:
         8e:97:3e:61:5f:cc:2b:5d:b4:bb:e6:12:48:9b:e8:1d:d9:22:
         14:e0:50:bb:9f:4b:e9:d1:e8:ba:16:2d:af:52:16:cf:27:6d:
         02:90:c7:79:3f:ba:df:ac:7d:df:d3:c5:42:aa:e1:61:a7:2a:
         61:1f:77:ff:e4:dc:7d:4a:8c:b9:e5:1e:8d:53:9a:d5:91:5d:
         0f:3f:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org