Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
File:                     wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json)
Hash identifier:          lcQZgm5KTI2nCZmHqMtKG2yzb/jTyzqVa0ihcrmV1Oo=
Subject key identifier:   AA:0D:A8:4F:C8:8C:EA:59:00:3C:2F:76:0F:5E:AD:86:FC:F2:92:28
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Certificate issuer:       /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
Manifest number:          C5
Signing time:             Thu 21 Nov 2024 03:59:55 +0000
Manifest this update:     Thu 21 Nov 2024 03:59:54 +0000
Manifest next update:     Thu 28 Nov 2024 03:59:54 +0000
Files and hashes:         1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: q/AjVTv3Oz2Uw+8EfWAE6+xkryofCcgFbGa1jnWfY+I=)
                          2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: 2gzrMjXP4Am0pQ80O9+rI75KjzU6RpDqcXF/j3n7Tn0=)
                          3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: +PmKxO27F3AHIJ3oHg1od1w1E6envfjFt6OCrfWbtQk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
                          rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
        Validity
            Not Before: Nov 21 03:59:54 2024 GMT
            Not After : Nov 28 03:59:54 2024 GMT
        Subject: CN=673eb03b-bb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:e9:0d:88:6f:75:3b:9e:cf:14:19:70:b7:
                    8d:f3:25:f3:51:76:89:35:d6:d6:bb:f4:b6:d6:bb:
                    04:94:5c:ef:9e:8d:c4:b5:1e:d9:3f:c5:5a:09:e5:
                    0f:28:6a:79:9a:c3:79:85:86:dc:77:a5:eb:4d:93:
                    90:a3:16:0d:aa:c0:08:3e:c7:d6:88:d7:bd:b4:92:
                    6b:06:b0:5e:32:ba:fb:9f:c8:2d:4b:2f:84:d2:98:
                    d3:1b:78:e5:72:00:63:ff:d6:ec:af:ad:01:46:1a:
                    77:28:f5:6e:d0:9f:c3:3b:d9:d4:c4:b3:53:d3:99:
                    d2:13:3e:bb:1e:e3:b7:03:92:9f:b6:56:25:e5:43:
                    25:a9:56:c7:80:2f:84:b2:53:d9:3c:c4:14:e5:ba:
                    56:26:2d:15:1f:5e:28:db:d7:24:ce:a7:69:70:2a:
                    94:ea:e1:7f:ad:44:17:66:92:f2:82:b8:52:86:b6:
                    3d:eb:4d:84:05:03:40:16:f8:e1:51:bd:3c:8b:ba:
                    4a:6f:51:a6:de:19:86:52:d8:8a:4b:2d:6e:df:0a:
                    3a:e0:b9:67:cb:28:3b:8a:46:25:cc:8f:6a:27:68:
                    58:06:9e:a4:e1:0f:be:c6:9d:22:f6:74:d6:ec:4b:
                    0d:8b:8f:33:96:d7:9d:bc:b5:26:85:9d:59:4d:0c:
                    5c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0D:A8:4F:C8:8C:EA:59:00:3C:2F:76:0F:5E:AD:86:FC:F2:92:28
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1a:91:db:ff:df:06:bc:76:54:44:6b:d3:6c:6a:2c:67:13:
         57:9b:c7:54:44:3b:37:3c:51:c0:46:99:c2:23:43:20:57:07:
         47:a5:66:6e:22:3f:b7:fb:a7:d2:4b:5c:6f:aa:44:6c:96:8f:
         f8:e1:e9:3a:e8:7f:f9:fe:f8:5a:15:5e:87:a7:34:4b:a1:b8:
         0d:f2:90:3d:2b:85:7b:f5:0b:29:65:44:07:3d:0d:8b:ac:b6:
         63:57:67:e3:c9:2b:aa:7a:e2:21:4e:29:21:d1:87:a5:2f:93:
         c9:95:9f:bb:e9:8a:bf:e8:ae:d8:8b:67:0d:a0:f4:47:3f:47:
         c2:fc:44:62:9d:2b:ca:22:6d:5d:1b:00:67:4d:ba:63:87:33:
         03:55:ff:4e:59:37:69:fc:4e:ed:59:82:9a:d2:a3:1f:2a:28:
         11:09:fc:f2:e5:80:16:2f:97:2b:3a:1e:65:a8:b9:ed:c0:8e:
         02:6a:44:78:d2:7c:ce:51:48:da:c8:26:59:d9:fe:9a:29:6d:
         bc:16:70:7a:7b:be:8e:23:6c:ec:c7:9b:9d:ea:45:f8:d0:3f:
         a3:13:c1:5c:3a:c2:dd:95:a7:74:46:92:eb:ee:e0:2f:74:8d:
         90:8d:b1:97:26:96:ab:af:a5:c2:2e:c1:2b:0f:9f:d0:bc:e4:
         7d:4f:0c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:07 2024 by rpki-client on console-ams.rpki-client.org