Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
File:                     xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json)
Hash identifier:          xbIhGWUe3iqRDJTl7kFLDkEVf7NFxkWzAGdTWHvudLI=
Subject key identifier:   97:5E:83:2F:11:12:FB:A8:BB:4C:B7:83:23:4B:20:6D:1C:F2:0C:3B
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       1859
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
Manifest number:          1606
Signing time:             Sun 24 Nov 2024 16:49:38 +0000
Manifest this update:     Sun 24 Nov 2024 16:49:38 +0000
Manifest next update:     Sun 01 Dec 2024 16:49:38 +0000
Files and hashes:         1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: KnXH22Qx39o/cQTgIjkUbgRIvYYTwSjJtdB9krfNe7M=)
                          2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: uTH4DdnkHvUCoP3voYzyx8m9UxRezv60J9sATz8UShU=)
                          3: F326C3EA8C1411EFB4E6476CC4F9AE02.roa (hash: RCY8Z//IeADlCFFXLlQOUwrqKHaQ15YtmXYK2zgoO1E=)
                          4: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: +pWu5uw9xjDAeg9sOYWF+9gmrwo9NbIlliG3GcgxTeE=)
                          5: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: HbzRdIs3KuV/WLcwtWC1hb/c2HWLxUc2yZDreu1apGM=)
                          6: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: 59pY/EzDVxdAKRkl477DnesloWwKNbY2A4TWt1wm+Hk=)
                          7: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: 0e7s2VX4IOKAD09bdsuYVHs8PnbwS+oaZ8v6sVdfh0s=)
                          8: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: TXxipvWYdHmo+yYnHI7mxR0Ldfec2TqLDPpiUwEXPl4=)
                          9: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: 6RPn1a+rWd2NLisQdeM9L8BHTz2fD0+yCLXi5mKnbws=)
                          10: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: r6ib9/db7Uzs6OwRGIIIO3AR9xUdnpzwielA/LB94vA=)
                          11: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: NI+PprOlP5jlHG06h5RV+CypYbwybUF+B8HHASYAzBk=)
                          12: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: nL6wEW9pLomfYHclEU8sPpPRG0B+AMu68rYHS2BYRDE=)
                          13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: eBFGO12oDTyqo1p6145sG6wYHSIxsBjmKQNKXZiPJ/4=)
                          14: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: Vjf7rkp8KyMZGDhNVi0wiawcIT6VPm4cT58TPwnuxPs=)
                          15: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: dRy4ONb4v34L30ZpAyIfzGQhzoL7vsaHAN/Vx2HOo3w=)
                          16: 67060F128B9F11EA97BB8046C4F9AE02.roa (hash: BT3CHYNvTTOU0gvsA7uRhKP5bTXucEk4bef2nc7ZJw4=)
                          17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: D1KjUMFofudRUwWJUdVjvjvnmajrctF+9yB2FinXDPs=)
                          18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: DB0+EV/wjZ8hgRmxdeOh9oqwLTckqJeeREMfiYlibiw=)
                          19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: fpNRdknQbM5LVmihuBMCm1u/UUdLBno06I/tLl9VVqY=)
                          20: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: wFJyDSA5bve8q453PoeDdrgwvukF88huEeIw8fjT0YQ=)
                          21: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: juFSe29RPYnRSz5XE5IgcrXbYaR8HBC4GX2YxM6Tzzk=)
                          22: 3AED95046D0111ECA5893B2BC4F9AE02.roa (hash: IfrvGQR6EZnxKh/ee5nDvGjpbZn9NQYw1QY+cCWCkhM=)
                          23: 97AAC8FE86A011EB8BEAC92BC4F9AE02.roa (hash: 4X5x/3ec+V05enTyEyghP4l5VMbIiRW4BtGu3szunNA=)
                          24: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: eppiGU0Ikrp76OEav4S55XpXg/bdFzMm0ZF3JrhrakI=)
                          25: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: /cYlUkny1IQKuDP/jKnNDzmTJRWVUTKZHhg+6p55ztY=)
                          26: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: wCnwV3IknWg2UI9wgIAczXf1nfZYYJA94t1tvzalvT0=)
                          27: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: a4R69zqfuBXEkLHoeraLc0Jk3N5of8fejTinTcqxDOM=)
                          28: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: Qk3NMR9/JepHhDU0ep1d3B5hTUeiOLnX0mNWbER7/QY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 16:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6233 (0x1859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Nov 24 16:49:38 2024 GMT
            Not After : Dec  1 16:49:38 2024 GMT
        Subject: CN=67435922-1287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:8a:bc:0a:62:82:a3:bc:41:35:77:5d:0a:
                    65:e6:26:ae:05:45:5f:05:2f:46:25:21:22:75:ad:
                    88:27:c0:72:20:a1:eb:73:94:69:30:e0:18:13:fb:
                    44:4b:77:31:de:79:84:f2:de:83:d0:75:0f:bc:23:
                    b1:5b:db:d1:78:47:87:e6:94:3a:4a:cd:de:24:77:
                    62:fa:36:d7:9c:c8:f9:99:e4:31:16:86:2d:98:57:
                    3c:39:f0:fe:d8:61:fa:52:ab:6e:cc:bb:25:f8:10:
                    5e:8b:27:b7:25:00:78:e9:73:24:b5:3a:a1:4f:75:
                    f9:cc:a7:6f:41:cc:41:37:6e:86:c8:c2:2d:db:75:
                    83:98:36:fa:6c:de:fc:fb:dd:12:0f:47:06:d1:3a:
                    48:2f:d2:20:39:3a:2f:a0:62:bf:4a:0c:08:45:0b:
                    08:79:be:72:2d:38:cf:eb:3c:5d:4a:96:63:c0:15:
                    5b:57:b2:11:aa:31:54:d2:90:56:6e:76:a7:54:18:
                    39:bd:84:b5:30:6a:08:14:fe:c2:43:56:c1:d7:fc:
                    39:7b:b9:4e:db:7d:7d:21:05:60:58:34:18:81:e4:
                    b9:45:23:0a:1f:11:3c:52:e6:55:42:4f:9b:45:52:
                    ad:61:2b:d8:1f:ef:37:fb:c4:ef:50:c3:2d:92:ff:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5E:83:2F:11:12:FB:A8:BB:4C:B7:83:23:4B:20:6D:1C:F2:0C:3B
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c3:81:03:17:af:27:f6:d8:42:9d:8f:b8:0f:c6:b5:95:f5:
         2f:88:a9:1c:5a:08:85:59:8a:07:c6:b3:8d:b7:ae:8e:68:73:
         53:3e:a4:ae:f9:76:0d:b0:76:7b:0f:89:d0:87:ac:0b:32:f6:
         64:76:5b:f8:78:66:77:2d:ec:6d:6e:1d:5d:43:85:87:ff:8b:
         97:c6:6e:a1:c0:36:d0:4e:c5:e3:95:88:8d:cd:3f:4f:f1:a6:
         3d:82:13:d0:88:03:71:e3:96:44:95:d2:2c:c1:35:e1:65:4b:
         37:37:ad:d8:b5:14:d1:22:bd:e2:aa:2f:b7:bf:fa:77:56:0f:
         a7:46:d9:7b:24:a3:3a:65:97:cb:09:b2:37:4e:da:98:08:b8:
         d1:da:c7:62:9c:b6:54:8c:04:be:92:2d:33:56:2c:53:8e:d0:
         aa:06:23:95:b3:63:75:e8:7e:74:2e:ca:6b:5b:bc:33:8c:54:
         60:27:b2:ec:4f:5e:88:54:57:13:9e:2f:ef:40:7c:29:3c:1d:
         20:7f:a1:18:57:de:34:75:d4:1c:bf:47:90:82:f6:83:2e:75:
         77:f4:fa:13:68:b3:d5:e1:d3:1d:8c:e8:f7:2a:ef:66:89:cc:
         73:39:4a:d3:c5:0e:be:75:e5:25:42:46:61:6e:1e:75:76:34:
         8b:81:cc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:59 2024 by rpki-client on console-ams.rpki-client.org