Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
File:                     HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json)
Hash identifier:          X9WGfEmO4pdZH9tashBj9vNAgYh4jrOfSTMDmPv99Zc=
Subject key identifier:   EF:E3:82:C6:BE:B0:D2:EB:A0:A9:00:8C:84:5C:C2:4E:78:C0:D0:0D
Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
Certificate issuer:       /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
Manifest number:          05D1
Signing time:             Fri 17 May 2024 01:04:38 +0000
Manifest this update:     Fri 17 May 2024 01:04:38 +0000
Manifest next update:     Fri 24 May 2024 01:04:38 +0000
Files and hashes:         1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: CYb8jR1g+MZylj92/9NDHj/Lysl8q4ti6UIXArW+YBM=)
                          2: D4163D4A884211EEB8B05013C4F9AE02.roa (hash: ZOu32o6P9r0jbCvbJk7rc+xFvyLi86thbWiSe0JW1Io=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
                          rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
        Validity
            Not Before: May 17 01:04:38 2024 GMT
            Not After : May 24 01:04:38 2024 GMT
        Subject: CN=6646ad26-b2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:29:30:ac:a1:3c:29:3b:e1:aa:ac:d0:48:
                    8e:6a:5e:43:39:43:83:e1:b3:f7:3b:f2:13:be:64:
                    3a:e7:e3:b1:22:53:3c:c7:02:2d:c0:51:b7:3e:1f:
                    c9:85:3b:d3:1d:0e:f4:31:a7:31:e9:4f:1d:52:5d:
                    de:e7:2d:25:20:99:44:83:7e:e7:68:2a:c7:03:8c:
                    e5:37:d7:99:44:b9:aa:bb:99:c6:66:d2:de:e4:a4:
                    91:6f:03:ba:3d:fd:db:21:ae:73:80:d8:1b:22:e7:
                    d5:2d:c6:55:f0:df:30:51:00:96:30:c4:bd:1f:9c:
                    aa:4c:54:2e:ce:c5:5d:97:55:76:99:f8:03:c5:1e:
                    97:3d:57:47:fc:48:79:81:8c:b8:1b:26:6f:b8:3a:
                    44:fc:a0:c4:14:4b:c6:e1:12:a8:12:7a:91:6c:d5:
                    2c:1a:fa:3e:4a:c2:9b:a8:5f:69:7f:84:51:58:4c:
                    24:fd:c6:24:59:40:6f:52:89:f3:e4:20:67:75:11:
                    e8:c0:7d:e3:47:52:6c:19:38:a0:ff:4c:67:31:45:
                    82:06:f9:41:9d:ec:74:b8:00:bb:33:94:a0:4f:f6:
                    f8:42:07:20:ec:2a:d8:53:88:69:7e:f0:9d:c6:8a:
                    97:f6:c6:80:8b:1e:ae:ae:d5:ab:e2:12:fc:db:1e:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E3:82:C6:BE:B0:D2:EB:A0:A9:00:8C:84:5C:C2:4E:78:C0:D0:0D
            X509v3 Authority Key Identifier:
                keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7c:07:04:9f:ae:6b:73:89:89:ed:22:ff:18:2b:cc:d3:17:
         b1:c8:4b:7e:be:98:f3:01:49:36:6f:40:17:39:62:a5:5c:d1:
         e0:ab:06:0c:b2:f8:19:20:41:3f:b3:a6:17:63:e2:31:83:49:
         7b:0e:67:15:a9:d1:71:de:04:fb:8a:45:8b:67:df:ac:bf:ba:
         9e:22:9f:29:9a:2e:36:96:80:d7:fd:d9:a5:9e:97:f3:bc:03:
         7b:10:49:c0:b9:1e:d9:9f:e7:f6:d9:a6:39:20:bb:8a:08:8d:
         64:04:68:e6:67:62:29:65:37:be:1f:86:89:2b:8e:84:e6:8c:
         25:cb:8c:4d:18:24:19:aa:bc:31:71:ca:6f:36:b8:b9:d2:4a:
         93:aa:d9:db:6d:e8:3a:f9:7c:26:05:05:78:e2:74:22:a2:8e:
         06:1b:71:69:ee:fb:b8:50:f2:17:a7:c5:c4:49:eb:30:43:2e:
         a3:ab:76:af:de:2b:e6:6a:ba:a8:6b:7a:d7:83:ee:07:a4:9c:
         53:49:3c:0c:b6:67:4b:46:e4:42:dd:a8:95:d0:67:84:9e:a7:
         51:20:62:25:fa:90:c8:dc:f6:20:eb:ad:53:5d:6b:ca:c4:f7:
         1b:a7:d9:aa:58:ec:6e:1d:e4:13:11:76:6c:f1:3d:ee:23:af:
         4e:72:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:18 2024 by rpki-client on console-fra.rpki-client.org