Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.mft
File:                     YEennPxgdi4PMhSxYHc2mnY_65s.mft (raw, json)
Hash identifier:          Ns29Dsw2bnX4Rs3TNCFmu8AYSPJ99clrZtOvU5hMbnA=
Subject key identifier:   43:FE:A1:00:8C:19:60:BD:AA:5C:98:BE:B9:56:C0:A3:2A:81:A6:F6
Authority key identifier: 60:47:A7:9C:FC:60:76:2E:0F:32:14:B1:60:77:36:9A:76:3F:EB:9B
Certificate issuer:       /CN=A91EE162/serialNumber=6047A79CFC60762E0F3214B16077369A763FEB9B
Certificate serial:       04C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YEennPxgdi4PMhSxYHc2mnY_65s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.mft
Manifest number:          04BE
Signing time:             Wed 20 Nov 2024 23:25:12 +0000
Manifest this update:     Wed 20 Nov 2024 23:25:12 +0000
Manifest next update:     Wed 27 Nov 2024 23:25:12 +0000
Files and hashes:         1: YEennPxgdi4PMhSxYHc2mnY_65s.crl (hash: OgGOFngDuVqrzHSQIJyrjpLrECqvQtVA/yIPMBMZKUY=)
                          2: 93B31E9600BB11ECB60BA225C4F9AE02.roa (hash: c3S0BvaFR7pPeOgvysFCrT5s6wA73iHrClvOLjPbAlg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.crl
                          rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YEennPxgdi4PMhSxYHc2mnY_65s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218 (0x4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE162/serialNumber=6047A79CFC60762E0F3214B16077369A763FEB9B
        Validity
            Not Before: Nov 20 23:25:12 2024 GMT
            Not After : Nov 27 23:25:12 2024 GMT
        Subject: CN=673e6fd8-4c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:ca:6b:8a:25:ba:8e:ca:7a:68:25:6d:f3:
                    14:16:ac:26:b9:11:f0:60:13:bd:fd:81:33:6b:e0:
                    d3:33:f2:ba:9c:f4:0f:3c:31:20:2e:77:15:eb:9d:
                    15:aa:b1:00:ea:13:ed:86:3d:6d:b0:5b:85:d6:06:
                    59:23:3b:b0:7a:70:1c:1b:bb:4b:47:68:16:2a:88:
                    56:65:82:67:b1:6e:9d:85:a7:eb:26:5c:a2:16:b1:
                    c1:07:ff:a2:4a:cd:e5:8b:c9:04:60:a1:d0:bd:15:
                    31:2d:f4:88:04:78:e7:83:9d:0f:e1:c0:75:58:85:
                    16:3c:0d:71:d8:74:ab:30:db:83:5a:05:84:b2:3c:
                    11:57:79:8e:5a:64:7e:42:59:47:e6:d0:8e:e0:38:
                    af:05:5a:b8:5a:87:73:f6:78:3d:f3:f6:58:78:9d:
                    fe:08:67:da:c5:76:ee:4f:03:10:20:6f:10:6c:64:
                    29:44:37:6b:34:d8:ab:66:2a:f1:fd:54:7c:8a:c9:
                    46:a6:31:ae:b2:c6:95:cf:9d:1c:b4:ca:ae:2f:ab:
                    09:cf:c5:53:7e:cc:67:11:de:ea:21:8c:0c:72:5e:
                    75:2b:88:4f:ae:aa:18:46:5f:1f:c6:fd:09:63:16:
                    bf:86:2b:03:c5:3d:4b:c7:92:d9:8f:74:96:28:d4:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FE:A1:00:8C:19:60:BD:AA:5C:98:BE:B9:56:C0:A3:2A:81:A6:F6
            X509v3 Authority Key Identifier:
                keyid:60:47:A7:9C:FC:60:76:2E:0F:32:14:B1:60:77:36:9A:76:3F:EB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YEennPxgdi4PMhSxYHc2mnY_65s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:64:ae:b8:18:4e:7b:5d:b3:6b:c0:75:04:ce:87:fd:71:5a:
         28:75:51:5c:6a:18:33:a9:7c:36:b9:b9:24:ad:69:14:db:46:
         b3:28:3e:35:bd:21:17:03:c5:13:64:f9:56:98:7b:ed:8f:9f:
         3a:88:68:04:f5:85:b6:c1:d7:83:80:bd:b6:aa:24:96:41:9c:
         27:76:d6:8d:61:86:7c:9c:d0:01:0d:85:4f:bd:78:5c:43:4e:
         f3:d7:ea:65:83:35:95:69:a2:b5:a5:1b:4d:46:29:d8:7e:7a:
         dc:50:a5:1f:82:38:3b:f4:77:e4:81:8d:aa:3b:0d:1c:ca:e6:
         a1:97:27:cc:35:c5:d1:ba:48:77:58:aa:c0:1d:16:52:52:41:
         7f:cd:11:01:9c:b7:58:7f:ae:c5:1b:98:5b:df:ad:01:4b:00:
         d5:9d:96:7f:6f:95:26:db:00:01:a9:42:6c:35:a3:e6:11:24:
         cd:a4:44:ff:d6:0b:a8:09:5e:a6:72:c4:47:24:54:19:74:b6:
         25:4c:68:00:2c:61:a2:8b:dc:5b:de:a1:63:fb:45:f2:92:d1:
         c5:ca:db:ad:aa:9e:0c:47:aa:ea:ae:ed:df:dc:bf:7c:d2:b7:
         82:11:90:01:ee:d2:f7:20:59:6a:f0:e7:f1:1c:77:53:9c:9a:
         f1:45:fe:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:26:06 2024 by rpki-client on console-ams.rpki-client.org