Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File:                     uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier:          RGE97VZlcR/KCuQHilW4aUglJ5IbIOgdM/aA/yhUP2Q=
Subject key identifier:   39:D7:04:EE:1E:0D:96:F2:88:5E:C9:62:4E:92:31:E9:DF:93:64:0B
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer:       /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial:       0795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number:          077D
Signing time:             Sun 24 Nov 2024 20:46:56 +0000
Manifest this update:     Sun 24 Nov 2024 20:46:55 +0000
Manifest next update:     Sun 01 Dec 2024 20:46:55 +0000
Files and hashes:         1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: eI1KHTeB25KaLJ6APCmUsZjQ7/e6PoH17LsE8S/CiSA=)
                          2: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: mT5QuDERTmVPlXZR5moXPT7cKPExBS2mAmCXS/H0poY=)
                          3: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XvMq/9vITeOjRr0vA0uouJy5AhVhjzN8FwnxzNY6RG4=)
                          4: F7807F84982911ED90F8C877C4F9AE02.roa (hash: QEPgVgTqThfFbIRxW9/DnVJVfbESvP2iLqbTKo9iGJk=)
                          5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: T7wBB0Q/OxACrFHdpRUHNW4aCrfVBO0wryHpyaFwA8M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
                          rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
        Validity
            Not Before: Nov 24 20:46:55 2024 GMT
            Not After : Dec  1 20:46:55 2024 GMT
        Subject: CN=674390bf-9438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:26:22:ce:ea:dc:07:3e:02:31:61:7c:bd:
                    57:ae:55:72:a2:ac:99:9d:2f:c0:68:12:12:1b:e5:
                    df:9a:39:57:57:8f:5e:ed:9f:6c:b9:37:37:26:3e:
                    c4:4e:d0:cf:2d:47:86:31:42:c3:c6:04:be:85:a3:
                    99:5e:20:9e:1b:bd:3b:e0:fa:09:d4:85:e5:4f:84:
                    fa:b9:ad:c9:26:9e:e3:40:80:2a:c3:35:97:4f:fc:
                    fd:cf:d8:78:b1:b4:73:a0:2d:a3:0f:69:6e:ea:3f:
                    e5:77:09:eb:cc:dd:b9:4a:f4:d3:85:50:c1:78:91:
                    5a:e9:3d:4d:3b:bf:14:6c:d5:a0:1f:2c:87:63:c1:
                    f6:4b:59:7c:9b:55:8b:3d:b4:95:1e:b3:f2:84:0e:
                    d2:ed:66:fc:fe:70:5d:58:69:53:1d:e4:44:e8:7f:
                    ae:34:1a:70:9a:b3:a6:6b:a3:0e:c0:d2:45:3f:81:
                    07:20:4b:7d:ea:5e:7e:eb:8e:66:32:db:90:7d:8b:
                    50:c1:08:c9:cc:38:71:fe:e8:99:16:ad:8d:88:cb:
                    c4:b8:ce:59:9d:04:7b:59:52:2e:42:ef:63:f2:f6:
                    f6:38:eb:48:aa:10:03:66:91:79:94:84:c4:e9:ed:
                    de:4e:2c:b6:83:59:ec:f0:26:cf:df:ac:93:0f:01:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D7:04:EE:1E:0D:96:F2:88:5E:C9:62:4E:92:31:E9:DF:93:64:0B
            X509v3 Authority Key Identifier:
                keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:19:0c:dd:58:cb:65:16:d8:02:b7:79:3d:e1:0b:86:73:79:
         99:6b:ca:92:e9:3f:cf:f3:b4:aa:e5:21:1d:e0:07:dc:53:b7:
         ce:fe:48:23:54:d4:d1:ed:d7:16:f8:d7:8c:96:af:9a:27:13:
         85:d5:58:2d:31:70:0e:5b:68:9e:bf:37:2d:6b:08:57:59:bb:
         85:2d:ef:26:65:95:2c:5b:a1:28:7a:ed:39:fd:a0:53:19:31:
         dd:2b:12:02:72:5e:08:c8:85:0e:68:d0:51:59:ea:c5:6c:9e:
         08:4d:4b:79:21:3d:0b:35:d0:79:65:70:3a:2e:d7:94:9d:49:
         ba:44:d9:1e:84:b8:03:1a:69:ce:93:c2:f1:a3:a2:2e:cf:2f:
         fd:f3:a3:d8:99:4d:60:ff:2f:0d:66:94:07:ef:da:aa:ec:58:
         81:d6:4c:bb:ff:7a:c3:59:53:18:d1:03:52:76:c0:43:37:84:
         83:86:5e:a1:02:7d:0d:96:37:cd:e0:0c:70:73:42:a3:0f:0f:
         86:f6:8c:30:59:1e:5b:d1:3f:c6:bc:ee:e0:86:75:c6:a3:73:
         86:ef:ea:48:6a:a7:75:d5:ad:ed:67:e7:ef:79:e6:24:f8:c7:
         66:3a:4d:7a:e7:0f:c3:8b:2d:21:ed:10:bf:86:4c:dc:06:fb:
         2d:a5:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:00 2024 by rpki-client on console-fra.rpki-client.org