Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
File:                     yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json)
Hash identifier:          14E7Cof4nwHRGyMh7LzppygIMq23IiJkLAQCDQGnqq0=
Subject key identifier:   F6:46:7A:F7:95:49:7E:4C:45:1F:19:2C:EE:5F:29:95:F1:D2:6B:38
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Certificate issuer:       /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial:       0CE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
Manifest number:          0CCE
Signing time:             Sat 18 May 2024 18:47:10 +0000
Manifest this update:     Sat 18 May 2024 18:47:10 +0000
Manifest next update:     Sat 25 May 2024 18:47:09 +0000
Files and hashes:         1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: zW4BLUjYGQc7q2IRn8s/a8d42Tp/pNVr3zltteCeE1I=)
                          2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: IdpCmglzKnTuWiEkN1mXKmN0ZIbejMaPI07I0mLBkK8=)
                          3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: fzn2kw7bcUSde2NaFyxeUgbVl+0HbAZ4sB/jY7jLZec=)
                          4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: qNLD/9jkWK3923YNrlzKZBQYaakLeadvJS8Jy1xJDqI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
                          rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3296 (0xce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
        Validity
            Not Before: May 18 18:47:10 2024 GMT
            Not After : May 25 18:47:09 2024 GMT
        Subject: CN=6648f7ae-6af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:b7:e2:4c:42:6c:e6:f7:c3:55:61:09:02:
                    42:d8:7f:d0:8a:23:0d:8e:fc:1b:a2:d2:ec:98:37:
                    30:31:5c:b6:be:0c:a6:21:d2:07:eb:de:c8:66:ce:
                    c0:ed:f5:7c:18:83:b9:57:d1:b4:d8:3b:27:ac:b0:
                    1b:d8:b6:24:e6:18:98:56:18:43:20:e1:26:44:08:
                    b2:0f:2e:35:29:9a:51:56:f0:bc:e0:af:37:d4:8e:
                    4d:f2:0e:b1:27:88:bd:61:23:bb:b2:41:7a:d5:79:
                    eb:3a:e4:c3:2d:0a:9b:33:ea:e1:dc:52:14:f2:8b:
                    17:3c:1d:7d:7e:83:cf:b2:13:b8:82:8b:27:cc:a7:
                    ae:a2:38:31:68:b6:b3:cc:26:6f:80:8d:f5:a2:c6:
                    c7:5d:68:c1:fd:a0:ce:d6:d8:01:87:07:7e:89:3a:
                    d4:c1:30:f7:f5:94:b3:eb:3b:f6:66:29:d4:e3:51:
                    39:58:74:a7:e4:04:bb:09:7c:3e:af:6a:39:4b:7f:
                    58:34:4a:2a:bb:88:3f:16:3b:cd:a4:37:ef:aa:dc:
                    df:64:88:30:aa:87:7a:13:ac:9c:1f:c3:03:f1:c5:
                    2b:be:0b:40:74:3e:c8:b1:ab:3d:d9:6f:25:8c:84:
                    56:be:cd:f0:64:32:94:16:60:cc:11:6c:b0:c1:f8:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:46:7A:F7:95:49:7E:4C:45:1F:19:2C:EE:5F:29:95:F1:D2:6B:38
            X509v3 Authority Key Identifier:
                keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f8:77:e2:61:54:a4:bd:a7:46:b7:2a:ff:e3:a1:84:94:35:
         32:e6:5f:fb:a3:e6:1f:bc:ef:f9:d7:f0:a3:66:f4:6e:d3:42:
         aa:6a:1a:ca:5d:8a:8c:22:93:6a:ac:09:f4:b8:9e:f5:87:c1:
         a1:9c:be:52:97:bd:d6:3b:89:6a:0f:36:be:b9:bf:e4:aa:e0:
         06:4f:dc:00:a4:e8:f3:3c:36:00:9c:f9:24:42:ba:4f:98:55:
         d8:03:a3:b9:64:71:d2:de:9f:52:ac:c2:b2:69:2e:02:81:c4:
         4e:13:1c:aa:d3:01:83:bf:ee:2e:fc:d6:ea:3a:aa:35:60:df:
         f5:c9:dd:5b:9f:7d:f9:db:9e:2d:26:05:b2:2b:e8:b4:25:54:
         17:25:de:e0:19:0c:9d:54:b5:79:29:d7:57:20:3b:1a:65:e8:
         e9:e9:ce:d1:44:63:d3:f4:d0:e9:c6:2d:53:8d:51:6e:20:0d:
         0f:cc:1d:51:98:4a:bb:28:b1:ad:90:75:b8:3f:d3:80:20:50:
         7d:88:6f:bf:29:3f:c7:ec:87:e5:fd:ca:d1:e8:ef:3b:f5:45:
         4a:d1:0b:d8:6c:9d:bc:c8:3f:2d:67:39:6a:0c:25:cb:c8:ae:
         df:1f:b1:32:f5:24:0b:06:d5:79:9b:e7:2b:da:53:3b:c7:77:
         9e:db:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org