Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File:                     uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier:          aVCBsXm2xWUPaex+eCRfAgpKomUiEF89EPfwerkOwWA=
Subject key identifier:   FA:47:5C:B6:CD:6B:3C:E2:13:9E:1C:C1:EB:C5:A7:69:72:2B:BB:74
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer:       /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial:       072E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number:          0718
Signing time:             Sat 18 May 2024 22:37:23 +0000
Manifest this update:     Sat 18 May 2024 22:37:22 +0000
Manifest next update:     Sat 25 May 2024 22:37:22 +0000
Files and hashes:         1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: VqDoK4TDDoHKWeEqgoNehzeQA6sXvQdSUSSVqzGENeo=)
                          2: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: mT5QuDERTmVPlXZR5moXPT7cKPExBS2mAmCXS/H0poY=)
                          3: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XvMq/9vITeOjRr0vA0uouJy5AhVhjzN8FwnxzNY6RG4=)
                          4: F7807F84982911ED90F8C877C4F9AE02.roa (hash: 4e0sNbjIxvoEkL8TDPBUR7di7BEdxQf7HVEe2rLLQq0=)
                          5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: T7wBB0Q/OxACrFHdpRUHNW4aCrfVBO0wryHpyaFwA8M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
                          rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1838 (0x72e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
        Validity
            Not Before: May 18 22:37:22 2024 GMT
            Not After : May 25 22:37:22 2024 GMT
        Subject: CN=66492da2-2e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bc:88:6f:d1:71:6a:ab:c7:ce:33:26:f6:2a:
                    b1:34:3f:66:75:e0:48:cc:30:78:8e:8d:f7:38:54:
                    18:e6:9f:4d:0b:2f:fe:47:94:72:01:d8:8b:0e:6b:
                    55:a4:aa:de:57:e1:a6:1f:e1:56:f5:cf:00:11:c4:
                    f1:e7:22:8e:a6:29:c0:62:1a:4a:12:74:e2:e2:28:
                    d2:91:99:44:0b:a9:1e:a9:05:94:ee:15:ff:02:aa:
                    af:66:d6:3b:76:4c:f2:ac:07:d4:a9:10:59:f3:7f:
                    0d:70:65:ee:9d:58:9c:f1:23:92:6f:dc:b0:ce:5d:
                    c7:3b:51:b9:36:f1:82:fd:d9:72:32:0e:5f:00:b8:
                    6a:21:e6:b0:6c:eb:fb:80:d8:e0:57:ae:9a:a3:32:
                    e2:af:c7:fd:db:ec:50:66:0f:19:74:fc:33:62:1d:
                    fa:cb:c9:5e:56:7e:76:6b:e5:c6:8d:58:1b:b7:a8:
                    b8:9a:17:a8:d4:16:7f:54:ad:a0:b4:08:92:60:b9:
                    4d:2a:71:69:fa:18:3e:19:3e:54:a0:2c:c5:33:2b:
                    d3:78:ab:8e:6f:46:f3:28:60:4d:80:53:65:08:7f:
                    c4:86:78:35:63:90:85:b9:3c:b5:c9:9e:cf:36:01:
                    ef:72:1d:f8:ba:22:9c:2d:6f:37:50:6f:ea:39:da:
                    7e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:47:5C:B6:CD:6B:3C:E2:13:9E:1C:C1:EB:C5:A7:69:72:2B:BB:74
            X509v3 Authority Key Identifier:
                keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ce:4c:11:24:19:99:ff:cd:9f:2f:08:77:6a:fa:c4:ea:cd:
         99:29:c6:12:51:e4:4f:0a:10:85:71:ea:0f:6c:d7:64:8f:7a:
         b9:49:b2:7b:d6:c3:9d:85:da:0c:f7:80:09:36:7e:5b:41:59:
         56:04:37:dc:99:18:3b:3f:01:8e:ec:02:ab:af:c5:95:45:e0:
         8f:13:8e:fd:18:cf:36:06:90:a9:fc:55:05:2d:0a:e8:a0:51:
         d3:10:c0:17:f1:04:f8:1c:49:92:c0:43:14:c3:87:4a:d0:ff:
         ec:af:de:59:6b:60:78:21:48:c1:2a:37:f6:1e:90:70:62:58:
         97:20:27:f1:c0:9f:1b:e6:c5:8f:ee:a2:2f:f3:8b:a2:fe:94:
         e4:81:9e:53:92:f8:12:05:64:8e:d2:1c:bb:4d:f8:95:a5:8c:
         20:87:d1:16:2b:41:c1:c6:2f:82:cd:d1:72:c0:e4:04:24:6e:
         6e:c8:11:e1:43:7e:42:82:70:84:d7:c2:82:80:0e:78:7b:13:
         47:ba:cb:32:0f:23:5e:a2:c8:f7:a5:a6:18:bf:3f:87:75:cb:
         52:43:34:59:1a:c8:10:4b:ee:e9:d8:dd:7e:52:6f:c4:2c:df:
         ad:08:d4:42:30:70:ef:9a:96:7c:ef:39:2a:ed:de:81:d6:3f:
         06:5c:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org