Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
File:                     FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json)
Hash identifier:          e1HcwcomNRd9gL9AEhH1cvm845aoxeHs8h7F1aXmZr4=
Subject key identifier:   5C:94:CF:2E:EF:38:8B:1F:83:DD:E9:0E:A1:3B:4D:D3:3A:13:23:D9
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Certificate issuer:       /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
Manifest number:          013B
Signing time:             Fri 03 May 2024 05:07:18 +0000
Manifest this update:     Fri 03 May 2024 05:07:17 +0000
Manifest next update:     Fri 10 May 2024 05:07:17 +0000
Files and hashes:         1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: wvzS0m2P2Tn/j7v0Zv7EUhki1DC74LFA3tEI/uwH4jE=)
                          2: CA954EAA47EC11EE8A738D61C4F9AE02.roa (hash: lOEyb80ZYMNtFqP00KW8xUMjR7HGGb1TNFefjzPXQ+4=)
                          3: 51AC16D65B9211EE908D763DC4F9AE02.roa (hash: igMS7SyCU3AZU/4z7eVlxFdZXBQDvyhPYYv8ygcOSRE=)
                          4: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: UMwg4IX5pj7gO3hHk7+rZASTT/0vGlGANQNC8rF2aEs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
                          rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
        Validity
            Not Before: May  3 05:07:17 2024 GMT
            Not After : May 10 05:07:17 2024 GMT
        Subject: CN=66347106-d7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:26:b4:f0:74:3d:ad:7a:27:73:9a:a7:55:bc:
                    d3:13:d9:0b:92:ea:64:f2:12:87:1a:74:e2:11:11:
                    71:37:17:dc:ae:f5:29:b4:83:ae:b4:f6:f2:5c:8d:
                    55:8c:2c:e5:39:f1:03:a6:a1:c7:8e:08:86:ef:69:
                    43:b8:80:10:32:ee:0e:1c:c8:07:b5:67:f1:9e:17:
                    37:83:fa:48:2c:be:38:de:82:e9:f1:e6:fc:bb:c0:
                    f2:56:68:81:f6:c9:3e:ff:8b:a3:93:0c:3d:2c:47:
                    18:d4:ff:ba:9f:7c:bf:93:5d:56:7e:36:37:ed:32:
                    86:cc:8f:b8:6e:af:a9:28:7c:74:30:22:b2:5d:3b:
                    cb:00:f3:7f:d0:ed:04:47:62:49:41:ea:67:7d:d7:
                    7f:36:a4:23:1d:30:6f:f2:e0:a1:9f:74:21:8e:d6:
                    1f:fd:0e:95:34:2c:a9:11:cf:8d:69:79:d1:69:51:
                    7e:68:b2:65:b6:2b:80:9f:b4:92:54:de:e9:7c:13:
                    b3:ee:30:69:d6:e4:7e:c3:8f:6f:60:00:b8:d0:65:
                    32:d8:da:14:a9:74:a7:da:cf:6f:4f:81:38:aa:bc:
                    74:9c:19:45:21:b4:03:9f:c9:16:65:cf:33:3d:0a:
                    7c:88:fb:5d:68:ea:9b:8e:39:ea:7b:fb:04:da:c2:
                    b7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:94:CF:2E:EF:38:8B:1F:83:DD:E9:0E:A1:3B:4D:D3:3A:13:23:D9
            X509v3 Authority Key Identifier:
                keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:13:d7:6d:5b:fa:c1:8b:56:43:65:a6:13:30:c0:c2:64:9d:
         3b:d1:2f:22:4d:af:99:9a:1e:a8:6b:96:f9:34:3e:3a:d6:36:
         fd:cb:f8:61:6d:d3:1e:3b:0f:ae:80:15:13:fd:63:20:60:68:
         8b:02:66:d3:15:30:85:58:9d:ce:8a:7a:b6:bc:71:52:09:75:
         ef:3d:92:4e:3f:88:e5:a4:c7:8a:a8:e1:2b:a5:7b:11:2b:4e:
         5a:65:fe:4b:d7:ad:8a:86:e5:d8:3d:fe:70:05:fb:15:54:82:
         b8:9d:d9:b4:78:55:f3:c3:c1:aa:4f:0f:a2:7d:d4:9b:e3:e1:
         bc:ac:9e:ef:9b:4a:a7:6f:f1:8d:e5:74:22:a7:2d:ea:50:aa:
         af:66:be:7d:e6:b4:f5:c7:cd:30:25:be:55:49:2f:bf:f1:12:
         bd:07:cb:44:01:5f:75:42:bc:1f:c6:69:ca:96:d9:fa:e1:03:
         1e:ee:f1:31:29:a7:7a:13:43:ab:69:98:bc:7c:02:55:96:1f:
         0c:5b:dd:7b:77:ab:aa:67:b3:66:b7:9e:91:c4:df:df:b7:55:
         4e:74:3d:13:0d:90:56:6a:a9:7e:25:4d:62:6e:29:13:25:18:
         d9:7b:9b:9a:3b:f2:71:85:5c:49:be:02:3d:d4:37:c0:cf:b7:
         1a:6a:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:29:22 2024 by rpki-client on console-fra.rpki-client.org