Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
File:                     YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json)
Hash identifier:          36psN7iswRPHYUKlLC4W+vu5zNmzZORGAdubqGAo8ho=
Subject key identifier:   74:11:DD:32:FF:0B:02:07:0C:36:08:D4:03:12:48:E5:3E:E3:94:52
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Certificate issuer:       /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial:       0296
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
Manifest number:          0292
Signing time:             Sat 25 May 2024 00:29:26 +0000
Manifest this update:     Sat 25 May 2024 00:29:25 +0000
Manifest next update:     Sat 01 Jun 2024 00:29:25 +0000
Files and hashes:         1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: u+IDIAwEqLz/5wjGg582AFtd6JXUBQKD8qV4M709kQQ=)
                          2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: Qnesvn9evrx2MXlQaQZ9IFFwGcZjgLz/wbaoV2ZmpwU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 00:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
        Validity
            Not Before: May 25 00:29:25 2024 GMT
            Not After : Jun  1 00:29:25 2024 GMT
        Subject: CN=665130e6-37c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:ea:f1:4e:02:9d:a8:6a:e5:f8:70:6e:2a:
                    30:0f:57:c0:d8:f0:5a:32:32:d3:57:b2:f6:73:a9:
                    f1:e9:23:40:10:92:45:cc:29:af:44:70:71:35:4e:
                    72:30:ac:70:a2:36:52:64:cc:8b:8b:33:42:44:e8:
                    2a:11:76:35:54:76:64:d7:b6:aa:ac:4f:a4:3b:9b:
                    7d:fa:e3:0c:ea:3e:8d:93:f8:8a:6e:81:01:51:46:
                    bd:5b:6f:5b:5e:e2:99:82:0a:42:45:fb:e6:e7:e7:
                    58:08:58:fb:c4:09:b3:c4:67:f9:f3:8c:06:44:36:
                    5e:0b:c0:8d:06:5b:02:55:41:a5:56:ca:cd:7c:10:
                    d1:2b:b7:ea:bb:87:9e:51:e5:f8:f4:e0:ec:de:4b:
                    01:0f:1a:25:6c:5b:d7:79:1f:63:2c:53:56:ad:b7:
                    66:a9:5c:5d:31:7e:84:87:80:db:62:64:ea:1f:42:
                    e1:6b:a1:34:3b:56:19:15:78:ae:3c:f7:f4:6d:90:
                    06:12:eb:17:7b:8d:82:98:0a:19:85:75:c6:5e:35:
                    ab:23:b8:fd:b3:c6:e8:ff:36:13:bc:ec:27:e0:7f:
                    79:9c:23:cb:55:35:e1:bd:0d:90:72:fc:11:92:94:
                    2d:5f:3e:79:03:a1:a5:df:a6:61:60:4b:00:5e:d8:
                    7e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:11:DD:32:FF:0B:02:07:0C:36:08:D4:03:12:48:E5:3E:E3:94:52
            X509v3 Authority Key Identifier:
                keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e7:4f:a5:10:c0:a5:c1:98:3f:ae:26:7c:63:b0:0f:cd:72:
         b0:ce:dd:fc:6f:f9:b4:88:7a:f2:cc:b9:f0:d6:da:78:d3:19:
         9a:0c:6c:9e:41:04:63:d8:d4:ee:43:1b:42:3c:37:95:d1:c3:
         64:0e:8d:5e:20:43:17:41:de:38:92:e4:69:82:9b:73:49:39:
         44:a0:4f:12:92:08:35:6a:91:3d:87:03:7e:36:e4:64:27:39:
         d2:a8:90:91:dc:e6:63:cb:0a:02:0a:81:46:4b:4e:6b:37:18:
         fd:4d:64:92:d0:ba:9b:df:c5:22:fc:79:65:a5:ab:06:2b:0b:
         21:cf:cb:7c:ad:77:3b:76:f9:77:9f:e2:7d:78:ce:45:53:16:
         46:4f:fc:86:8d:c7:b5:3a:60:6e:22:fc:f6:80:5c:83:8a:cc:
         69:47:0c:7f:2b:02:58:72:28:a2:b7:b2:b6:74:d1:0d:0e:73:
         15:4c:79:9b:a3:c5:dc:82:86:4f:1a:d7:09:ce:00:51:52:4f:
         f3:6b:6b:cd:18:90:8a:fc:f9:ad:02:c1:36:b3:63:77:c8:e8:
         a3:38:57:98:16:59:2f:c8:1d:4b:de:e8:b2:be:69:50:c0:20:
         a5:de:9b:e0:31:58:c4:63:8a:91:96:a0:c6:2a:ca:49:ea:c2:
         c4:d7:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 01:24:47 2024 by rpki-client on console-fra.rpki-client.org