Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
File:                     yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json)
Hash identifier:          YqYcqhA8k/q/hIC+0V+GMeZYraYrX0JiHlobthzNbMM=
Subject key identifier:   5C:FD:A6:48:F2:2B:36:89:B1:A0:55:C9:9A:19:06:5C:59:8E:1B:32
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Certificate issuer:       /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
Manifest number:          011D
Signing time:             Sun 19 May 2024 05:11:06 +0000
Manifest this update:     Sun 19 May 2024 05:11:06 +0000
Manifest next update:     Sun 26 May 2024 05:11:06 +0000
Files and hashes:         1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: zX/B0np6ovYtmVMRzA6bpsKblnAPtyf5kgvDwnmNRBg=)
                          2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: +DHv0TsS0BTgWMTGKL7AqwoeixABhUbNIevclE5IwxI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
                          rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
        Validity
            Not Before: May 19 05:11:06 2024 GMT
            Not After : May 26 05:11:06 2024 GMT
        Subject: CN=664989ea-b2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:21:1a:17:7b:b4:c1:27:a5:ad:4e:cd:b8:
                    08:ba:e8:b2:19:0d:d8:fb:4f:22:56:89:9e:a6:d4:
                    35:fc:ff:47:44:3c:4f:c2:1d:22:7d:50:4f:cd:c6:
                    90:1c:14:0b:88:5e:4d:15:61:7a:04:2f:dd:af:de:
                    6a:2a:77:27:79:69:b5:85:e9:8d:a9:fd:de:67:5a:
                    67:53:76:bb:59:63:1f:0a:90:11:0c:b8:5a:0b:b7:
                    7f:2a:97:d3:b5:4f:19:ea:96:90:2f:0e:e5:77:87:
                    78:06:d9:7a:ab:73:6a:b3:a2:f7:ef:0a:65:03:09:
                    33:d4:a6:1e:43:05:7e:6a:52:01:db:96:0f:41:b7:
                    c0:e3:b6:9e:05:0f:25:d5:c8:1e:ae:f5:94:0e:86:
                    83:2f:d9:b6:f6:94:24:18:cf:78:72:07:15:c2:2b:
                    1d:fb:37:75:0d:37:ce:18:ac:96:93:e8:1a:46:9b:
                    cc:2c:ca:af:31:33:db:bb:f4:2f:eb:fb:26:b8:18:
                    2b:bd:f2:9d:e6:6f:a5:6e:58:67:b4:2e:47:da:bd:
                    1d:16:a7:fa:7b:fa:03:fd:88:18:c1:f5:af:eb:c3:
                    7d:95:30:66:fa:79:18:26:be:69:19:9f:f2:40:3d:
                    a7:cf:30:7e:73:d9:14:c3:6d:2d:74:41:c5:0b:87:
                    da:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FD:A6:48:F2:2B:36:89:B1:A0:55:C9:9A:19:06:5C:59:8E:1B:32
            X509v3 Authority Key Identifier:
                keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9c:f3:a4:0b:83:f3:ae:1d:e8:b7:46:47:73:a0:c4:b6:a8:
         b9:6e:78:91:46:83:8b:14:53:1c:f2:3f:52:cc:d5:87:33:24:
         52:65:73:2f:ea:78:c4:90:a7:2c:b6:f0:ea:65:73:63:98:06:
         22:e0:35:29:7b:ea:6d:a0:96:1d:e5:df:a4:f7:33:b2:f6:1a:
         94:60:ed:a9:47:9b:51:61:29:72:b4:c7:b8:1a:72:34:3b:0e:
         66:15:8e:eb:fe:9d:9a:4d:7a:1a:a8:b4:1e:aa:a6:d9:87:ac:
         e4:ad:92:aa:66:8e:a3:c2:00:06:d8:e1:9b:e8:15:c7:41:36:
         d8:12:aa:f5:0b:10:10:79:cb:37:fb:23:37:3f:14:6f:0e:55:
         d9:e4:20:f3:f6:09:06:8e:be:7b:3b:f8:b0:f2:0d:b5:9a:d5:
         81:51:e0:68:18:91:a3:f5:84:a3:52:1e:11:5a:b2:ad:b4:dd:
         e2:91:9d:7f:0d:0e:b3:03:88:0e:d6:29:ff:18:a1:39:16:83:
         1e:5e:c8:b5:65:26:1d:25:b0:d9:4d:d7:f4:a1:38:6c:8b:af:
         df:37:f1:22:c9:22:17:3c:2b:d4:cc:06:40:d5:14:b3:37:b7:
         0e:b9:ba:29:15:b2:82:26:d5:dd:a1:7a:ec:30:23:b1:b5:71:
         91:6d:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org