Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft
File:                     UNWU1Rjx1sCstQCbVwd49vEG1d4.mft (raw, json)
Hash identifier:          7fasec+wRCjOSpft0dS8/ByJ+efT8iFWb2hgjYFUWoU=
Subject key identifier:   29:AE:12:0B:45:73:9E:BB:4B:AE:6D:CB:3E:19:39:1E:43:72:85:F7
Authority key identifier: 50:D5:94:D5:18:F1:D6:C0:AC:B5:00:9B:57:07:78:F6:F1:06:D5:DE
Certificate issuer:       /CN=A918F0F7/serialNumber=50D594D518F1D6C0ACB5009B570778F6F106D5DE
Certificate serial:       061A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft
Manifest number:          0611
Signing time:             Fri 22 Nov 2024 22:14:05 +0000
Manifest this update:     Fri 22 Nov 2024 22:14:05 +0000
Manifest next update:     Fri 29 Nov 2024 22:14:05 +0000
Files and hashes:         1: UNWU1Rjx1sCstQCbVwd49vEG1d4.crl (hash: Guj5HO0SPpRa/dkX6z0epOd6w1vytvMM69dnypMo070=)
                          2: 365255DA7F1C11EB9D057A0EC4F9AE02.roa (hash: MXijTQWHDrYzBdPCM/Z7x+devsNZ2syPknC61NPh7rk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.crl
                          rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F0F7/serialNumber=50D594D518F1D6C0ACB5009B570778F6F106D5DE
        Validity
            Not Before: Nov 22 22:14:05 2024 GMT
            Not After : Nov 29 22:14:05 2024 GMT
        Subject: CN=6741022d-e75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:27:ff:01:c6:bc:81:4e:39:d2:4b:ae:ce:d2:
                    e8:0d:b8:2a:29:89:75:d8:5e:68:98:d0:ae:d3:5e:
                    21:3a:d0:1d:78:16:e0:30:69:97:de:b4:69:19:a1:
                    8a:c8:e3:f5:99:2a:d8:bd:f9:16:3e:32:18:86:22:
                    f4:ed:85:06:8e:0b:03:67:b1:4e:57:4e:30:36:27:
                    83:ca:7a:a1:e6:ac:91:b3:09:d4:93:63:86:51:01:
                    7f:ec:84:34:e2:dd:19:b7:1f:6d:be:a8:52:d9:61:
                    b3:75:cb:74:42:2d:18:77:b9:68:92:cc:0a:32:5e:
                    00:8f:f0:fe:c5:1b:77:bc:f7:85:20:61:d5:cf:ca:
                    aa:a8:1a:bd:c1:e3:93:b5:2a:f0:6b:34:f7:e6:07:
                    1c:a1:8f:d0:d5:62:b1:3e:5b:d7:51:ee:fb:f8:ed:
                    b2:35:87:7f:b9:ba:64:2d:ba:6a:f0:26:06:00:9b:
                    fb:24:50:0f:92:f5:06:1f:55:52:1e:32:75:63:cd:
                    54:59:40:41:da:d1:31:6c:9d:b9:cf:c1:97:bf:f8:
                    e6:da:e7:8b:3c:ea:05:77:fe:34:b6:d8:2f:31:ab:
                    92:19:cf:18:cb:e8:d8:0c:bc:af:36:27:02:cf:3e:
                    78:51:97:17:f8:5d:ce:8e:2f:8a:c5:b3:49:26:65:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AE:12:0B:45:73:9E:BB:4B:AE:6D:CB:3E:19:39:1E:43:72:85:F7
            X509v3 Authority Key Identifier:
                keyid:50:D5:94:D5:18:F1:D6:C0:AC:B5:00:9B:57:07:78:F6:F1:06:D5:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e0:30:4a:f7:36:45:d6:f3:59:7b:97:6a:46:d4:bf:df:82:
         d0:f7:bb:60:f0:e1:b4:d7:b6:02:c7:d8:46:ac:1f:d7:c2:4f:
         fd:97:9c:36:18:09:3a:10:ac:b9:51:d0:89:2e:d3:ee:ac:cd:
         a9:70:f1:21:40:72:f1:d7:f0:14:41:0d:f6:f2:92:00:09:6c:
         43:25:33:c1:7c:02:33:25:16:0b:0d:3e:9a:87:85:9a:f5:95:
         21:6d:90:64:40:17:26:d1:e4:ba:36:12:aa:c8:d9:b7:35:68:
         dd:91:73:15:ce:15:5b:2a:1c:60:8d:7a:1c:c0:5e:a8:0a:1f:
         1f:44:0a:22:f4:74:e4:da:04:bf:a6:ee:8e:2f:0d:cb:4e:9e:
         81:e3:5e:b7:e0:c1:b8:78:82:ed:93:33:52:1c:9c:25:13:a6:
         e7:87:19:b2:8b:a7:1e:92:ce:ca:38:f3:60:95:a5:be:59:c0:
         e7:54:05:41:c0:12:a2:b9:29:35:90:9d:4e:ae:42:60:0e:b5:
         84:bc:4b:5a:20:3e:b2:28:29:7a:ac:ce:47:de:48:67:73:f9:
         84:49:c6:5b:50:9f:7b:30:4e:d9:35:9c:50:f7:94:48:2c:a4:
         a6:74:2d:ce:ca:18:2b:29:bd:65:38:2b:d1:f6:ee:06:ae:6c:
         75:f7:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:31 2024 by rpki-client on console-fra.rpki-client.org