Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
File:                     yuPbit7noWq2ylN_I0ewIFvfT3Y.mft (raw, json)
Hash identifier:          Ews1Xucc8jz4ogmwXNmKLbbWdAyeHprG8Lu3sZgqJjk=
Subject key identifier:   B8:EA:41:8D:C0:8E:A5:C2:DF:3D:FD:9F:6B:0F:B7:21:BE:9F:DD:8A
Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76
Certificate issuer:       /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
Manifest number:          56
Signing time:             Thu 21 Nov 2024 05:16:55 +0000
Manifest this update:     Thu 21 Nov 2024 05:16:55 +0000
Manifest next update:     Thu 28 Nov 2024 05:16:55 +0000
Files and hashes:         1: yuPbit7noWq2ylN_I0ewIFvfT3Y.crl (hash: fjzoniEYbRxjvptP0gVFVY+MK1bbjo+//azCPLyGOd4=)
                          2: 12032AE02EAC11EFB73C0767C4F9AE02.roa (hash: xTsY4iW+fb2o0N8YA+SXz8YOTeNUYyhxpihIk2CiRFI=)
                          3: 66476E182EAC11EFAAAF8E67C4F9AE02.roa (hash: 5AufB2RsG7jdJMojc2DVF486w/PxZ39VMbcx9j28U7E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
        Validity
            Not Before: Nov 21 05:16:55 2024 GMT
            Not After : Nov 28 05:16:55 2024 GMT
        Subject: CN=673ec247-5a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:b7:ca:05:bd:c1:22:81:46:03:13:3e:9b:
                    28:9f:af:69:f9:98:f4:6e:2d:c8:2b:27:97:ee:c1:
                    ac:b2:5d:f4:25:98:07:d7:53:8b:83:ef:be:98:90:
                    5a:42:94:bc:98:4c:23:5b:c2:30:0e:19:60:9c:ed:
                    1e:03:2d:92:cf:b6:7f:ea:8c:5c:4d:dc:61:ca:ce:
                    bc:84:36:1e:22:d1:cf:8c:19:8b:ff:54:08:31:60:
                    8c:1d:6d:3a:03:ed:3e:94:27:96:1d:0a:3e:bd:ec:
                    39:3e:a5:19:6b:25:e7:c0:0f:d0:87:c0:bf:08:06:
                    b1:46:34:52:35:ed:11:7e:29:04:d3:f7:92:21:40:
                    fb:7a:ac:c1:fe:79:4a:5d:0e:9d:51:89:17:13:88:
                    23:2b:5d:b3:0f:7f:80:d5:bf:e7:15:09:7a:7b:6f:
                    a8:20:53:8a:fa:17:8e:90:20:52:8f:d6:f9:ad:59:
                    43:36:c8:14:65:5f:e5:f4:bf:23:2e:ad:3c:3f:28:
                    1b:e5:bb:85:20:01:5e:63:71:71:ef:a5:30:43:9c:
                    61:77:fc:9b:2b:11:76:4e:98:71:c4:78:a8:75:1b:
                    fb:71:d8:5c:79:25:c0:7a:2c:53:b3:48:a6:78:c0:
                    d1:47:51:9b:ac:38:ae:14:47:c3:33:12:44:0f:dc:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EA:41:8D:C0:8E:A5:C2:DF:3D:FD:9F:6B:0F:B7:21:BE:9F:DD:8A
            X509v3 Authority Key Identifier:
                keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ff:f4:e0:d5:ff:af:53:de:36:5f:53:74:16:e9:26:9b:c4:
         bb:2d:03:44:7d:74:e0:2d:08:ce:97:2c:8c:6a:00:84:39:41:
         e0:8d:8e:e0:40:ba:10:17:7d:93:56:69:de:76:a6:e9:40:10:
         9e:02:28:f4:94:ea:3f:06:33:12:95:bb:bf:31:1e:28:ac:2a:
         ba:cb:43:59:84:13:c4:ea:94:c0:53:90:49:03:bd:ab:7a:8d:
         b5:fd:fd:49:8c:64:37:64:57:da:d2:39:bb:03:76:f6:79:90:
         dc:08:7d:6d:48:0a:ce:9f:1d:e5:cf:ed:81:00:fe:d1:62:58:
         87:7e:f5:15:6c:27:a7:07:07:49:fc:2c:c6:89:4c:e8:58:b9:
         70:d9:e8:b9:ca:76:8d:9d:81:97:e6:ce:fa:ec:5c:2b:4f:a7:
         32:de:bb:01:6d:cb:0c:5a:0f:d2:dc:ef:33:98:1f:46:54:8e:
         ab:6c:bc:ae:69:f3:cb:88:c4:01:e9:20:10:f0:56:14:e4:d3:
         03:88:36:a3:4c:8e:57:7b:8c:90:11:0e:61:2a:a6:a2:24:40:
         92:69:78:41:5f:21:30:b1:02:b2:7c:e3:63:30:d0:a7:50:42:
         fc:cd:ed:b9:cf:14:ab:f7:79:66:c7:a0:51:59:1d:63:32:ae:
         04:45:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:53 2024 by rpki-client on console-fra.rpki-client.org