Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
File:                     gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft (raw, json)
Hash identifier:          8qQNFfBEjofW1E3fyMJncfPRsNwo4oB1UFlZQzhZzy0=
Subject key identifier:   D7:67:86:F4:11:66:DF:93:9B:DF:73:24:54:9C:A6:84:3A:5D:23:94
Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
Certificate issuer:       /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Certificate serial:       07DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
Manifest number:          07CC
Signing time:             Thu 02 May 2024 22:09:52 +0000
Manifest this update:     Thu 02 May 2024 22:09:51 +0000
Manifest next update:     Thu 09 May 2024 22:09:51 +0000
Files and hashes:         1: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl (hash: jPZUyctzs0Qz9KQTG+E4gx7Fxeov01RJexvkz3OdGNk=)
                          2: 50998080BCE911EAA0114B70C4F9AE02.roa (hash: obJMUNbIy43HgJwMFY+mc8pYpxA6mGk1YnB27nzN4vA=)
                          3: EF2481168BCA11EDBED45E54C4F9AE02.roa (hash: U8qeG86YNVEeYQ2EUu2Hbk5ljuYeXbHCMQZUZgHvTZE=)
                          4: 511CD5D4BCE911EAA0114B70C4F9AE02.roa (hash: HcfNqrgKNWQ9geVDnG6ihlSpDRocYt8Sn04dzPDg/Bs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
                          rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 22:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010 (0x7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
        Validity
            Not Before: May  2 22:09:51 2024 GMT
            Not After : May  9 22:09:51 2024 GMT
        Subject: CN=66340f30-9afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:68:c3:89:d1:96:1c:61:30:93:33:2e:c4:
                    fa:79:6b:90:cc:05:81:dd:72:fb:c0:e1:7e:bf:69:
                    bc:ed:64:2b:45:f8:d9:89:23:ea:8a:be:a0:c3:89:
                    1e:5a:96:a2:67:aa:bf:b3:59:49:d4:84:8b:c9:19:
                    a6:6f:c5:05:e4:4e:d4:24:8f:93:88:67:28:25:73:
                    7d:02:b1:a0:42:a8:ba:97:50:8e:af:1b:08:de:b8:
                    d9:32:6a:0b:85:22:15:2f:e1:87:ef:0d:5e:ba:d3:
                    60:57:56:4d:cf:df:db:f2:46:da:6e:bb:47:1a:b1:
                    8a:34:68:ed:fe:a6:d0:54:a2:b6:96:4e:91:e4:16:
                    13:21:56:79:61:a1:c7:e4:6b:5e:8e:d1:39:d8:ee:
                    ea:f4:83:dd:8b:b5:9f:dc:8d:f2:24:f4:58:57:00:
                    5b:79:5a:b3:4c:6f:33:c1:30:de:d0:5a:2c:72:27:
                    d2:bf:29:b0:da:63:62:44:d4:7f:d0:d7:4c:7e:1d:
                    b7:b2:5f:a2:43:61:78:8e:80:96:8d:d1:53:de:de:
                    91:ab:d2:0e:ae:b8:eb:8f:1f:da:6c:e5:d4:d5:4c:
                    67:84:a8:49:44:90:c2:8c:ee:64:96:44:83:31:a6:
                    be:a1:97:74:2e:03:47:f2:d2:08:ad:c7:d9:98:95:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:67:86:F4:11:66:DF:93:9B:DF:73:24:54:9C:A6:84:3A:5D:23:94
            X509v3 Authority Key Identifier:
                keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f5:d4:fc:6b:3e:94:b6:8b:2f:d9:65:b4:2e:3c:35:aa:98:
         1d:59:0b:d5:3c:75:72:41:27:07:34:c3:08:fd:90:86:49:0b:
         63:d1:56:52:ac:b3:1c:a8:27:78:19:da:ff:91:60:37:68:a7:
         cc:09:f1:ce:3e:e3:d8:4a:91:a0:87:77:33:dc:7a:fc:1f:cb:
         d2:5c:bb:01:74:59:f5:7d:ca:fb:87:28:92:1c:81:bf:32:36:
         b8:d3:94:da:58:ab:83:a8:f5:ba:51:f4:49:9a:3a:3c:74:27:
         92:7b:8b:a2:5a:58:4e:84:c8:c3:4b:68:7f:58:e1:56:19:3b:
         ce:57:d4:59:8f:7a:c4:99:5e:38:41:8e:de:36:d2:02:1d:26:
         04:82:75:c2:b1:ea:1a:16:2d:a6:0b:5e:d7:73:45:b2:81:d4:
         02:27:e6:98:08:9e:e8:a3:2a:57:f2:28:73:2e:50:d2:69:fa:
         8a:e8:7f:79:11:17:ef:91:cf:c7:1c:61:53:c4:9f:db:b7:8f:
         cc:17:da:f3:cb:c1:20:71:08:b1:99:01:26:aa:b9:1d:41:f9:
         7c:d3:3a:30:1b:23:8b:61:7c:21:39:66:e5:85:f1:6d:83:64:
         53:a6:d9:0c:6d:6e:26:b1:fe:38:dc:84:ad:02:b7:38:26:63:
         8b:0c:34:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:03:11 2024 by rpki-client on console-fra.rpki-client.org