Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
File:                     yPzMxL6JiqkgZxNmoP15UynpIB0.mft (raw, json)
Hash identifier:          0nLuDSxUOhYMBdzFyjXS8MbME4cOuNLHUBYtyIu2Z90=
Subject key identifier:   5D:7E:E7:E2:2F:53:D3:BF:A1:19:D3:6D:6E:F0:1C:B3:E7:81:00:AD
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Certificate issuer:       /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial:       0B52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
Manifest number:          0B45
Signing time:             Wed 20 Nov 2024 18:54:41 +0000
Manifest this update:     Wed 20 Nov 2024 18:54:40 +0000
Manifest next update:     Wed 27 Nov 2024 18:54:40 +0000
Files and hashes:         1: yPzMxL6JiqkgZxNmoP15UynpIB0.crl (hash: JwZ3absaHS7yK0wyGxZqjrK3sofP7CL3k15CITLjMuc=)
                          2: 5407E320236911EA9967DA1CC4F9AE02.roa (hash: 7Qe+vax7U/UHiyHvcC0/AHUYcYPgeOOrxsZUaqeqXZg=)
                          3: 20748896236511EABCF20E10C4F9AE02.roa (hash: WBHTJ02r7No790rbFdZPQ4e1Vkcdj+CzlNb+ihLNe2o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
                          rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 18:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2898 (0xb52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
        Validity
            Not Before: Nov 20 18:54:40 2024 GMT
            Not After : Nov 27 18:54:40 2024 GMT
        Subject: CN=673e3070-ed5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a1:4e:d8:13:97:d5:85:34:8e:ae:a8:ec:d9:
                    dc:3a:55:ec:50:49:5b:b9:0c:fa:c7:ee:59:e8:4e:
                    b1:c9:a4:7e:d7:14:ad:21:0d:a6:0f:97:d0:40:72:
                    fb:11:bc:03:b3:50:79:9c:2d:6c:98:e7:44:0b:0a:
                    c6:f5:ef:59:7d:3e:a4:37:af:fc:34:7e:33:0c:7b:
                    fe:9b:dd:a0:50:4f:55:2c:99:0b:36:4e:67:33:24:
                    69:25:e1:2e:8e:58:d4:94:fb:4a:b9:0b:d2:25:81:
                    29:55:e8:82:94:8c:ba:c7:41:7d:03:32:cc:b7:f4:
                    13:10:d6:8a:2e:bd:64:24:91:9a:0a:06:c2:4d:b1:
                    f5:4b:3c:20:ff:d0:8b:09:d8:b4:a5:ba:19:a5:6b:
                    26:92:77:9a:86:a1:ec:ed:bf:1a:f6:30:30:39:04:
                    1b:a1:23:d6:6c:3e:40:3d:3a:de:9f:40:99:be:92:
                    61:0e:47:b7:a1:06:00:47:38:56:63:65:17:d2:7d:
                    99:91:ed:fc:75:c2:c5:9e:76:8c:de:54:f0:7e:c0:
                    42:66:7b:fd:9f:20:de:26:cd:ec:36:d4:b7:03:c9:
                    cb:bd:22:22:70:bb:3e:25:40:d2:4a:50:da:27:fd:
                    c0:b3:a5:bd:12:24:22:6d:4a:38:45:03:9e:30:71:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7E:E7:E2:2F:53:D3:BF:A1:19:D3:6D:6E:F0:1C:B3:E7:81:00:AD
            X509v3 Authority Key Identifier:
                keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5e:51:da:a8:0e:de:64:eb:22:1c:33:d8:aa:d7:a3:60:45:
         d4:da:b1:ed:4a:37:23:ff:d2:7d:93:62:81:6d:55:6d:7e:7a:
         38:35:18:5d:dd:30:5b:1f:40:7e:9d:23:64:3f:73:17:69:8a:
         4f:94:09:e5:cd:92:c0:ad:81:7e:cb:8f:9f:14:49:07:61:ce:
         bc:0b:90:26:b8:90:3c:3d:61:84:68:4d:6b:26:f1:6d:95:e3:
         cb:b3:5b:d6:28:6a:59:26:c2:8d:aa:8c:56:b1:a5:45:49:7d:
         03:3a:2e:78:8d:dd:8e:5d:f8:23:24:16:6d:54:0f:a5:50:9c:
         e5:d9:c9:b4:20:d9:23:a6:4b:3f:16:31:76:5b:a9:4a:35:75:
         84:9e:b6:e0:77:dc:ce:95:d4:9b:f8:c8:4a:42:04:29:99:89:
         3c:53:3f:0c:c0:24:be:92:cb:83:3f:b6:ec:54:b3:a6:6a:48:
         9d:51:c4:f0:93:83:c2:11:35:78:74:51:09:d3:e4:69:2b:d8:
         6d:ba:4f:e4:8d:34:76:cf:1d:1e:47:3b:08:a2:c1:a5:1e:a4:
         74:a9:bd:f4:b2:6d:bf:7d:63:28:a7:50:c6:42:c2:22:d6:b2:
         f1:22:d2:7a:89:a6:06:b3:e0:62:0c:ec:5f:f4:fc:f9:cd:58:
         20:80:33:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:07:25 2024 by rpki-client on console-fra.rpki-client.org