Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
File:                     r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft (raw, json)
Hash identifier:          CdtqJcacQo344WxKFTjUqt6Jec3tY2iOvNpF9kmg2Po=
Subject key identifier:   FF:85:C8:33:5D:9A:02:05:4C:8F:91:DC:DE:B1:38:6A:B6:0D:6E:DE
Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
Certificate issuer:       /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
Manifest number:          0227
Signing time:             Wed 29 May 2024 04:30:15 +0000
Manifest this update:     Wed 29 May 2024 04:30:15 +0000
Manifest next update:     Wed 05 Jun 2024 04:30:15 +0000
Files and hashes:         1: r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl (hash: tfFq2ZAZBnyLsZiMBmw8kXQxkfDVZ0zpDUZSOMSyAaE=)
                          2: 41C460BE1BE911ED81DB667EC4F9AE02.roa (hash: /Qco0nziFzpExGqN+EyfPbk9Kt6i6YYpujtFQ0tbQpc=)
                          3: 686E3868E40611EC8410A53CC4F9AE02.roa (hash: Kzf4O26eHsx5mWkjz9leMKiaEChtWzB2Xak+YK101es=)
                          4: 67E15AC4E40611EC8410A53CC4F9AE02.roa (hash: 2TFr/9Y+h49KVivecL/rk+jngkP0ic8scllA8rkE9fE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
                          rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 04:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
        Validity
            Not Before: May 29 04:30:15 2024 GMT
            Not After : Jun  5 04:30:15 2024 GMT
        Subject: CN=6656af57-225b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:41:5f:4b:0d:05:e8:62:02:69:a1:a3:d6:
                    6f:e3:86:d8:32:70:03:0e:c8:b3:5a:39:4b:6d:70:
                    cc:60:b6:40:c1:c0:0b:d3:38:22:40:70:2f:2d:da:
                    43:29:36:f9:2e:73:56:9d:3e:65:7a:10:12:92:0e:
                    96:56:c1:86:f7:04:4c:76:a7:7b:b8:98:8f:9b:35:
                    ce:cd:36:d0:5a:ad:0a:58:40:25:cc:62:7c:9b:66:
                    72:15:e1:70:0f:8d:fd:98:df:fe:9f:37:01:09:a8:
                    28:dc:ae:9d:6f:02:85:c5:1e:f4:36:b7:f5:68:12:
                    24:d9:60:a5:9f:4c:1e:b3:f5:67:5a:3a:b1:7a:94:
                    f7:56:7b:b3:34:99:29:d0:6a:2d:22:b2:1e:b0:8c:
                    82:d2:a3:f9:ca:e7:b2:c6:f1:df:1b:01:84:84:10:
                    da:b9:98:67:28:9d:c7:13:85:81:15:74:12:1f:75:
                    c9:ab:2f:6f:18:d4:70:26:3d:1a:5e:6d:88:19:44:
                    dc:3e:3f:60:c3:ae:6a:8a:43:2a:c9:f3:4a:79:1c:
                    51:7b:b8:6f:3c:6c:f0:59:51:f0:26:c2:b6:e9:4d:
                    66:1f:ba:fc:5f:75:00:e3:e0:0b:e7:e2:a2:a9:a9:
                    4c:69:1c:e9:84:29:3a:56:3f:00:79:11:8a:c9:89:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:85:C8:33:5D:9A:02:05:4C:8F:91:DC:DE:B1:38:6A:B6:0D:6E:DE
            X509v3 Authority Key Identifier:
                keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:62:24:80:30:19:a3:17:49:a0:76:6b:94:9c:80:f2:a2:27:
         63:8a:44:9c:28:45:8d:b8:82:af:bb:a9:b4:32:68:30:79:bb:
         00:5d:f1:dc:38:14:bf:29:19:ea:14:55:3a:89:f5:ca:79:df:
         8f:da:71:25:cc:51:cb:f0:e5:5e:fa:36:77:e1:75:da:79:eb:
         95:c9:de:35:77:14:70:c6:74:8b:3f:c3:a2:cd:67:76:4b:a2:
         14:fe:18:4a:54:cf:d1:a1:0c:86:36:91:11:6a:aa:d8:ce:64:
         b7:6e:9a:94:84:b4:35:a9:1a:52:56:5f:1c:3e:4d:a4:ed:e3:
         89:0d:49:80:d6:39:36:82:fd:08:21:3d:ae:55:d4:bc:5d:80:
         76:44:69:56:26:2c:37:59:e5:c1:81:18:99:41:cf:5f:b9:a8:
         38:93:71:33:c4:c5:23:ce:cb:aa:7b:a3:5e:68:89:a2:9c:18:
         7e:08:1f:f9:5c:bc:ce:42:23:ba:e6:e3:2e:63:85:2d:23:c1:
         08:b3:cc:57:89:b0:84:84:ce:8c:da:e8:6b:33:2f:9a:68:82:
         0b:73:87:da:60:75:b7:a0:19:2f:04:fa:5d:1d:08:88:52:9d:
         a2:f9:8b:30:c6:2b:12:22:22:37:51:c7:14:ed:d1:ef:02:85:
         3b:7d:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 06:12:15 2024 by rpki-client on console-ams.rpki-client.org