Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
File:                     aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json)
Hash identifier:          84w3Uz6GLpkRjanWGKeYHlgPOt9CuxwuGR7hKYF3S3U=
Subject key identifier:   46:A3:F6:19:E8:95:CF:CF:97:56:49:1C:3F:01:7A:E2:1E:FD:74:63
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Certificate issuer:       /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial:       02DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
Manifest number:          02D5
Signing time:             Sun 19 May 2024 03:22:59 +0000
Manifest this update:     Sun 19 May 2024 03:22:58 +0000
Manifest next update:     Sun 26 May 2024 03:22:58 +0000
Files and hashes:         1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: ztrLYEEJVbseQKZBEedjxvnlbH70XxjL081d0rcMcek=)
                          2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: hlLA7G3gFRFclavtLC4AtgAOjrl5PBGQnMSlvQ5iLZk=)
                          3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: cddNE6Chf1nZGt0cOcCcSrNF4VTM1nV8tD0C7wKaK+M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
                          rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
        Validity
            Not Before: May 19 03:22:58 2024 GMT
            Not After : May 26 03:22:58 2024 GMT
        Subject: CN=66497093-3c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ff:0b:92:ad:cb:43:5a:84:6e:9a:1c:6f:44:
                    f2:6f:ee:15:99:f7:b6:d1:08:f7:5a:89:29:82:52:
                    45:c8:e2:7f:1e:c7:be:18:f0:53:81:3a:72:e8:dc:
                    12:a2:ca:52:06:05:12:22:02:fe:d2:77:d1:eb:a3:
                    f9:9e:78:e3:96:c1:8f:56:fa:ae:1d:1b:90:ba:8f:
                    bf:45:06:ff:da:42:36:54:a4:9b:df:dd:fb:38:23:
                    63:51:73:0f:cf:78:ce:c8:10:bb:bd:e0:03:50:9d:
                    e4:d3:d5:fe:ef:65:23:8d:58:8b:fd:11:0a:61:db:
                    55:73:f8:4c:b7:d4:89:b8:dc:f4:10:d4:6f:1e:5a:
                    18:3e:19:02:50:97:19:34:44:2a:64:e1:0c:ff:68:
                    32:7e:f8:10:f7:0e:ce:08:61:7c:5e:21:36:66:ae:
                    90:2e:05:08:e8:de:7b:30:36:99:0d:84:a1:6f:b0:
                    76:5a:b2:37:0b:3a:dc:8c:c0:87:71:6f:ff:63:cd:
                    8d:f2:e0:15:9b:c3:ed:62:a1:d1:85:7d:dd:c1:16:
                    f7:4f:3c:6a:67:ab:ac:c7:19:45:18:b3:6a:6c:0f:
                    91:62:77:52:21:1f:f3:e3:65:61:9b:e2:fa:8a:3e:
                    87:c1:18:86:36:c2:1c:27:82:a0:65:39:91:c9:30:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A3:F6:19:E8:95:CF:CF:97:56:49:1C:3F:01:7A:E2:1E:FD:74:63
            X509v3 Authority Key Identifier:
                keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:aa:69:19:b1:f4:98:f1:fd:7b:16:2d:d2:31:fa:6d:46:35:
         17:21:e0:ee:0a:ff:f8:59:be:7b:9e:96:d1:46:54:d9:f1:a4:
         a3:29:76:e3:10:96:8b:3f:3b:c8:44:bb:57:ce:a6:a0:2e:57:
         4d:61:de:f0:3f:47:84:b5:25:d1:a6:8e:74:92:92:a6:85:78:
         fe:5e:bb:eb:f1:de:d4:ec:f4:ff:2b:a5:7a:b0:1a:3e:e8:8c:
         24:47:07:25:90:5f:23:88:d6:c5:c0:15:b0:f1:29:78:45:f4:
         fb:01:80:07:f3:48:af:ad:3a:06:bf:96:38:cb:a2:e3:07:a3:
         7c:24:7e:3c:cd:3a:88:79:7a:76:b3:51:6f:6f:0c:bf:a0:2a:
         5e:66:6e:97:47:1f:0e:85:1d:2f:79:86:4d:41:e6:9b:7a:55:
         a7:2e:29:3d:64:3b:b2:1e:23:f7:bb:11:34:ed:4e:2e:4e:78:
         e9:fe:74:c0:6a:62:21:b1:c3:fb:f7:d4:af:6e:8c:03:9f:54:
         c5:9a:94:d4:b1:83:e5:07:05:07:e9:f6:b9:d5:12:92:c1:2e:
         30:a4:65:50:d4:f3:3e:a7:e0:74:80:28:25:0a:5c:fa:3d:b0:
         64:d8:44:13:0f:04:73:3c:5c:f5:76:50:e4:6e:a6:dd:0d:14:
         66:a7:7d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org