Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
File:                     Vyfu6NouLMefq6Da0ZyISCvRWdw.mft (raw, json)
Hash identifier:          3p70l+pp0SwQH8BwJNIe9uy5mi4l0SQ7kqZYdRXupi4=
Subject key identifier:   72:13:3C:CC:75:26:48:1D:62:93:3D:D5:9D:43:D8:32:64:FD:F1:77
Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC
Certificate issuer:       /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
Certificate serial:       02BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
Manifest number:          02BB
Signing time:             Mon 29 Apr 2024 03:27:59 +0000
Manifest this update:     Mon 29 Apr 2024 03:27:59 +0000
Manifest next update:     Mon 06 May 2024 03:27:59 +0000
Files and hashes:         1: Vyfu6NouLMefq6Da0ZyISCvRWdw.crl (hash: 4SszjEx74M+k/TxtCUQxMRIqaMpv49muo9NPF39B3GA=)
                          2: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (hash: qKwz8+c14WwjhtgoTFmPkHWwGU6d8jz1rJYBjBuoSfo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl
                          rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703 (0x2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
        Validity
            Not Before: Apr 29 03:27:59 2024 GMT
            Not After : May  6 03:27:59 2024 GMT
        Subject: CN=662f13bf-9366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:4f:3a:5b:ba:51:49:42:fe:b2:b1:90:fd:
                    1f:79:30:f9:81:f9:a4:ec:a8:3a:28:2f:7d:bb:d5:
                    97:80:14:4a:13:48:96:ea:f2:23:df:70:16:e9:8f:
                    85:2a:24:77:bd:5e:0f:4a:b8:0f:f2:cf:2b:ba:ac:
                    d9:a7:d7:4f:88:fc:9a:cd:d4:0b:9b:1d:12:c8:13:
                    f0:80:63:bd:04:6b:65:eb:04:33:1e:94:fb:82:ba:
                    98:28:54:10:36:e3:e0:22:0e:00:64:87:a5:0d:bc:
                    0f:0d:0a:4b:c1:4c:4a:c7:61:21:e2:8f:32:a5:94:
                    a9:0e:14:a3:f1:70:24:32:c7:8a:2c:01:98:20:88:
                    08:da:c3:bf:53:af:34:b2:8f:19:6f:68:9f:14:f1:
                    3e:d9:af:40:f5:7e:9d:65:b1:22:a8:db:04:00:98:
                    ff:40:f5:bd:3c:12:04:8f:23:e8:20:ef:f5:15:8e:
                    4f:a6:8b:21:44:b7:f7:f2:3f:89:10:59:c7:43:84:
                    03:e3:c5:e8:ef:49:3b:40:a0:f8:7d:8c:c5:6f:95:
                    38:ee:12:69:95:42:39:05:56:e4:5d:d1:49:38:95:
                    4a:cd:18:63:f0:b5:d4:dd:75:0b:49:7d:29:bf:8b:
                    af:c9:43:05:7f:b3:0d:8e:81:27:50:e8:ef:ee:4a:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:13:3C:CC:75:26:48:1D:62:93:3D:D5:9D:43:D8:32:64:FD:F1:77
            X509v3 Authority Key Identifier:
                keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ce:e3:39:c7:8a:a4:25:38:82:07:07:b2:d8:be:d9:06:77:
         99:24:fb:a6:db:a0:a4:b5:6a:35:f0:ef:69:bd:e2:99:a0:92:
         24:b8:82:cc:6a:f5:18:59:b5:1a:1e:03:7f:03:bd:26:3c:82:
         7d:b3:91:5b:bf:91:d9:f5:53:57:c8:fe:75:88:9a:98:8c:64:
         b3:b2:da:5a:a4:a7:31:95:86:41:85:3d:c2:70:e4:c3:30:29:
         3b:ef:fd:04:93:b4:94:00:f9:bf:c6:db:43:83:e2:d2:a0:9b:
         2e:0a:bf:5e:b2:5a:c5:95:48:12:3f:16:58:b4:eb:f9:30:61:
         ba:eb:e1:d1:d3:2f:8a:22:b8:e9:77:1c:d6:7b:08:e4:0a:cf:
         e6:ca:12:c3:e9:95:27:f7:7d:c3:45:3d:48:b0:97:80:1b:58:
         a7:99:e8:92:8b:b9:6f:b5:ca:f9:ec:96:32:f4:e5:af:bb:36:
         e0:87:22:07:ab:4c:21:06:f4:b7:27:a5:61:1b:44:16:93:a4:
         d0:f7:b5:bb:c4:18:d6:dd:c7:d8:b7:3b:70:5a:94:df:9e:23:
         bd:45:cd:df:05:47:46:45:cb:66:81:9c:a7:c5:9b:4d:7f:36:
         dc:95:3d:9c:2c:00:79:52:e7:15:3d:8d:a2:75:e5:8f:99:df:
         63:21:9b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 04:55:14 2024 by rpki-client on console-fra.rpki-client.org