Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File:                     y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier:          GChgqks+KOqGDX/woUwD1cj5sh2YqaxckgoJWbbTo+o=
Subject key identifier:   AB:FC:6B:E7:62:F9:47:15:56:77:70:CF:5A:63:8F:21:3D:AC:3E:D7
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer:       /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial:       07C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number:          07B3
Signing time:             Sat 04 May 2024 22:17:18 +0000
Manifest this update:     Sat 04 May 2024 22:17:17 +0000
Manifest next update:     Sat 11 May 2024 22:17:17 +0000
Files and hashes:         1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: XOLk/v+JWrE3xso7raNnBSLnZAIiTivoVIVX9rwjNMk=)
                          2: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: Xa3a2UX5PsT3KFtGBuA4G1nVJ5fOk986lNl8BkYlh1A=)
                          3: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: /w1OuG0sm8OaVGq6ymiMoiSrbtsn+KyBNBfBfSxZOGA=)
                          4: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: rmgF2tJz+YdpA0UV5edmyhu8u4sI+7KKG8VAb704898=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
                          rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988 (0x7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
        Validity
            Not Before: May  4 22:17:17 2024 GMT
            Not After : May 11 22:17:17 2024 GMT
        Subject: CN=6636b3ee-6482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:de:44:88:1a:d2:95:51:3b:e1:f0:6f:31:
                    c8:e3:5c:56:7e:17:5b:4f:95:3f:93:39:6f:44:0b:
                    2e:a3:e0:4a:46:30:56:67:0b:3e:b0:81:0a:13:be:
                    70:dc:5a:48:c9:9e:95:55:67:96:f6:1d:ce:dc:2b:
                    b8:59:c8:20:ba:b1:a2:e9:c2:d9:db:35:f2:aa:11:
                    5d:74:3e:c9:b1:d5:2d:fc:b7:4b:9f:2e:d7:a5:bc:
                    31:66:c5:48:71:86:0a:0d:8a:81:1f:ac:d4:de:25:
                    9d:7e:aa:40:7b:d5:21:f6:5c:34:91:21:6c:d0:d9:
                    3f:6b:73:99:68:14:3e:48:8b:73:c3:f4:34:37:08:
                    97:ef:dc:1a:ef:f8:35:77:dc:ff:2a:60:66:dd:17:
                    d0:81:6a:05:ac:3b:f1:04:e2:28:e2:81:d2:dd:7d:
                    10:7e:e5:84:88:28:79:6a:03:b6:96:5d:9a:51:97:
                    bd:16:69:76:d3:53:65:06:a7:d2:d9:53:ca:64:03:
                    be:87:53:8f:ce:94:1d:87:24:16:d8:59:3d:90:e5:
                    83:e4:91:98:c8:c4:97:f3:99:1b:c4:54:c0:74:5a:
                    b7:bb:1d:bb:87:ec:00:ef:c0:4d:c2:3d:cb:c9:11:
                    99:da:55:da:bf:14:c5:0a:6a:54:c7:a1:69:e6:74:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FC:6B:E7:62:F9:47:15:56:77:70:CF:5A:63:8F:21:3D:AC:3E:D7
            X509v3 Authority Key Identifier:
                keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:16:15:7f:15:19:5a:a2:9b:17:fc:c2:c0:d2:0b:94:45:9d:
         15:e9:7a:ee:0c:2a:76:bd:01:5b:e1:be:5f:b0:11:99:74:05:
         13:26:a8:04:e4:2c:c6:b0:17:35:01:5c:7c:2c:c8:19:d2:e4:
         ee:14:0d:f0:31:38:bf:44:5c:b0:c0:70:c2:74:32:02:c2:24:
         bb:65:7a:c4:57:00:7e:91:28:11:be:12:a8:1e:dd:01:6e:37:
         d5:72:e5:cc:f7:98:2a:07:0c:81:f8:99:6a:37:c2:e0:89:0c:
         64:bf:6f:1c:02:b8:f0:71:97:49:8a:78:69:ec:a7:63:40:b3:
         98:52:27:db:59:d4:aa:99:cb:9c:82:cc:c0:eb:73:6d:40:8d:
         f5:df:2d:72:f6:10:07:97:72:c1:35:11:63:77:fa:b1:7b:c7:
         3e:74:1b:ab:b9:a2:04:64:6c:5d:d4:8c:4f:be:75:fe:d4:16:
         05:0c:c8:af:ad:8c:81:09:9b:13:02:41:6a:d2:58:1d:7d:88:
         7c:00:a7:c8:0d:80:83:6d:85:b0:af:49:c6:dd:ad:1e:bf:d2:
         50:c1:ca:25:d7:27:cf:47:85:9e:42:92:ed:a7:3d:4f:7d:a1:
         43:aa:b8:b7:91:31:78:63:be:97:9e:bd:73:48:4c:6a:66:96:
         72:9b:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:12:22 2024 by rpki-client on console-fra.rpki-client.org