Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
File:                     YQPK5q-yXkC6nl2kxULP4JtndCo.mft (raw, json)
Hash identifier:          +y6RwFwh4oL+OALShhDtoSytbX44NjUfiOYxFJRkBHw=
Subject key identifier:   B8:F5:1F:EB:FB:CF:69:0F:F2:C6:F7:EE:5D:CA:39:16:E6:CF:F6:99
Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
Certificate issuer:       /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Certificate serial:       08C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
Manifest number:          08BA
Signing time:             Sat 18 May 2024 21:28:34 +0000
Manifest this update:     Sat 18 May 2024 21:28:34 +0000
Manifest next update:     Sat 25 May 2024 21:28:34 +0000
Files and hashes:         1: YQPK5q-yXkC6nl2kxULP4JtndCo.crl (hash: pUEC2rTSUubtE51RUf5p9z49nofhg3/sHJfSaZZHOUs=)
                          2: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (hash: MU6LjfK4ZIIU2GJQBjNw0rChfQST0kcEksHSnhipM0g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
                          rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241 (0x8c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
        Validity
            Not Before: May 18 21:28:34 2024 GMT
            Not After : May 25 21:28:34 2024 GMT
        Subject: CN=66491d82-90ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8a:97:74:eb:30:fe:33:e2:d8:46:e6:42:5f:
                    74:e4:b8:b8:b5:6f:a2:6e:58:e4:6b:36:19:6f:9f:
                    d4:96:a5:35:39:28:1e:03:c8:c7:f0:23:e8:49:2e:
                    26:ba:15:ea:21:12:b8:de:f8:39:b2:15:f8:2c:ba:
                    30:95:c3:c0:35:11:02:72:12:16:a2:f5:50:a9:0b:
                    42:ed:db:ca:25:84:4a:cd:6d:0e:82:88:02:f6:04:
                    84:04:ad:2e:47:d0:4b:2c:d2:dd:6c:2d:d3:75:96:
                    a7:91:94:37:03:4f:9f:32:3f:11:73:55:32:ad:ea:
                    38:90:e7:e2:39:a0:91:79:10:44:2b:eb:40:2e:f7:
                    98:5e:3a:d3:c2:77:0e:8c:9f:00:1f:08:08:29:bc:
                    d5:d7:ac:80:cf:63:28:3f:59:53:3f:ba:e7:fb:95:
                    2a:54:ef:e7:85:82:9e:6e:19:4d:e4:9a:be:95:54:
                    c4:08:89:87:0b:61:af:f5:3a:ce:af:e5:6d:a1:a8:
                    b2:3a:3b:f1:82:81:27:db:f1:ef:29:0a:15:60:58:
                    10:af:8b:f9:00:83:58:8a:9d:e6:22:11:6d:64:0c:
                    c6:87:c0:d8:d3:d6:f8:87:91:4e:39:5f:a4:d2:a1:
                    88:ef:27:be:e2:89:c3:c6:0f:52:3d:a0:1e:fd:d5:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F5:1F:EB:FB:CF:69:0F:F2:C6:F7:EE:5D:CA:39:16:E6:CF:F6:99
            X509v3 Authority Key Identifier:
                keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d9:00:ef:2d:79:88:95:de:d5:b4:5d:40:99:5b:68:ff:5c:
         c1:27:fb:46:ff:79:1f:fa:51:a8:eb:fd:22:91:cf:6e:47:41:
         45:09:b1:ec:14:f8:61:f2:ce:28:4e:ec:86:ac:4e:b2:63:fc:
         ad:eb:bc:5a:96:4d:4b:e3:05:0d:42:8c:1d:e5:29:59:5c:fc:
         23:a4:e4:51:42:06:2b:9f:20:8e:ef:37:ab:34:cb:4e:50:1c:
         01:c0:3e:23:8a:cb:86:b4:83:15:67:5d:5f:7d:1b:64:97:83:
         6f:d9:80:b5:10:0b:37:26:92:6e:4b:d6:f3:0f:a5:fb:f6:b0:
         2f:ba:93:23:ad:55:3b:9b:ab:e8:b4:f6:37:48:fc:c8:4d:d0:
         cb:52:1e:c1:39:21:5b:3c:ab:39:e0:02:65:e1:dd:a9:6a:c2:
         9e:e5:19:63:75:cf:af:33:d9:4d:ed:b0:e0:21:70:fb:36:a3:
         81:ca:2b:f0:c3:40:30:af:b2:5e:4b:40:b1:75:65:6b:82:8c:
         fd:6f:52:e0:6d:d1:71:1b:db:ed:48:58:41:56:b2:14:45:5d:
         96:f2:c2:9f:cf:ce:7a:d1:e5:1e:5c:d0:b2:f2:93:1a:ca:29:
         1b:22:a1:62:cf:2c:de:da:22:a0:f8:83:16:4f:22:6f:4a:b5:
         23:10:82:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:14:03 2024 by rpki-client on console-fra.rpki-client.org