Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
File:                     yPzMxL6JiqkgZxNmoP15UynpIB0.mft (raw, json)
Hash identifier:          jJWyiB2Z6iGIDMIhxunvWuw+8MQAazHn7nXF6mzznUo=
Subject key identifier:   93:8A:29:47:CD:F7:67:EC:1B:73:E6:12:99:EB:35:52:45:7A:98:FD
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Certificate issuer:       /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial:       0AE5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
Manifest number:          0ADA
Signing time:             Fri 26 Apr 2024 20:02:35 +0000
Manifest this update:     Fri 26 Apr 2024 20:02:35 +0000
Manifest next update:     Fri 03 May 2024 20:02:35 +0000
Files and hashes:         1: yPzMxL6JiqkgZxNmoP15UynpIB0.crl (hash: P0b053mZo0FNTm9q/KwrLBP6gu9JDneShowU1guj98o=)
                          2: 5407E320236911EA9967DA1CC4F9AE02.roa (hash: LG99ahzKvHUI50lMm8kLGCqoH21CgLDO/v0pGeQRVeM=)
                          3: 20748896236511EABCF20E10C4F9AE02.roa (hash: djgV07qrDHH6crDLVxxC1a/aDQKWs88VoXNwUP4VqXs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
                          rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 20:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2789 (0xae5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
        Validity
            Not Before: Apr 26 20:02:35 2024 GMT
            Not After : May  3 20:02:35 2024 GMT
        Subject: CN=662c085b-610a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:65:6d:95:18:bd:e3:31:48:d7:ba:4c:fb:
                    0e:22:2a:50:0e:aa:9e:5a:f4:24:49:57:b9:96:f1:
                    ad:6a:44:43:5e:93:4c:22:16:d6:90:93:d4:85:2c:
                    6a:02:c4:4b:1f:4c:f0:4e:13:06:ac:2f:64:a0:90:
                    19:89:e3:7e:7f:3f:4d:10:a0:48:eb:9f:e5:30:27:
                    e7:3b:38:8a:46:f5:f7:09:19:d2:72:2b:c3:1a:6a:
                    55:68:59:29:00:28:6b:59:9c:be:17:57:54:c2:09:
                    ad:b3:4d:ac:41:7d:94:8c:c9:ab:9a:8e:36:61:d9:
                    a1:29:78:19:c5:af:78:02:9a:9b:03:8b:97:f1:dd:
                    3d:94:54:db:47:a3:63:f7:db:44:0e:59:d3:30:25:
                    9d:dd:13:da:df:15:f9:7e:97:c6:8d:af:e5:79:f0:
                    5d:04:65:51:d3:ec:a3:62:8f:88:be:b7:cb:56:3d:
                    1a:8c:dd:89:f4:11:98:93:74:38:50:be:19:8b:76:
                    b2:2a:f1:0c:fd:a6:c6:dc:66:7b:ad:3b:96:6d:08:
                    0f:c8:3f:e8:2e:82:3d:38:f5:e9:c1:a5:2f:51:31:
                    91:a1:1d:2f:13:8a:22:46:48:51:4e:b7:c8:e8:f2:
                    5a:8e:83:a3:3d:7b:c5:f8:6e:10:dd:7f:a0:22:69:
                    4f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8A:29:47:CD:F7:67:EC:1B:73:E6:12:99:EB:35:52:45:7A:98:FD
            X509v3 Authority Key Identifier:
                keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0d:5e:3a:37:f6:ae:c2:08:fd:38:b2:6a:71:03:63:ce:32:
         0e:63:b5:0f:b7:35:56:6b:c2:51:33:9b:1a:77:95:65:7e:13:
         2f:07:41:8f:64:4a:83:20:b0:ca:79:66:d4:d9:15:d6:e0:e0:
         2d:ee:23:e7:61:ca:ad:c0:ef:f2:90:9c:2e:b5:3b:da:a8:99:
         02:25:31:cb:bf:ef:cd:9a:fb:b9:73:f5:b1:d4:a8:9f:3c:0e:
         23:a3:51:d6:ef:fa:e3:27:26:ac:c5:d0:19:01:7f:95:88:ed:
         e1:ce:37:1d:e9:58:6a:35:3b:9d:c1:3b:fb:64:04:fe:5e:d3:
         86:65:69:07:22:f9:72:6b:22:57:39:d7:3a:71:6f:00:0e:dc:
         58:cc:04:8c:cf:63:06:ff:54:d1:6a:89:c0:45:d0:b9:01:e1:
         7e:94:1a:a2:33:44:e1:aa:ce:19:24:47:c6:c8:e5:57:71:da:
         3d:17:98:fc:b1:4c:74:66:22:e5:31:72:fd:34:d6:92:58:86:
         22:7b:0a:8d:5d:ab:e9:e5:cf:8b:e6:b6:78:f8:59:49:33:34:
         b3:c1:59:ad:9c:97:4d:97:d1:1c:8b:10:5b:96:87:ab:86:fe:
         5b:bd:e6:ed:7d:6d:3a:b2:62:07:93:78:59:31:11:05:23:39:
         e9:33:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:52 2024 by rpki-client on console-ams.rpki-client.org