Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
File:                     Yl7U298nRjIvVZOFco6Ojl_4usI.mft (raw, json)
Hash identifier:          I7n1p68sWub5n8BFiH42yocdFMctwZrRwJShKcZ+s50=
Subject key identifier:   25:3C:31:B6:CF:58:BC:42:BE:CE:E3:CC:E9:70:37:A6:DC:E4:0C:4B
Authority key identifier: 62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
Certificate issuer:       /CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Certificate serial:       06BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
Manifest number:          06B7
Signing time:             Sat 18 May 2024 23:07:19 +0000
Manifest this update:     Sat 18 May 2024 23:07:18 +0000
Manifest next update:     Sat 25 May 2024 23:07:18 +0000
Files and hashes:         1: Yl7U298nRjIvVZOFco6Ojl_4usI.crl (hash: Huzs/3MsS+0C/h8WyhL+Cu8xrF5tevn856b9cXQMwro=)
                          2: ABDE298AFC3F11EDAEBF375DC4F9AE02.roa (hash: /0kj/+cyA0lFVKwSy4O03yer922oxpTgAdKTwwwd4w4=)
                          3: AC84146CFC3F11EDAEBF375DC4F9AE02.roa (hash: CfFzLD/HrTb/sbjuFW2ajYXU6D+KT1NmS0yWA1qoZrY=)
                          4: 82DC81B8141A11EBA65C6D68C4F9AE02.roa (hash: QRAFu+hCCYGo5eOBwoh5C17utwqtrDOH4+1NDtH/Y4E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl
                          rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1727 (0x6bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
        Validity
            Not Before: May 18 23:07:18 2024 GMT
            Not After : May 25 23:07:18 2024 GMT
        Subject: CN=664934a6-95b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:ff:62:df:a4:25:c4:ea:b4:03:8e:21:4f:
                    8c:ce:d8:ef:b4:5a:3a:c5:2c:fa:67:c4:d9:81:85:
                    9b:af:e8:d9:a9:82:f8:04:0b:62:8d:62:7e:06:5b:
                    a5:76:02:26:06:d4:b6:03:1a:04:7e:2d:e0:f3:aa:
                    18:b9:fe:9b:da:41:cf:fd:b1:78:50:d0:57:c5:c6:
                    64:2b:6d:3b:97:09:55:5c:9f:72:10:9c:0f:8d:8e:
                    6d:4c:01:ea:1b:0e:9b:d9:86:30:97:e4:ff:3f:ca:
                    31:36:43:96:88:48:1f:86:57:b8:0b:a7:a8:16:51:
                    1e:9e:39:05:47:c3:4a:66:fe:c8:aa:0f:da:73:c4:
                    01:d3:ef:1c:13:14:87:b0:05:08:7f:3d:1b:93:f5:
                    05:38:48:d6:61:6f:97:8c:dc:70:0e:aa:3d:7d:b8:
                    3b:1b:c3:59:31:38:69:21:5b:0e:88:d3:12:1a:42:
                    68:89:86:76:87:46:a0:97:45:ce:25:28:ee:3a:86:
                    c1:8d:18:0c:16:68:48:69:66:f5:4c:63:6f:8f:4f:
                    a8:f2:21:73:22:40:af:8d:ca:90:76:47:b2:4a:73:
                    36:5e:b2:f9:f7:f1:f4:a0:ea:d5:96:81:d4:64:17:
                    ce:d7:6d:45:29:b0:be:35:99:1a:4c:02:45:07:47:
                    f5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3C:31:B6:CF:58:BC:42:BE:CE:E3:CC:E9:70:37:A6:DC:E4:0C:4B
            X509v3 Authority Key Identifier:
                keyid:62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7e:7c:40:db:6d:80:e1:07:fd:a6:b5:df:24:67:16:93:28:
         b6:97:67:30:0b:f1:c1:b1:ce:69:fa:ad:4b:fc:74:73:b4:06:
         1a:50:59:62:b3:de:fb:10:67:93:b9:22:25:aa:cc:52:51:af:
         72:1f:73:29:a9:d6:15:d8:1f:8d:aa:ed:39:7c:f6:d7:ec:1e:
         24:35:23:3d:49:f8:3a:22:f8:f0:b1:95:8b:8f:4e:d2:f4:52:
         b8:4c:64:dc:21:64:d5:44:8f:a3:75:0a:75:5f:cd:7f:98:78:
         2a:f6:0c:21:32:8c:5c:df:2f:4b:83:c5:f6:85:3d:78:d7:33:
         71:e5:64:8b:cc:10:9a:3e:1c:75:c3:61:c9:43:94:aa:cb:15:
         62:39:f7:c9:ed:4a:e6:4e:f7:b6:de:d3:32:a5:46:0a:b2:c1:
         18:ce:d3:0c:78:24:eb:c1:ce:85:56:f9:f4:1d:ee:ae:36:8a:
         f7:cb:35:45:35:59:84:95:0e:7f:0c:44:0c:96:22:60:e3:a1:
         2e:56:91:a6:18:9f:8d:d6:17:4d:f0:2f:e4:88:16:77:1d:70:
         ab:3c:20:a5:5f:7e:cb:47:2e:76:c9:29:1d:ac:42:f8:e2:66:
         08:62:22:83:7f:63:d3:57:98:8a:78:70:5b:89:96:f0:23:83:
         29:f8:3c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org