Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.mft
File:                     674mL25KszsiCY2mAsJkKj08A_U.mft (raw, json)
Hash identifier:          iQ4ixTja+lfcyKeymnlyqHqszNxehKL9q7PduJyCWDQ=
Subject key identifier:   5B:7F:6A:CF:61:8E:5C:C2:30:87:93:CE:B9:B2:FD:27:8F:80:33:8F
Authority key identifier: EB:BE:26:2F:6E:4A:B3:3B:22:09:8D:A6:02:C2:64:2A:3D:3C:03:F5
Certificate issuer:       /CN=A917D84D/serialNumber=EBBE262F6E4AB33B22098DA602C2642A3D3C03F5
Certificate serial:       0652
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.mft
Manifest number:          064A
Signing time:             Wed 20 Nov 2024 22:00:44 +0000
Manifest this update:     Wed 20 Nov 2024 22:00:43 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:43 +0000
Files and hashes:         1: 674mL25KszsiCY2mAsJkKj08A_U.crl (hash: NusDaTT7WfSTknRBQqaIRD3XJu7Ai/PtK1nSxqB/DhM=)
                          2: EC816CBE641F11EBA016EF13C4F9AE02.roa (hash: P6u4je25hcfN3t/0iMsyNjMkZ8iwirGhqdMRndYb380=)
                          3: EBD40682641F11EBA016EF13C4F9AE02.roa (hash: eMQqjBv2cJ2eHdQB4O4MctsT8NsP/3FJBfg3tbB3ny8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.crl
                          rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D84D/serialNumber=EBBE262F6E4AB33B22098DA602C2642A3D3C03F5
        Validity
            Not Before: Nov 20 22:00:43 2024 GMT
            Not After : Nov 27 22:00:43 2024 GMT
        Subject: CN=673e5c0c-554c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:74:da:32:f2:c3:f3:f4:f3:38:74:20:c1:
                    50:0a:84:79:2c:60:bc:9b:38:f7:4b:a7:59:81:14:
                    a0:8d:0f:06:4f:14:38:81:d8:67:c9:02:17:03:68:
                    56:96:c0:68:25:f4:d9:3e:74:37:4c:b2:11:79:f7:
                    71:11:98:e6:69:58:a4:c0:60:e9:a6:50:c6:21:6f:
                    56:bd:78:8d:83:20:f6:56:d7:1d:f1:b3:98:f7:b8:
                    e0:bf:19:9a:fe:cf:26:01:a5:b1:b3:87:d5:e6:66:
                    5b:4f:f1:0c:5b:91:68:29:4c:fa:c6:cf:1d:66:0f:
                    f2:56:13:14:2e:70:7b:1c:ec:b9:83:70:30:59:01:
                    8c:75:4d:aa:03:fa:c1:58:0a:6d:7f:f9:bd:e3:5b:
                    07:ed:ac:2e:ba:ce:e1:c7:7b:a6:5f:da:fe:a5:cb:
                    81:6f:7d:c7:77:73:2d:77:ed:ce:dc:92:cd:5a:ef:
                    b5:3e:94:61:b1:d6:6c:7c:14:7d:7f:45:6c:a6:e2:
                    d0:55:79:71:b6:14:80:b0:9f:4b:16:73:e1:99:22:
                    60:a2:8f:3f:b5:9a:ae:8e:01:0d:a3:24:19:5b:24:
                    1b:c2:b6:6f:04:e3:a0:4e:17:d3:4a:f3:ee:62:93:
                    87:f0:09:4c:71:8a:25:97:1d:6f:3f:35:98:42:be:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7F:6A:CF:61:8E:5C:C2:30:87:93:CE:B9:B2:FD:27:8F:80:33:8F
            X509v3 Authority Key Identifier:
                keyid:EB:BE:26:2F:6E:4A:B3:3B:22:09:8D:A6:02:C2:64:2A:3D:3C:03:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:01:7f:35:b1:7e:70:00:c6:d4:69:de:98:08:03:55:7a:f7:
         c9:a8:0a:5d:38:b9:a8:98:5a:ad:ad:6e:5d:a3:91:a6:90:2b:
         b6:c7:0a:70:1a:c9:11:c2:07:b0:d3:91:02:66:35:01:c0:f1:
         61:60:f5:13:07:73:96:22:35:86:cc:c9:f6:db:1c:d8:0f:b8:
         76:2b:3f:d7:5b:e2:9a:51:5b:96:51:a8:b4:66:4e:56:4a:80:
         b9:9f:64:66:a4:fa:94:e9:16:75:9a:b5:fc:29:14:19:b8:df:
         06:e4:26:1b:04:f4:5f:54:84:75:55:b7:91:25:de:35:dc:1f:
         23:78:b2:82:7d:e2:23:2f:ac:de:25:b6:ad:50:47:dd:42:50:
         12:5a:37:76:90:88:b2:8e:78:ba:33:7b:fa:35:75:ae:63:27:
         75:a6:5d:45:f0:d1:28:17:a7:dd:ba:87:af:9b:05:bc:49:82:
         39:e1:6c:ea:df:e1:8e:59:ea:e4:19:16:1d:ed:aa:86:6a:d8:
         fb:b0:5a:f0:8c:2d:66:f2:57:ca:f4:69:ab:e1:3d:59:0e:f2:
         e1:c5:44:8a:1c:83:94:4a:77:a0:ce:e8:97:77:b0:ad:aa:df:
         3b:c3:3b:b6:d3:58:87:e8:11:ae:a3:5f:c8:a5:0b:59:cd:e8:
         9f:fc:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:46 2024 by rpki-client on console-fra.rpki-client.org