Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
File:                     vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json)
Hash identifier:          G0thsW2wusWPSVa75h+AihZ+PzpUtU9YLJ/7nAn/48o=
Subject key identifier:   F9:67:EC:41:16:B1:F8:96:B1:EF:0F:89:C9:1C:2B:31:59:41:AA:EF
Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
Certificate issuer:       /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Certificate serial:       053E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
Manifest number:          052C
Signing time:             Sat 01 Jun 2024 02:03:15 +0000
Manifest this update:     Sat 01 Jun 2024 02:03:14 +0000
Manifest next update:     Sat 08 Jun 2024 02:03:14 +0000
Files and hashes:         1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: B3g64AVlbov04tee+BUuxRaGpgib7MrSgy9uRIUZJ4I=)
                          2: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: j3fOTU+ZyDH2gWmIOUvIDKynWCWvx/O+tM8FAKYOeY4=)
                          3: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: P6xYLGWZasAZ0O0GYyx/cUS1pnfp7Nbv28TT3E9ue6A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
                          rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
        Validity
            Not Before: Jun  1 02:03:14 2024 GMT
            Not After : Jun  8 02:03:14 2024 GMT
        Subject: CN=665a8162-4416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:7f:5b:d9:d0:92:2f:de:a9:99:1c:5b:e6:
                    7a:db:e4:53:e2:49:9b:f3:3c:f4:d1:86:48:dd:bd:
                    b6:8e:55:73:e0:3c:9e:62:54:37:d4:39:8e:63:84:
                    0e:70:fa:cb:7d:f1:28:1f:c4:b6:4e:9a:6d:92:de:
                    e1:83:04:52:38:ca:e7:ee:d9:51:88:56:ef:c3:a5:
                    0e:3d:ce:0e:cf:2b:3b:68:17:84:93:ee:a9:68:e6:
                    47:39:63:40:f3:5a:cd:82:45:bc:5f:7b:c7:91:73:
                    d9:1c:78:75:af:89:0b:f1:a9:d1:d2:ec:e1:cd:c5:
                    f4:f1:d9:a1:95:e9:b3:00:5e:d2:75:a0:29:11:02:
                    2a:6d:26:73:8a:a0:cd:50:4e:7e:cd:61:dc:69:84:
                    17:25:9b:df:71:1e:19:c6:35:47:5f:1c:4f:07:ea:
                    22:70:31:09:1e:58:fa:1d:05:83:3a:d3:76:fc:99:
                    d1:0c:38:c7:0a:95:a1:69:ba:58:56:59:1d:0c:af:
                    f2:2d:c5:ce:5b:9d:1e:49:ff:f0:82:b6:ef:5e:cc:
                    ac:78:05:18:26:1a:6f:18:08:dc:ad:61:ce:2f:1a:
                    28:8c:7a:86:0b:24:b0:2d:fb:bb:7a:2e:15:60:bb:
                    d7:fe:0f:3b:b5:ab:a9:d0:4f:76:b9:67:6f:f1:70:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:67:EC:41:16:B1:F8:96:B1:EF:0F:89:C9:1C:2B:31:59:41:AA:EF
            X509v3 Authority Key Identifier:
                keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e0:a8:85:a5:b0:d1:dc:3d:67:b7:2f:23:c8:b4:4c:5e:7e:
         8b:c1:c6:d3:e2:ce:ed:12:ad:a8:96:ca:f9:0d:bf:7f:95:5f:
         70:d1:7a:85:68:48:5b:34:b2:02:8f:54:a4:18:08:0a:57:5c:
         b4:e6:50:74:73:7f:55:7b:b0:ef:bc:ce:44:d4:ee:cc:e6:90:
         6c:ae:b0:f9:aa:c9:1f:54:9c:34:65:e3:15:8f:cf:ec:0a:c4:
         8c:5c:93:97:c2:c3:5e:4f:95:50:f8:6c:34:5d:f9:6b:64:53:
         8e:5e:92:d2:df:0e:85:e2:ce:fe:6e:38:19:a4:a4:95:a7:41:
         ee:b8:a9:49:85:61:4a:20:9f:2a:65:72:39:b1:6b:4f:7c:93:
         5e:98:2a:0c:81:60:97:be:fa:8d:31:68:8a:1e:5c:75:55:ba:
         1a:88:27:f1:e8:38:4e:3d:a1:96:02:ea:7c:87:13:e3:1f:13:
         3f:8a:fe:48:48:2c:08:af:0b:1d:69:a6:22:31:4c:6b:c9:61:
         c9:26:26:45:0f:33:af:9f:73:af:27:1c:3d:1e:f9:2c:3e:4d:
         80:c3:40:63:25:20:97:79:8f:54:96:66:d0:5e:82:c7:9b:da:
         38:75:0c:dd:b9:e5:d9:f0:03:90:92:64:57:87:3e:87:e1:c1:
         b3:72:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:16 2024 by rpki-client on console-fra.rpki-client.org