Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
File:                     YeQBev9HdnE8_cggXML7IXhGK6E.mft (raw, json)
Hash identifier:          18uqm3WMPiQe8uQCiEXC7S0/qwrgCzYuJ9Ke5nkzfMs=
Subject key identifier:   0B:E8:3F:D8:1E:78:5C:75:EB:29:8A:34:1E:AA:49:CB:16:8E:55:C6
Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
Certificate issuer:       /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Certificate serial:       096D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
Manifest number:          0962
Signing time:             Mon 06 May 2024 21:08:59 +0000
Manifest this update:     Mon 06 May 2024 21:08:58 +0000
Manifest next update:     Mon 13 May 2024 21:08:58 +0000
Files and hashes:         1: YeQBev9HdnE8_cggXML7IXhGK6E.crl (hash: 7xe/tKdC1Keq2fpx9ThSGfHrh77qo5YrYb+P8C07Ppo=)
                          2: E27DEE10787A11ED89732760C4F9AE02.roa (hash: 3Q21PZ6fgbRkgIUaPhHxxGGxa+ghUj6MktJXWchUWzk=)
                          3: E3DD6362787A11ED89732760C4F9AE02.roa (hash: aFrQ9hGmc5MAS7yd6oBeal03ijRtx0PrzFIno3885Z8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl
                          rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 21:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413 (0x96d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
        Validity
            Not Before: May  6 21:08:58 2024 GMT
            Not After : May 13 21:08:58 2024 GMT
        Subject: CN=663946ea-6fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:de:d7:d8:21:15:da:90:26:1b:68:80:e3:
                    09:bc:59:64:80:04:15:80:5d:80:bf:48:f8:ad:70:
                    7b:d9:34:ae:a9:12:5b:ab:f2:fd:e8:97:2f:ee:8d:
                    24:0a:c0:80:ed:cc:9e:7d:27:b4:e9:ea:93:50:5e:
                    ac:d3:d0:0c:21:95:e7:2f:51:6d:2a:5d:ed:d1:83:
                    d4:19:42:65:0c:5f:b9:04:fb:82:80:a9:3f:42:4b:
                    c6:ec:26:e6:9a:1a:8f:4e:32:4f:c4:81:81:2b:4a:
                    16:87:9d:ce:e3:5b:6c:ba:40:f4:88:ce:cd:ce:f4:
                    9e:30:67:a0:93:ce:7a:4a:2c:14:a1:de:5d:9d:37:
                    ea:48:34:20:cc:62:b4:26:bb:48:a7:77:04:4b:ba:
                    06:92:70:b5:69:c1:3f:98:f7:06:1a:af:ab:d0:4d:
                    1b:a2:d4:09:4e:44:10:26:07:82:db:de:12:13:39:
                    cf:5b:b3:26:74:ea:f5:a1:82:cf:bd:c9:03:79:8b:
                    b0:3b:54:dc:5a:27:3a:a2:85:23:fd:eb:9d:c3:ef:
                    aa:73:e6:ee:cd:cb:75:5e:3b:6d:a7:01:d6:31:54:
                    f8:56:36:3e:3c:ed:b9:b1:ae:ac:3c:1a:98:88:95:
                    b8:53:cb:8b:b9:e6:86:4e:da:89:37:32:a8:fc:b5:
                    f3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E8:3F:D8:1E:78:5C:75:EB:29:8A:34:1E:AA:49:CB:16:8E:55:C6
            X509v3 Authority Key Identifier:
                keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:47:88:44:48:9c:28:7a:d3:f4:c4:9b:f9:0b:a3:1a:30:7f:
         58:2a:5c:b4:73:bf:02:be:78:d8:b6:d7:aa:11:75:e4:22:24:
         86:7f:3d:36:15:e3:e4:35:10:2c:07:fb:3f:2d:68:6e:10:f0:
         64:7d:95:61:2c:5b:b9:b5:24:49:23:91:27:9f:49:c4:df:9d:
         30:a1:0b:11:7a:97:11:e3:31:39:92:0e:33:2a:37:8d:32:cb:
         b5:f8:18:db:de:49:4c:51:bb:54:09:b9:ce:d0:8b:d2:25:95:
         8d:78:2e:41:4c:e5:34:26:58:e5:be:a7:ca:6e:e3:06:21:ce:
         e1:cb:ee:d6:4b:fd:5c:f6:8f:8f:b8:cd:6f:af:9a:46:d6:c0:
         f4:f1:9b:29:9b:e3:76:91:e4:1e:93:f6:7e:a1:ca:8f:f6:f8:
         47:f9:65:f5:cc:be:12:59:80:d5:73:04:69:06:fb:a7:14:ae:
         e1:41:01:2b:8f:a8:5b:2f:0d:b4:4b:1b:9b:43:12:a1:2e:25:
         e1:24:81:ab:f9:15:7d:5e:66:97:80:c3:fa:e2:46:97:14:6c:
         d6:87:1c:93:d5:9f:8a:3b:93:1b:6e:7f:65:4a:5e:d4:d3:a8:
         02:0f:90:e9:bb:43:7d:bc:6f:f0:0d:77:26:e3:17:b8:51:1c:
         f8:1d:aa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:05:45 2024 by rpki-client on console-fra.rpki-client.org