Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
File:                     ByXySRgBUFGFyQaaQBNjXDi1a3I.mft (raw, json)
Hash identifier:          M2YmR1Q4YU47O5Or4k39y1uCvk2NHv9Yy6UFmTQOyy8=
Subject key identifier:   47:D8:E7:61:09:43:2D:09:AE:75:FD:6D:BB:59:B9:FD:55:F6:39:28
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Certificate issuer:       /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial:       06EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
Manifest number:          1608
Signing time:             Wed 20 Nov 2024 18:09:12 +0000
Manifest this update:     Wed 20 Nov 2024 18:09:12 +0000
Manifest next update:     Wed 27 Nov 2024 18:09:12 +0000
Files and hashes:         1: ByXySRgBUFGFyQaaQBNjXDi1a3I.crl (hash: xu/bkdjeRNQrGeY81o3wYqbOx7iNp3wnuunNym+YiWg=)
                          2: 9852B952A98811EE8837E63EC4F9AE02.roa (hash: 9ift5kSzh9fTdIpx68YjBI74nzABzTlye9TNliwhHE4=)
                          3: B1471960C69F11EEA49B0321C4F9AE02.roa (hash: efQyEJ0PSvPnKB7dDppoyZhGuzoiLAkyZXNjFW2dtjQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
                          rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1771 (0x6eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
        Validity
            Not Before: Nov 20 18:09:12 2024 GMT
            Not After : Nov 27 18:09:12 2024 GMT
        Subject: CN=673e25c8-0dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:a7:0c:3e:8e:71:ca:e6:78:86:0d:59:91:
                    d4:23:c0:79:92:46:06:41:8e:0f:92:e1:d6:7d:11:
                    4e:05:62:d8:21:d8:fd:ec:85:43:56:0b:77:3e:71:
                    40:61:6c:53:b1:c7:12:ab:44:c7:58:0d:54:25:3c:
                    c8:78:fd:4f:c4:aa:0b:85:2a:d0:e8:49:d6:5c:f8:
                    ec:40:ab:b8:da:c1:e0:72:61:7f:c3:eb:b9:18:49:
                    f8:07:0f:7f:88:b0:67:6d:ae:81:01:0d:a0:85:89:
                    55:d3:5d:a3:4d:32:45:7e:d9:43:03:12:26:cf:bd:
                    df:63:dc:56:5a:bf:c7:5c:40:6d:46:22:70:c0:8b:
                    f5:a7:ca:10:2b:1c:df:41:ad:e0:78:7e:2d:90:89:
                    06:91:fd:70:a2:78:c9:81:fc:bb:32:85:89:77:a1:
                    f2:de:d8:9d:3d:da:37:1d:2f:35:3d:5e:63:db:45:
                    2e:63:89:5d:0f:03:2c:ce:f0:02:4f:61:79:a7:6a:
                    1d:cc:42:cb:ac:a6:c9:fc:8e:27:32:20:31:78:0a:
                    b2:e1:8f:52:f6:38:14:a0:19:c6:e5:d1:3d:d7:13:
                    5e:e6:bd:c0:cd:c3:88:c7:f7:2a:3c:5c:b8:1a:16:
                    fa:c9:09:19:e4:7e:83:7b:c7:f2:36:df:c6:4e:af:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D8:E7:61:09:43:2D:09:AE:75:FD:6D:BB:59:B9:FD:55:F6:39:28
            X509v3 Authority Key Identifier:
                keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:29:58:4d:56:14:6e:76:00:e0:f7:ee:8b:28:a3:8f:20:b0:
         5b:f6:30:54:a7:42:52:b3:d6:53:f5:fc:c2:c5:92:4d:b1:76:
         f3:db:16:25:94:42:28:8e:31:c7:bc:20:78:f6:f1:f9:1d:1a:
         9d:69:6d:9d:27:01:ff:d5:3d:a1:0a:5e:ba:ff:33:68:1b:88:
         24:31:bd:9f:95:1f:3b:e9:fe:65:b8:a7:da:cc:30:b1:72:f4:
         e3:dd:83:ab:9d:9b:a0:e9:bf:44:68:3e:db:ae:40:ab:70:1f:
         d2:0b:48:73:36:ef:17:c7:f5:8e:d3:28:a6:41:b2:01:06:f8:
         09:bf:25:88:98:78:50:47:67:97:75:62:d6:6c:5c:2b:36:f6:
         d2:27:52:d6:5d:45:b7:b0:87:c6:87:cd:a1:63:d0:18:8d:c4:
         90:be:a9:82:94:b1:33:94:76:a3:0a:c7:7d:0a:31:d1:eb:f2:
         3f:fc:0e:13:57:cd:aa:5f:3f:54:e9:de:cf:53:38:7a:18:fe:
         06:09:63:8a:bb:c4:71:79:4a:91:10:0a:34:a5:c9:c7:53:6f:
         8e:19:1a:2b:cb:62:f4:aa:15:1c:fc:f7:47:88:c2:32:f2:1e:
         1b:b1:f2:20:93:47:84:95:62:90:39:80:79:b3:08:5a:e3:5d:
         be:f2:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:23 2024 by rpki-client on console-ams.rpki-client.org