Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File:                     1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier:          uvASxV4oViWeutCLBdldQ1u4Z8aaJ/NAjCMna3RpzcA=
Subject key identifier:   83:4D:36:C9:B8:87:C7:D9:6E:F3:10:D3:C2:03:C7:8F:EF:EE:2C:18
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer:       /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number:          0E
Signing time:             Sat 29 Jun 2024 08:10:18 +0000
Manifest this update:     Sat 29 Jun 2024 08:10:18 +0000
Manifest next update:     Sat 06 Jul 2024 08:10:18 +0000
Files and hashes:         1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: 0uH8D/y0V8PbKurp7cegfQJwuT5lIn+8i1GhIcHOiJQ=)
                          2: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: /2rgCrByQXfEl3QFcxBS9yU2VX/WpSZOCuakY+zsero=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
                          rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jul 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
        Validity
            Not Before: Jun 29 08:10:18 2024 GMT
            Not After : Jul  6 08:10:18 2024 GMT
        Subject: CN=667fc16a-2336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:2d:2b:8c:2d:34:5b:95:56:ef:f4:f1:e3:
                    e7:c5:58:b8:a8:49:d6:8e:e0:bf:49:c1:70:60:ca:
                    d2:27:6b:6a:55:c9:8f:0f:22:2b:78:b4:9a:e9:f2:
                    1d:c9:0a:0b:9f:0b:e0:df:b1:c8:b7:44:be:1c:85:
                    06:bd:03:eb:7e:a0:f3:af:6f:f6:be:d6:ed:f9:55:
                    78:24:9d:bf:fe:2a:6e:96:07:ec:f0:12:60:6d:d2:
                    38:b0:7f:29:89:4e:8c:1c:cd:ef:7c:62:a3:88:8e:
                    a3:e3:95:1e:e2:63:5c:0e:bf:7b:5c:56:a2:f3:14:
                    b5:e9:d7:bb:9b:c9:9c:ea:46:87:c8:a8:7a:11:18:
                    49:a4:a4:83:a5:c9:68:cb:48:8c:b5:20:53:2a:d0:
                    84:ff:c5:bb:d4:07:f8:bf:0d:26:a9:e6:8e:63:dc:
                    60:e7:fa:a5:1d:c0:bc:3e:ef:16:13:bd:af:59:a6:
                    88:7f:75:e2:df:17:1c:6d:48:05:35:50:10:07:de:
                    7c:a1:09:82:8d:a9:84:40:77:84:42:ab:1c:58:f0:
                    0a:64:5b:6e:20:24:4e:c9:91:7f:ae:ce:d1:c8:bd:
                    f0:90:20:3c:11:cf:62:46:d0:f9:fc:dd:9e:61:56:
                    37:e7:62:cc:dc:d4:26:d0:b5:93:c2:5e:b3:b7:3b:
                    bd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4D:36:C9:B8:87:C7:D9:6E:F3:10:D3:C2:03:C7:8F:EF:EE:2C:18
            X509v3 Authority Key Identifier:
                keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:38:f0:2a:48:c4:4b:c9:d0:18:77:59:8b:3d:25:bf:fd:74:
         23:5a:0a:8f:75:ec:c7:64:ff:e1:09:2f:da:d7:e8:1d:0e:7e:
         64:e3:1a:34:f4:e4:9e:e2:60:fb:d3:37:9d:4b:00:f6:7b:33:
         8c:48:9a:d9:55:00:0d:ee:ec:fc:fa:5d:f3:9d:aa:f7:7f:56:
         44:c3:79:40:8a:f3:60:a8:76:53:1d:a6:0d:65:41:f2:1a:6f:
         8f:72:02:2f:eb:ad:40:6c:11:c5:f4:f7:4b:cb:f4:f8:34:da:
         5c:f0:8e:2d:66:94:59:4e:ef:aa:67:1a:08:1c:1b:31:3c:56:
         13:13:75:7d:0f:62:09:a8:0b:49:90:56:27:1a:0d:92:17:bd:
         8c:4d:d7:1d:b1:0c:df:3d:b6:ed:d3:79:7b:b1:35:f7:0e:ce:
         ca:bb:b7:e5:4b:5f:95:4b:39:f7:db:1a:67:ec:c4:55:23:bd:
         1d:bd:96:6f:9e:cd:a0:41:e2:b5:7c:d9:60:35:40:49:9a:74:
         6f:86:36:fe:fb:41:ee:9b:0b:3e:a8:88:42:99:42:9d:c3:aa:
         ed:71:d4:37:37:bb:94:29:68:4f:8b:06:15:76:0f:90:fb:cb:
         d7:fe:90:46:18:58:1f:d6:92:76:9e:32:09:aa:aa:f2:83:77:
         0d:61:71:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 09:55:38 2024 by rpki-client on console-fra.rpki-client.org