Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
File:                     YiOr1va2e6_v4-c2Rv16ZuECFL4.mft (raw, json)
Hash identifier:          ORPG8NCWyHEU9fK91JRMWt0VtT7t3wU4T+4MjEdzdhc=
Subject key identifier:   DB:99:55:91:9A:70:7A:B2:4B:D7:5E:F3:90:19:E2:E5:20:CD:F1:FB
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Certificate issuer:       /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
Manifest number:          68
Signing time:             Sat 23 Nov 2024 04:57:19 +0000
Manifest this update:     Sat 23 Nov 2024 04:57:18 +0000
Manifest next update:     Sat 30 Nov 2024 04:57:18 +0000
Files and hashes:         1: YiOr1va2e6_v4-c2Rv16ZuECFL4.crl (hash: 5M/QaSkDUUc4VuIZ+wcO+eMdixEeLLYbpU8qVJ6DpHw=)
                          2: 884A59828D3211EF9E092384C4F9AE02.roa (hash: GqBUNYobHpDctK2tEnk2wHBO+0ezgYbmfu4uXv2cQjU=)
                          3: 878615B88D3211EF9E092384C4F9AE02.roa (hash: q+Tk9tMLXZGyDR8qEuibZ0K/2qF5avUb5fU2EBmwtEQ=)
                          4: A937C2200FA511EFBDB06936C4F9AE02.roa (hash: fjeTe75jZm5dJALxtcTp9K54dbCVL0/Mg85S4l4+7No=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
                          rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
        Validity
            Not Before: Nov 23 04:57:18 2024 GMT
            Not After : Nov 30 04:57:18 2024 GMT
        Subject: CN=674160af-5220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7c:e0:34:62:f5:ad:30:bc:55:2d:21:34:5a:
                    0b:97:e6:e5:2a:a4:cf:ec:23:3c:74:b4:73:6c:9c:
                    2e:f0:76:1a:b6:24:03:36:52:e7:c6:c7:a6:cc:e8:
                    06:83:dd:08:32:c7:20:f6:59:ea:6f:dc:ca:d8:1b:
                    d7:13:e0:c1:bc:79:7a:34:91:a3:d5:e4:e1:9f:24:
                    05:79:8b:bb:0a:bc:9e:83:ea:67:77:44:ed:d7:1b:
                    a3:4a:6a:19:c0:ac:08:b1:07:bf:14:6f:ea:14:61:
                    37:1a:24:5c:c0:85:f2:90:35:b4:b4:7f:aa:48:9c:
                    17:a5:34:25:f8:c2:0a:3f:49:bc:9d:14:5d:6a:ce:
                    63:b1:fa:c9:95:71:7a:eb:c3:d2:c8:48:8d:b1:99:
                    7a:d8:46:7d:4e:db:b7:17:11:f2:85:31:24:44:6f:
                    83:a4:9a:dd:18:a0:a8:0a:1f:70:a8:0d:4a:4f:48:
                    99:df:82:7b:87:2f:78:4e:a8:f2:f6:1f:70:2a:f3:
                    6f:f4:ea:2b:16:88:b9:a8:4b:95:c8:50:ff:c4:7e:
                    78:24:f4:9f:c8:75:3e:51:66:d5:a3:50:6f:d3:fd:
                    1b:cc:be:0b:c0:c4:25:bd:ec:6d:6a:9a:15:72:e2:
                    15:19:78:ad:4c:12:99:9c:fa:ea:93:04:b2:e4:2d:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:99:55:91:9A:70:7A:B2:4B:D7:5E:F3:90:19:E2:E5:20:CD:F1:FB
            X509v3 Authority Key Identifier:
                keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:30:23:71:65:6d:05:8b:6a:8c:8b:82:ac:8f:1c:07:45:
         0c:a5:75:2d:c3:f9:5d:4c:24:79:9e:73:f0:0e:de:99:87:6c:
         d2:eb:bc:db:12:07:09:1a:47:56:fb:c5:cd:b4:0b:e6:f2:56:
         51:09:97:ab:d0:aa:06:89:d1:28:d5:e1:75:2c:aa:0f:c4:4c:
         1f:1c:ef:66:57:03:54:b4:bb:37:93:c4:bf:06:37:8e:23:91:
         c5:44:b8:3f:11:3d:81:70:9b:b7:aa:5a:df:cb:00:d0:73:12:
         15:d2:88:b5:38:d3:b4:8b:9e:bd:c8:66:eb:19:3f:9a:83:9a:
         e9:12:ed:4c:a8:99:a7:af:1b:fe:5e:7c:4b:b8:87:41:3c:24:
         d0:6f:93:57:91:dd:60:8a:dc:c9:53:68:12:3c:b4:fd:11:ed:
         2b:6c:cb:b1:13:97:8c:8e:6e:69:5a:3b:fe:33:bd:02:21:1c:
         85:3b:7c:9d:ed:37:92:78:15:07:49:c7:cb:29:21:65:63:39:
         70:33:12:cb:a4:b6:09:1d:7a:19:94:ba:9a:9d:e8:fc:39:b0:
         6b:51:8a:fd:13:70:1b:bf:e4:34:f5:3e:84:f2:f7:77:9e:72:
         f0:a3:9f:57:93:a9:b8:4f:3b:a7:08:17:ee:2f:57:13:2b:5d:
         c2:01:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:09 2024 by rpki-client on console-ams.rpki-client.org