Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
File:                     yvC3hLE-FADutCJboi1vmDiCTsM.mft (raw, json)
Hash identifier:          1t1yEabXMA8ZcXVPh1Ru25k4xmkyaBSCGGM/Wzc/RTg=
Subject key identifier:   2C:29:30:E7:64:82:02:2B:BF:7F:87:EE:1A:FC:C5:BF:FD:89:08:56
Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
Certificate issuer:       /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Certificate serial:       147B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
Manifest number:          1461
Signing time:             Sat 04 May 2024 17:30:59 +0000
Manifest this update:     Sat 04 May 2024 17:30:59 +0000
Manifest next update:     Sat 11 May 2024 17:30:59 +0000
Files and hashes:         1: yvC3hLE-FADutCJboi1vmDiCTsM.crl (hash: Q/346G2/7kpGUllSuwKcXZXBDvBJwWTa+0LCk95gyJ4=)
                          2: 4861945C599A11ED99A5B776C4F9AE02.roa (hash: lkWp1IhHMxOYCiIWnLxzZhrp8DBS3ZFFAPYfTQIZdXU=)
                          3: 4964556A599A11ED99A5B776C4F9AE02.roa (hash: iMjF8gO1FtavjB6mmSwlyZqcbK4fTA3A6QkrIkTt1rI=)
                          4: 1F265C7C55E911EC8D6F804DC4F9AE02.roa (hash: rDI1yN5/0sspCAHpw9bJZv3AA8A2LH6+AE7yXU1n1SI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl
                          rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 17:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5243 (0x147b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
        Validity
            Not Before: May  4 17:30:59 2024 GMT
            Not After : May 11 17:30:59 2024 GMT
        Subject: CN=663670d3-95a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:ca:f9:5e:7b:c5:30:a2:e3:d3:e3:30:d7:
                    47:bd:e2:30:2f:04:6e:b0:13:a8:3b:78:37:d0:b5:
                    60:57:cc:f4:68:26:30:d6:3a:1f:2b:74:5a:cf:73:
                    65:50:ae:c7:05:02:84:e1:b0:eb:42:63:48:2c:b2:
                    fd:0f:f3:e7:f0:59:26:ae:2a:d6:14:5d:1f:c7:d7:
                    c1:a8:a3:d2:b0:5d:97:86:e1:46:35:7b:d0:0c:a0:
                    9c:9e:70:4c:8b:03:61:53:79:a1:c5:0a:4b:50:cc:
                    2a:54:54:c4:40:e7:7f:5f:01:ca:e4:db:18:6b:cc:
                    80:59:28:f2:89:d8:38:e9:36:34:20:1b:b5:60:ea:
                    d7:b7:cf:bd:d8:2d:63:97:c7:c4:59:b8:0d:39:ef:
                    17:0a:a3:33:7e:95:3c:72:e3:40:07:d1:00:66:ec:
                    e5:60:6e:09:86:d9:d1:26:fe:84:c2:c5:87:a0:40:
                    f9:7c:00:73:0c:b7:ad:db:59:bb:8f:06:b2:48:7f:
                    5b:25:59:e8:57:14:ca:34:25:12:07:00:48:2b:c4:
                    63:e0:ff:0d:d7:2c:68:20:de:09:f1:8c:93:4a:8e:
                    3f:7a:c8:4c:66:03:d6:8d:2b:0a:24:06:c5:d4:5b:
                    20:75:89:2a:cc:6c:1d:4c:f6:19:96:71:ec:d7:15:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:30:E7:64:82:02:2B:BF:7F:87:EE:1A:FC:C5:BF:FD:89:08:56
            X509v3 Authority Key Identifier:
                keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ca:53:42:a8:39:d4:a1:4a:d4:b4:cc:cd:73:4e:12:f3:9d:
         50:eb:10:21:6e:5b:42:38:4e:60:06:8f:18:8d:80:c6:6e:ec:
         0c:6a:40:f8:21:5a:cb:3f:37:1b:40:fc:60:fe:a2:2c:f5:62:
         14:7c:92:a9:6a:1a:ec:1c:5c:29:b2:71:66:3b:22:88:73:f1:
         01:c4:87:88:d8:1f:0c:c3:6f:a0:4a:b8:8c:6e:5e:b3:08:5c:
         80:e7:ce:47:5e:13:db:c9:ea:4b:e4:e1:d3:4b:d7:ac:b5:cb:
         85:3b:3f:ce:9e:d4:69:89:18:1f:7a:46:26:96:bf:82:c7:6a:
         c1:2a:46:15:60:77:bb:40:b7:f7:ec:4d:67:33:13:49:91:5a:
         4b:c1:75:44:80:07:d2:bd:0f:7d:54:49:e9:2d:82:82:2c:d0:
         c3:75:04:8b:0b:fd:81:b8:36:dc:eb:36:16:98:2c:80:7c:12:
         ef:7f:40:44:1e:2a:70:73:08:1f:51:29:a8:4d:b7:e8:62:0e:
         69:60:08:0e:de:0e:7f:72:33:f7:14:08:4f:bb:40:fe:c6:46:
         2f:1c:22:b4:94:5f:bd:0a:d2:8c:e4:34:0f:be:48:6f:fc:11:
         54:4d:fd:8f:e0:0b:12:d5:e4:0c:92:4f:d2:8c:84:bd:6c:54:
         41:fb:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:00:10 2024 by rpki-client on console-fra.rpki-client.org