Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
File:                     etynHr4-GRMw4DyU0rT0_4mIRcU.mft (raw, json)
Hash identifier:          7wNS+VhlcTWUh74TIP5v+aAZZpx3MP/+KCanqu77KNQ=
Subject key identifier:   55:87:77:FA:68:E3:0D:F3:CD:00:BD:1D:32:51:82:D0:6A:DB:7F:46
Authority key identifier: 7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
Certificate issuer:       /CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Certificate serial:       0708
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
Manifest number:          06FC
Signing time:             Sat 18 May 2024 22:42:24 +0000
Manifest this update:     Sat 18 May 2024 22:42:23 +0000
Manifest next update:     Sat 25 May 2024 22:42:23 +0000
Files and hashes:         1: etynHr4-GRMw4DyU0rT0_4mIRcU.crl (hash: NJfBSeEmWE5VHAAcIAp8KlV1bQZtyOT3nMU3+VXbGn8=)
                          2: 86CDBD00FEB711EABA9B645CC4F9AE02.roa (hash: S0WFx0QurM5cEvZ/Ed0rcX8InfPVDRAgdkIe5WxR3PY=)
                          3: B7DF4CB0143711ECA137850DC4F9AE02.roa (hash: AxQaM4Gxf3YlOZqcdZ2I2wZctY7sCdNdtl07aP81WKw=)
                          4: 1296A2EEFA1B11EA94AA6082C4F9AE02.roa (hash: 7K54+/VFf21Df0uRMCcf4n+keDkShwaPxc6xpicISbY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
                          rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800 (0x708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
        Validity
            Not Before: May 18 22:42:23 2024 GMT
            Not After : May 25 22:42:23 2024 GMT
        Subject: CN=66492ecf-9186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:02:0f:27:a0:43:42:64:16:cf:ea:a2:7a:4a:
                    ca:6e:fe:fe:d4:36:e2:9f:11:57:ef:ab:72:d3:4d:
                    a6:e7:bd:58:36:ce:0c:60:de:88:93:89:19:96:8f:
                    32:e0:a7:c7:a0:b0:85:2e:7a:bc:7c:57:92:52:1a:
                    e3:df:5c:ee:4a:a4:83:21:fe:28:0f:81:e0:4e:aa:
                    21:1d:d7:0a:5a:f0:11:93:81:67:f1:e9:50:af:21:
                    e9:00:96:20:66:f8:04:e0:41:9a:b8:14:f2:53:d2:
                    0e:24:25:2d:c7:8e:c8:96:df:7f:ab:69:57:23:94:
                    11:f0:ba:93:8e:ce:2d:d5:35:b1:e1:f6:0f:71:be:
                    4f:83:fb:ad:74:e4:4d:01:df:a5:fb:83:2d:91:85:
                    7f:ff:e9:1c:b4:9c:00:0c:9b:8f:a2:83:5b:5d:57:
                    b9:50:79:30:01:f2:ec:2e:1e:44:63:79:23:e7:2f:
                    c2:d6:ba:5c:0b:6d:00:93:1a:1b:b4:0b:1d:57:7c:
                    10:dc:cc:30:cf:60:50:87:5e:c2:8f:6a:d3:68:cf:
                    c8:61:e8:88:82:84:80:45:e1:4c:de:b4:e2:1c:c5:
                    1c:1f:1f:1b:ca:42:e1:e8:07:af:2a:cd:74:5b:25:
                    c4:32:6e:2d:99:54:38:1b:b4:ee:17:f7:0a:cd:e1:
                    4e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:87:77:FA:68:E3:0D:F3:CD:00:BD:1D:32:51:82:D0:6A:DB:7F:46
            X509v3 Authority Key Identifier:
                keyid:7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ff:9f:36:3f:bf:a5:e7:c7:f8:2b:a3:72:2c:af:bd:f7:fa:
         66:98:f5:9f:84:eb:0e:e9:90:79:5b:15:f4:4f:df:4a:cb:5e:
         2d:5f:e6:a3:d8:62:e0:da:fc:15:84:26:3d:29:b0:10:2f:c4:
         88:21:68:e6:b3:02:b8:57:90:8a:28:db:8e:6f:bc:a5:f0:9d:
         46:91:0d:60:a2:d6:c5:7c:c8:d2:12:c1:74:ba:49:2d:28:61:
         7c:7e:00:39:9f:60:99:d9:d8:97:66:2f:d3:43:9f:b6:18:55:
         74:2b:20:de:66:8d:83:2a:5d:45:22:f8:26:f6:5d:48:a1:02:
         c4:b3:72:ed:3b:5e:48:0b:34:0a:58:01:7d:a1:58:cd:16:39:
         80:be:c5:4b:64:ac:26:72:99:2a:52:17:f6:ac:83:2b:51:cc:
         60:fa:be:bd:ef:ee:0c:39:67:87:f9:52:2a:38:32:fe:98:af:
         32:3e:2f:c2:e0:d6:2d:db:b2:a1:e3:13:e9:bd:6f:a6:70:9c:
         16:d9:16:cc:e2:97:09:44:6e:ce:3d:a5:19:f1:99:d0:06:2e:
         06:19:95:04:04:99:4b:c9:81:97:65:1b:a6:47:69:e2:6c:c7:
         8f:94:92:57:46:b7:fd:80:80:8b:ab:96:ce:8c:80:69:41:03:
         11:88:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org