Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File:                     99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier:          hyyAtZJGy/wFIDu3947m3hTYBaLIJtR6O/JCcxFHdR0=
Subject key identifier:   27:DA:44:01:B9:CE:1B:0B:E4:1B:57:84:CC:F0:AF:84:79:6A:ED:34
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer:       /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial:       1A3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number:          19F4
Signing time:             Wed 20 Nov 2024 16:21:06 +0000
Manifest this update:     Wed 20 Nov 2024 16:21:05 +0000
Manifest next update:     Wed 27 Nov 2024 16:21:05 +0000
Files and hashes:         1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: 2ofQMAgphHO+x2De+chwboasPCGi5yMvn/PT7JUiSxE=)
                          2: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: jydEv4NneB7Sx0FI1skcD0suh5/17vxrfrRhEQ0JaqY=)
                          3: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: uAi5hk9bT6OpTbwWwY5GVK1G5kvFxxOzsk2pWZ48nYI=)
                          4: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: +QlUC0glkpkPjA7w7I6khloOS3EPNSs60LtlxtxV3uU=)
                          5: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: UAirDrULY6myyNx1vMq3KsBU3lZ7343RMeFE+Epfgj4=)
                          6: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: +kw+0Dd+hCJOF0NUg0Cg9CE8CUioX2H2bzk5xcJylVg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
                          rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6714 (0x1a3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
        Validity
            Not Before: Nov 20 16:21:05 2024 GMT
            Not After : Nov 27 16:21:05 2024 GMT
        Subject: CN=673e0c72-deca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:cf:d6:47:37:47:9f:c9:28:e6:43:06:a8:
                    9e:08:4b:93:8c:2b:3c:25:80:e0:0b:a6:c6:96:a5:
                    3f:2d:30:f7:b1:d3:f3:aa:2b:75:35:e1:d8:0c:21:
                    cf:1f:d8:2f:98:2e:c3:0e:dd:ef:bd:87:65:ba:dd:
                    f4:44:72:20:18:fd:00:80:d0:f8:08:97:0a:62:c1:
                    2c:b4:d9:18:c1:cd:a5:d7:96:34:84:25:a6:6a:84:
                    cf:18:74:22:4a:1d:c8:ad:8e:bc:b7:ff:3d:51:3d:
                    51:6b:b6:e6:b4:32:04:f3:db:d2:66:57:81:2a:6f:
                    56:f0:d2:4e:da:92:fa:90:6e:1e:cc:26:58:ff:a9:
                    af:0a:45:18:ce:3d:69:f1:59:87:cb:e9:49:f1:04:
                    a1:24:d9:5c:37:2a:43:2a:34:4f:0b:61:79:de:ab:
                    a9:bc:6c:49:b4:a6:ba:2b:82:f5:1a:8b:da:f4:a5:
                    42:b6:f2:81:75:63:11:a0:b0:2a:e0:88:2b:ce:71:
                    b1:b3:a3:57:63:4e:d7:ed:78:1b:11:c3:7b:64:75:
                    95:bd:69:44:58:e8:c7:99:de:51:a9:a4:ef:30:3c:
                    88:94:e2:ca:19:8e:05:f1:80:ba:e5:b3:d6:a6:59:
                    d3:fa:bb:7d:aa:69:c0:a6:ad:93:08:8f:61:8f:85:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DA:44:01:B9:CE:1B:0B:E4:1B:57:84:CC:F0:AF:84:79:6A:ED:34
            X509v3 Authority Key Identifier:
                keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1e:9d:36:9e:82:cc:c7:52:fc:67:56:7e:61:68:6e:66:3d:
         51:8b:75:75:5b:cb:92:40:ad:ab:2e:dd:3c:12:87:be:b9:cb:
         01:cd:0a:9b:cf:76:e2:68:4d:23:3d:99:8d:24:00:6e:f9:8f:
         e5:99:0d:5e:91:6a:39:83:c4:5c:ff:b6:45:62:6a:d0:d3:2e:
         1f:b1:a0:23:32:0c:ca:60:43:86:21:0e:6d:95:29:0a:05:e5:
         78:89:3b:76:5f:b2:5f:39:58:df:66:6f:71:25:21:f1:ea:25:
         0a:c7:2b:1e:d4:05:8b:05:80:6e:e5:14:c9:49:10:8c:e6:af:
         ce:9a:42:c4:80:b2:52:5b:7a:7b:fe:8e:51:c7:05:e2:2b:f4:
         4f:b7:2c:74:78:af:ab:b7:00:88:39:a9:ce:e6:ce:2c:5b:60:
         05:9f:d4:4d:8d:8e:47:9e:05:16:55:38:56:c3:96:a7:30:d6:
         49:76:2f:b9:bc:03:e0:65:f0:7b:0d:b7:94:da:1d:89:b1:b2:
         7b:f9:fb:56:4d:44:cb:6c:d6:bf:bd:d9:b2:a0:1b:c4:06:a0:
         a5:71:b2:a5:2d:77:91:20:fa:5a:6f:aa:3a:e9:e4:1d:0f:51:
         2d:a3:28:5c:86:e2:15:fc:bf:04:bd:df:27:dc:3e:54:6f:50:
         e4:af:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:45:03 2024 by rpki-client on console-fra.rpki-client.org