Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
File:                     gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft (raw, json)
Hash identifier:          T3E4lVolqnxT7kT/ILrxE/pY0xghjc9Zz8lxyrplPgE=
Subject key identifier:   88:76:90:DF:42:30:CD:77:4A:F1:5B:2A:18:48:40:8E:57:ED:A2:C7
Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
Certificate issuer:       /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Certificate serial:       07DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
Manifest number:          07CD
Signing time:             Sat 04 May 2024 22:11:50 +0000
Manifest this update:     Sat 04 May 2024 22:11:49 +0000
Manifest next update:     Sat 11 May 2024 22:11:49 +0000
Files and hashes:         1: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl (hash: QZkcbKYiFaEMWkUs7aU5pJmdYFIvtgkGvDcfrSJdWpQ=)
                          2: 50998080BCE911EAA0114B70C4F9AE02.roa (hash: obJMUNbIy43HgJwMFY+mc8pYpxA6mGk1YnB27nzN4vA=)
                          3: EF2481168BCA11EDBED45E54C4F9AE02.roa (hash: U8qeG86YNVEeYQ2EUu2Hbk5ljuYeXbHCMQZUZgHvTZE=)
                          4: 511CD5D4BCE911EAA0114B70C4F9AE02.roa (hash: HcfNqrgKNWQ9geVDnG6ihlSpDRocYt8Sn04dzPDg/Bs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
                          rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
        Validity
            Not Before: May  4 22:11:49 2024 GMT
            Not After : May 11 22:11:49 2024 GMT
        Subject: CN=6636b2a5-5eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:dd:ed:99:0e:ad:56:a2:25:31:a2:a8:5d:
                    85:4f:66:a8:87:bd:6c:e8:ef:69:bb:77:32:68:5a:
                    9a:90:d3:0d:5e:a6:93:a8:64:d0:8b:64:cc:ac:51:
                    bd:72:81:69:87:6d:f9:ba:ad:56:2c:c3:ca:79:ed:
                    4b:04:bc:67:b5:3d:e3:36:78:74:d7:fd:59:7a:93:
                    1d:01:47:c2:9a:0c:5a:bd:b7:8f:e9:62:70:fc:4f:
                    6f:01:5f:bd:ad:6a:f0:14:b8:3c:87:a4:18:c9:b4:
                    53:d4:21:91:ee:50:21:a5:85:c7:55:3f:10:4a:64:
                    45:8c:1e:a5:4b:12:2c:f1:bb:48:62:f6:05:c7:13:
                    84:69:47:0a:a8:84:33:5f:57:17:ad:0a:d0:1d:82:
                    4a:f2:1e:a2:d0:3c:02:16:85:4d:b0:08:46:54:3d:
                    66:e0:c0:13:02:81:5a:b2:73:29:c8:18:ce:97:9a:
                    1e:e9:37:09:18:95:7b:49:de:8e:e9:7f:fa:f0:e0:
                    46:ad:91:c1:54:8d:e9:8d:c9:40:9a:3a:45:ad:ef:
                    ec:cb:ad:ad:a7:9e:f7:5d:e9:8a:6a:2b:86:05:09:
                    f9:bf:c8:c2:72:6a:1a:46:57:40:62:57:b1:db:b7:
                    44:17:6f:34:12:e3:68:47:7f:c1:8b:e2:25:e2:e9:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:76:90:DF:42:30:CD:77:4A:F1:5B:2A:18:48:40:8E:57:ED:A2:C7
            X509v3 Authority Key Identifier:
                keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:4e:d6:a0:99:30:50:02:cb:ac:b1:ca:b1:77:2c:f2:ca:2e:
         23:af:e9:4d:78:03:0c:1a:49:7f:3e:4f:e8:0d:ef:19:d7:1d:
         f0:ab:51:71:f7:7b:a1:61:6e:fa:cc:1e:94:ad:39:2e:a7:13:
         7b:90:58:6b:e8:96:29:93:18:2e:12:43:9e:2f:e8:ac:8c:b3:
         99:63:ac:0a:16:08:4f:0c:d5:c8:02:16:fa:b3:17:b3:50:6c:
         dc:3c:33:24:9d:e0:98:b6:53:29:d1:4c:3b:ee:52:21:78:7d:
         65:ce:1f:b0:4d:41:55:fd:d5:51:5b:1d:97:f0:8f:98:d1:c0:
         70:70:99:18:ed:1b:88:0d:12:f5:38:ea:5e:5e:3d:68:93:3f:
         55:b8:29:4d:15:cc:5d:86:11:78:b2:e8:2f:99:10:d1:40:46:
         a3:3b:49:a7:d9:61:72:5f:a8:b2:e3:c4:8e:f6:46:09:75:64:
         0b:06:16:a6:51:d0:ef:f5:b3:5d:69:ed:68:1d:bb:45:19:b3:
         c6:c4:2e:14:20:98:c2:0d:6b:f8:e2:12:fb:c5:96:9b:b2:06:
         c0:f9:c5:e7:0e:bc:26:85:a3:95:65:25:71:e2:d6:06:3f:7c:
         9a:14:0d:89:73:2e:4c:31:86:94:29:ef:af:4b:9e:25:c8:27:
         fb:d5:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:14:42 2024 by rpki-client on console-ams.rpki-client.org