Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
File:                     yPzMxL6JiqkgZxNmoP15UynpIB0.mft (raw, json)
Hash identifier:          O+OljsOqaFW3LOq4hgRSsb/gD9AlsitMqV780Qj4V5Y=
Subject key identifier:   19:BF:F5:96:95:D1:5A:24:60:EA:DB:C3:B5:7C:6E:61:1E:B5:4A:92
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Certificate issuer:       /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial:       0B2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
Manifest number:          0B24
Signing time:             Fri 20 Sep 2024 19:09:34 +0000
Manifest this update:     Fri 20 Sep 2024 19:09:34 +0000
Manifest next update:     Fri 27 Sep 2024 19:09:34 +0000
Files and hashes:         1: yPzMxL6JiqkgZxNmoP15UynpIB0.crl (hash: dFtnrL5RC2kABI5Gml+BHQkRzijFNna+lfnknNgXBHQ=)
                          2: 5407E320236911EA9967DA1CC4F9AE02.roa (hash: LG99ahzKvHUI50lMm8kLGCqoH21CgLDO/v0pGeQRVeM=)
                          3: 20748896236511EABCF20E10C4F9AE02.roa (hash: djgV07qrDHH6crDLVxxC1a/aDQKWs88VoXNwUP4VqXs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
                          rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Sep 2024 19:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2863 (0xb2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
        Validity
            Not Before: Sep 20 19:09:34 2024 GMT
            Not After : Sep 27 19:09:34 2024 GMT
        Subject: CN=66edc86e-094d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:ed:38:f3:f6:ec:03:7b:4a:e7:dc:00:17:
                    57:1f:86:27:0c:56:74:70:28:3b:af:88:8f:ac:29:
                    9a:c7:94:f8:c8:a1:40:0f:51:fe:59:63:04:e2:aa:
                    8b:94:6d:6a:ac:21:bb:46:8c:31:27:6d:95:fb:2f:
                    5b:41:36:1d:15:2f:f2:a2:de:2c:f3:07:65:13:24:
                    77:c1:08:b4:73:4d:21:6e:e3:78:d9:fb:67:6a:17:
                    38:0a:c2:f2:eb:7a:98:63:90:42:26:cb:d8:9a:29:
                    76:92:90:f4:fb:61:44:08:cf:1d:7d:49:2a:e7:6c:
                    54:6d:bb:c2:82:e9:9f:5d:f9:3d:f4:30:99:8d:08:
                    d0:51:0f:f6:14:f6:0b:cf:63:5a:c0:c9:b7:5f:df:
                    c4:7c:c1:c3:45:59:0e:33:4f:ab:03:3e:61:59:87:
                    5a:2c:33:0c:01:8a:80:30:50:7c:04:11:c5:06:12:
                    b4:13:62:37:53:9b:e0:0d:c6:cf:a4:a3:b6:40:74:
                    37:48:e8:83:1c:cd:fb:e7:12:ac:07:4d:84:00:ca:
                    f8:88:30:04:95:f5:67:a1:ef:7d:d5:a8:c5:5b:6f:
                    82:63:b8:ef:a3:ab:f8:ab:4f:78:5d:16:b8:ef:e1:
                    1b:89:2c:11:21:b2:5e:39:f9:fe:8a:d0:93:9a:6a:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BF:F5:96:95:D1:5A:24:60:EA:DB:C3:B5:7C:6E:61:1E:B5:4A:92
            X509v3 Authority Key Identifier:
                keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:29:e0:c2:2f:48:5e:a6:f2:08:c2:b8:20:f3:27:92:64:28:
         58:cc:21:8e:f8:c4:0e:29:40:5f:34:c3:70:e1:cc:82:1c:32:
         eb:74:6b:b8:d4:e2:07:a1:68:77:13:3d:df:66:2c:d9:2e:40:
         d3:37:78:fa:99:14:2d:05:0a:b2:e0:53:c6:2c:a4:2e:33:dd:
         28:58:d6:7b:0b:f4:13:f7:8d:21:73:6e:e2:af:37:80:09:f0:
         fa:24:85:5d:e0:8b:7c:79:84:da:c2:61:e9:64:d3:a9:9d:02:
         2c:0b:ff:5f:d9:ce:e5:f0:89:9e:81:36:ed:c5:62:6c:2c:dd:
         5e:77:09:16:5b:2f:7e:eb:7f:44:c3:0c:4a:9f:55:ec:f8:cb:
         a1:e4:3f:f8:21:20:e8:07:64:c7:45:bd:fc:d8:d7:f4:cb:d7:
         2f:31:8c:84:29:cf:54:1d:b9:4b:da:4f:54:93:b1:c3:ed:a9:
         54:5c:d8:16:15:d3:79:79:dc:10:85:29:e4:93:f1:91:f5:de:
         13:16:25:1e:88:8f:0a:58:8c:c1:b4:f9:be:6d:03:b5:4d:90:
         b3:a7:95:94:d3:ef:b0:03:8e:09:a5:f7:5d:09:f6:fb:cc:b8:
         5e:1b:0d:fc:14:62:ac:fa:a7:66:76:86:21:74:93:e0:a7:8d:
         86:cb:a7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:59:01 2024 by rpki-client on console-ams.rpki-client.org