Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
File:                     bUGUPlFfU_mSYZyH8COTgRJT3mc.mft (raw, json)
Hash identifier:          l9rHlDLWUMIha+XBpWsn/2VrrHtjBYJXw5A1Omxz3SA=
Subject key identifier:   AA:57:EC:EE:A3:82:5A:C4:ED:17:45:C7:8A:CC:17:CB:9D:BF:88:FA
Authority key identifier: 6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67
Certificate issuer:       /CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
Manifest number:          52
Signing time:             Sun 19 May 2024 07:59:18 +0000
Manifest this update:     Sun 19 May 2024 07:59:17 +0000
Manifest next update:     Sun 26 May 2024 07:59:17 +0000
Files and hashes:         1: bUGUPlFfU_mSYZyH8COTgRJT3mc.crl (hash: dCGyw3IoL5vzSmokC31gIILQ13fiB84KFqT0xL9Srvw=)
                          2: 038457CEA3A011EEBE44947FC4F9AE02.roa (hash: B9Xl9dtPFHYUwGW/dxTfTQt13WyJ8k5DvaDQyy1SV7E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl
                          rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67
        Validity
            Not Before: May 19 07:59:17 2024 GMT
            Not After : May 26 07:59:17 2024 GMT
        Subject: CN=6649b155-53cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:cb:d6:7e:19:0f:6e:9f:76:44:b6:87:2d:
                    8a:d5:27:b6:06:c9:fa:b3:84:dc:c0:1b:18:66:f6:
                    99:bb:d6:57:66:14:1f:fe:13:15:9c:4e:06:a5:4c:
                    5e:95:d0:07:ea:09:d6:50:b0:4f:36:0f:bf:78:17:
                    03:25:fb:8e:78:08:ea:05:11:48:e0:0d:37:2e:6e:
                    73:c2:4b:c7:ad:76:68:be:c5:b4:98:2d:97:14:ec:
                    2a:e5:95:49:45:6d:ad:68:ff:e4:38:0d:9e:b5:0f:
                    3c:b5:fd:e2:7a:9e:31:42:12:24:8a:a6:3e:20:a2:
                    1d:c1:96:3d:dd:ab:f8:aa:34:6e:0b:42:69:e5:10:
                    5c:e4:3a:f9:9f:0b:8d:f4:6d:32:68:40:4c:fd:20:
                    2e:dd:4e:91:3c:0c:09:fe:2a:6b:ba:b1:ab:38:b3:
                    a1:3d:92:ce:35:55:63:26:6c:02:f7:1e:8f:7e:85:
                    95:c4:f2:de:43:40:3c:10:d0:9f:1f:1a:69:7b:90:
                    5f:79:15:1d:44:b2:44:71:55:2c:28:f6:b4:7c:d5:
                    ce:a1:bd:0c:b7:36:40:a7:be:65:10:81:98:e8:89:
                    c6:17:a0:9c:5e:73:43:f8:99:21:5a:51:6f:25:e8:
                    2d:93:64:b5:76:f8:e9:72:98:2b:96:f1:b4:43:b9:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:57:EC:EE:A3:82:5A:C4:ED:17:45:C7:8A:CC:17:CB:9D:BF:88:FA
            X509v3 Authority Key Identifier:
                keyid:6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9f:c5:ce:8d:c9:8a:40:c6:ef:bb:5c:82:37:bc:e4:41:43:
         3d:63:48:6c:86:1d:af:a5:91:d9:87:66:2e:18:01:89:18:3e:
         a6:ee:32:0c:08:3a:fc:b2:44:8d:4e:f4:b3:49:a9:8a:ce:a5:
         03:7f:55:a6:a2:49:aa:32:0a:08:04:b5:ac:c3:b1:2c:1c:b0:
         9f:42:a7:54:d9:ae:15:64:1a:1e:20:1f:21:7a:28:31:c4:42:
         dc:22:c1:c5:f5:cd:25:86:eb:ff:bd:66:e5:9f:53:e6:34:87:
         1d:24:ea:eb:dd:ec:5b:af:82:6a:ae:08:5b:ed:e8:35:3e:71:
         28:9f:1f:b9:82:46:56:10:8c:e2:20:74:4a:83:17:0a:11:64:
         bf:36:ab:20:c0:75:bb:1f:16:ff:7f:7b:44:e4:e7:26:4b:9e:
         65:8d:e3:21:ce:ad:aa:4a:2c:6e:89:12:52:0f:d0:02:8d:e5:
         e6:bb:8c:c7:be:44:7b:20:16:65:06:32:9c:72:dd:cf:fd:67:
         81:57:f2:8d:bf:4b:5d:5d:4d:b0:b6:50:1b:e7:69:65:3f:87:
         3f:27:ab:55:d4:0f:ef:b1:7c:52:58:21:9a:8c:d4:66:5b:ab:
         1a:f8:0f:3e:0b:6a:ce:6e:73:b4:d3:16:83:89:0f:eb:28:a0:
         51:65:1c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org