Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File:                     YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier:          c+MeWDfgy2N5RLXqWJuHYMSNfH2ojaJ3eCq1Xt3VnwY=
Subject key identifier:   3C:5F:2B:DE:FF:F9:5C:0B:B1:3A:E5:0A:A7:38:34:49:11:62:6C:32
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number:          CA
Signing time:             Thu 21 Nov 2024 03:55:47 +0000
Manifest this update:     Thu 21 Nov 2024 03:55:46 +0000
Manifest next update:     Thu 28 Nov 2024 03:55:46 +0000
Files and hashes:         1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: 2lmbUMCW5ry8Lf//9WqlkLXwnrRNIYg7hFwjcen08So=)
                          2: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: HWR/P/AZhRPwJK+7MD3Snns1zA5ghns41mNna47imy0=)
                          3: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: dHUWyA7t+OI4Hf/XcvAMzgewNzcJRsL7YMlUVTbODRw=)
                          4: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: y80dPuObdKg8H5/o6aPEUDf3ud7ZzBogYMhK2YYNptc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Nov 21 03:55:46 2024 GMT
            Not After : Nov 28 03:55:46 2024 GMT
        Subject: CN=673eaf42-3fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:e7:93:61:38:bb:79:0c:51:ca:5d:07:4a:
                    24:93:28:5a:52:a0:e5:80:c8:de:bb:ac:d3:8d:4e:
                    dc:16:ac:a3:f3:bf:5f:40:b2:fa:7b:89:df:99:da:
                    52:cc:09:9a:36:62:32:6a:51:57:2b:0e:be:9d:0e:
                    7c:a6:53:e4:e4:37:2c:55:0c:9c:1f:42:c8:67:65:
                    d4:06:36:50:56:a8:5e:14:c1:61:70:ca:05:3f:f6:
                    dd:24:71:11:83:58:9c:f6:c5:2e:6d:f1:ed:98:8a:
                    1f:41:0f:50:2d:bf:5d:6a:9b:9c:2d:65:6d:1a:a1:
                    5d:fd:e5:2c:34:59:23:5a:9b:f8:84:d4:ea:09:17:
                    f7:a6:31:57:8d:83:01:56:15:d9:d5:1d:73:9d:45:
                    d4:07:1b:c7:cb:7d:7a:8b:4a:42:75:be:71:b1:7a:
                    44:02:69:46:e7:a9:9d:42:91:7e:67:75:34:b8:4a:
                    f5:ff:42:22:93:b8:30:78:ee:b9:93:7c:b1:37:ed:
                    a0:e4:6f:bf:04:13:19:62:79:84:70:55:99:35:d4:
                    cd:f7:5e:65:34:4a:9f:6d:f0:32:0d:71:cb:5c:8e:
                    04:85:f5:17:3d:53:a6:f6:11:c6:39:d9:e9:f6:c5:
                    64:ed:4e:a6:63:42:f7:22:5b:23:f7:67:1f:7c:12:
                    07:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5F:2B:DE:FF:F9:5C:0B:B1:3A:E5:0A:A7:38:34:49:11:62:6C:32
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:eb:10:3e:a4:87:d1:06:30:ae:fb:4c:2b:49:81:7f:9c:5b:
         47:c4:8e:dd:54:99:27:71:84:6c:ef:a0:ca:a1:6a:ba:98:2d:
         4c:b0:e8:c2:a3:78:3b:a0:20:b5:48:91:98:b1:0a:3d:bd:43:
         6f:65:d4:fe:ce:7e:d8:6d:f4:48:7e:2e:f4:de:21:94:8e:c9:
         c6:6f:96:c4:c3:4d:6d:0a:73:a7:2c:09:ea:f6:18:f9:29:69:
         d9:8c:5c:16:d2:13:b5:b1:2a:0d:dc:65:68:e5:90:71:f9:c7:
         a4:7e:65:4c:16:66:18:76:88:ad:30:cf:ed:f1:d7:b5:02:6d:
         97:75:93:28:44:63:4d:06:f3:ea:0b:83:75:2d:cf:8d:5d:ee:
         fb:78:d0:1b:8d:b4:df:57:88:5b:da:49:de:66:62:95:47:1d:
         3f:b4:fc:c4:9b:79:5c:03:44:3f:a6:5d:c8:da:5a:9e:3b:3f:
         f0:49:23:63:d2:85:c5:b3:b7:ed:2c:f6:0a:c7:95:59:3b:ec:
         4a:92:56:c0:6c:0f:98:76:a4:25:e4:b4:e0:b2:f8:05:e2:03:
         74:f2:6e:7f:34:af:bc:af:5b:8c:f2:77:f1:b9:90:4a:be:a7:
         26:ed:54:d2:31:58:22:44:bd:80:d1:fd:e1:79:cb:da:b5:32:
         38:8c:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:54 2024 by rpki-client on console-fra.rpki-client.org