Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
File:                     10rBuKMzUkP8svmQW8UdvcsOI20.mft (raw, json)
Hash identifier:          kEVQA8RsgtVumu0n0YYuUzyrgdMRXvd4bV7UjlDvblc=
Subject key identifier:   C7:E3:EB:CA:F4:48:10:4C:9C:59:03:EE:A8:52:C8:A5:EF:E6:9B:70
Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D
Certificate issuer:       /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
Certificate serial:       0A71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
Manifest number:          0A60
Signing time:             Fri 22 Nov 2024 19:27:34 +0000
Manifest this update:     Fri 22 Nov 2024 19:27:34 +0000
Manifest next update:     Fri 29 Nov 2024 19:27:34 +0000
Files and hashes:         1: 10rBuKMzUkP8svmQW8UdvcsOI20.crl (hash: N8q6I6aoQsJjGSUxoej5ON+7fSgZcM25VZZBttzgZ5g=)
                          2: 98DBD8B660D311EEA9C80344C4F9AE02.roa (hash: qobh4w9osO4ki3CXJVAypXeKLZL/LsHsyelYml99k+0=)
                          3: AF3CEA305ADB11EEA96AE979C4F9AE02.roa (hash: wxVKUqydm62Dk782SZrIhbwE5T75wUycQIm2l+eMW2Q=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl
                          rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2673 (0xa71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
        Validity
            Not Before: Nov 22 19:27:34 2024 GMT
            Not After : Nov 29 19:27:34 2024 GMT
        Subject: CN=6740db26-52e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:a9:9b:a1:8d:aa:cc:c5:18:3a:77:b7:e2:
                    b1:5c:75:5e:22:5a:9d:c4:bb:0d:16:3a:1c:f2:ec:
                    f3:2f:76:28:5c:5a:97:74:5b:5f:a8:5a:82:5a:4d:
                    5c:61:bd:01:4f:54:3e:18:6d:57:02:e3:1e:d8:31:
                    23:c9:98:78:f7:68:04:e1:23:ed:6f:25:50:e5:c6:
                    53:1a:4e:ac:ce:6e:48:b4:c6:14:db:eb:05:54:ba:
                    e5:c9:4d:31:ef:da:cd:41:f6:f2:7c:1d:9b:eb:cb:
                    3f:13:11:26:11:0a:5e:5d:24:44:ee:77:74:c9:50:
                    5c:cf:b6:8e:ec:9e:f8:e1:31:17:7b:bb:72:11:99:
                    85:e0:79:c4:e7:7c:60:31:3e:44:5d:f3:dd:94:b8:
                    5f:dd:93:16:1a:d4:80:73:95:4c:d2:87:cb:0d:05:
                    40:10:be:ec:aa:7d:4b:6a:3d:f7:33:00:b0:ef:f4:
                    da:00:e3:f0:4f:67:4c:f6:35:b2:21:07:6e:60:8a:
                    ff:0c:a7:e2:7b:fd:cb:29:55:29:80:2b:9a:0f:00:
                    b6:c8:e2:ff:3f:28:67:37:e6:0d:f3:96:0e:3a:ed:
                    44:68:1b:76:f6:75:34:c5:a2:98:c5:eb:e0:f7:57:
                    10:0a:cb:29:19:c8:e2:43:6b:ba:0f:ca:cb:53:f2:
                    93:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E3:EB:CA:F4:48:10:4C:9C:59:03:EE:A8:52:C8:A5:EF:E6:9B:70
            X509v3 Authority Key Identifier:
                keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4b:4f:ba:a4:82:0f:ca:eb:bc:8f:39:85:14:f3:1d:57:14:
         7a:80:45:77:06:b5:f0:03:94:dd:da:0a:19:3d:e9:82:e6:7b:
         5c:62:dd:90:3d:0a:7d:2f:9a:81:0a:e0:2c:b5:bc:95:01:50:
         86:2e:8b:62:23:0d:f7:74:b1:84:b6:8f:69:d5:ae:90:76:12:
         dd:8a:15:34:9a:ac:73:b8:3c:06:fc:0e:dc:82:48:82:0d:6a:
         6e:59:6e:bc:fb:73:06:e4:39:4a:bc:39:3a:52:1d:fb:90:35:
         54:68:5f:13:d1:a2:08:30:2a:54:97:ca:b1:a8:90:07:43:6c:
         8e:e2:d4:f0:17:40:2a:e9:5b:0b:03:36:a0:16:1b:c8:38:86:
         c6:c3:d9:74:66:10:c5:cf:69:5e:67:ec:5c:e2:a9:f9:1d:9b:
         e9:58:82:0c:ca:8c:0f:46:cb:57:0f:06:cb:fc:bb:f1:46:78:
         4b:d4:bf:f1:1a:04:15:a1:b6:21:bc:1c:eb:79:d0:a0:09:ac:
         26:fc:85:f3:3e:bc:8a:fe:e8:d2:e5:95:cf:71:5e:95:71:5c:
         fa:a3:13:60:bf:e2:4d:ca:c5:89:d4:85:06:b8:e1:68:68:43:
         86:e2:3e:0f:15:54:12:07:e3:91:31:3b:67:d3:1a:1e:66:de:
         4c:6d:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:32 2024 by rpki-client on console-ams.rpki-client.org