Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
File:                     hwrlmks42vxqMavjKcz4eP33Kow.mft (raw, json)
Hash identifier:          XTi6DahuXiCsW13RX8raWIORlfH/e4uFKVLAamBGbi0=
Subject key identifier:   F4:B4:6A:A1:5F:5B:7C:C1:E1:EB:BD:28:14:A0:71:44:A2:25:81:E6
Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
Certificate issuer:       /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Certificate serial:       166C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
Manifest number:          1656
Signing time:             Sat 18 May 2024 17:10:18 +0000
Manifest this update:     Sat 18 May 2024 17:10:18 +0000
Manifest next update:     Sat 25 May 2024 17:10:18 +0000
Files and hashes:         1: hwrlmks42vxqMavjKcz4eP33Kow.crl (hash: Ute0QvvMUpcR9Y6UHO2vUdEvF2t5Yd2LnLH2x4Fno+Y=)
                          2: 5F94C5B814A311EDA489B80DC4F9AE02.roa (hash: c9V0OKjObllh0ln/sU0Zqo3I++qHALn97HqJbLrW7+c=)
                          3: F439D662AAAE11E8B3984735C4F9AE02.roa (hash: Ewt0Ar7KJkQxN5byhTXePm4DHDfxyfNxCXU+UNcbzV0=)
                          4: E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (hash: l62B5tdMY8bfDp8pbGSQx39dSNquBGA6RfWOE9pPFfc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
                          rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5740 (0x166c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
        Validity
            Not Before: May 18 17:10:18 2024 GMT
            Not After : May 25 17:10:18 2024 GMT
        Subject: CN=6648e0fa-31b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ac:1a:5f:ce:9e:b1:81:6a:7f:ba:ee:af:a4:
                    a8:6e:7f:ad:c3:db:6b:5e:f4:85:f0:e5:86:e9:9b:
                    b3:02:a6:ad:18:2d:15:aa:dd:86:d4:05:f4:bf:bc:
                    88:5d:52:6c:79:df:d6:54:3e:46:f3:51:b7:41:43:
                    45:5e:46:cb:77:c3:99:5b:f1:f5:73:4b:ec:61:19:
                    b3:9f:b7:52:01:ee:e6:46:2b:13:d4:49:88:20:c2:
                    4b:74:d5:82:23:1a:67:cd:7e:16:9e:02:2c:ff:ff:
                    1d:1e:bd:8e:2a:3e:8f:06:54:b6:ac:68:82:c2:fd:
                    6f:e8:15:9f:92:66:8a:5b:40:b4:07:30:5d:80:36:
                    6a:a5:f4:18:a9:65:33:5b:6d:ab:f6:f8:3e:63:a0:
                    f4:57:05:2c:82:f0:16:21:3a:71:e3:42:0e:d7:96:
                    af:66:0f:30:07:cc:d2:cc:31:b3:b1:7d:c8:4a:ff:
                    8e:d2:25:ae:2b:4c:ea:c5:0b:03:e6:5a:28:33:4e:
                    a0:5c:92:1b:8c:ef:f8:04:c4:32:66:e9:00:ff:cd:
                    2d:42:e4:45:b5:d9:cc:bf:21:67:8e:4f:52:67:9c:
                    53:89:f9:c9:18:02:4f:32:8f:27:11:91:43:26:aa:
                    4a:50:fe:e8:55:fe:46:be:d2:9b:10:f6:ca:5f:d9:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B4:6A:A1:5F:5B:7C:C1:E1:EB:BD:28:14:A0:71:44:A2:25:81:E6
            X509v3 Authority Key Identifier:
                keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4e:7e:10:2d:af:6f:55:5e:2e:e4:89:ab:a2:e6:79:75:3b:
         25:0e:06:d4:9d:67:2e:ad:2b:c1:01:48:f1:7c:3d:82:10:d3:
         e4:02:bc:c8:d7:df:29:ae:7a:58:9c:db:26:58:b4:c7:a9:0f:
         3e:a4:77:b3:3b:2f:9a:3a:c5:db:88:4a:93:9a:42:89:62:44:
         59:57:ba:25:58:b5:cf:e6:32:04:b2:58:4e:a3:94:d3:7c:b4:
         d2:49:75:b3:fd:48:f7:84:bf:7b:94:fe:09:69:4c:60:1c:2c:
         5a:fe:b5:a3:95:e4:1e:e7:b2:36:77:b7:bd:9d:52:95:7a:df:
         3b:8b:37:15:24:0e:24:19:df:86:1f:e5:94:27:ae:2c:9e:1a:
         3b:64:6b:38:c6:f1:44:fa:37:ed:0e:89:4c:d2:94:21:59:fc:
         ee:ef:99:22:b0:d6:53:2e:6c:c7:76:a4:2a:34:56:26:1a:ee:
         1b:bc:19:d5:c9:82:d1:3e:aa:4a:f5:b7:48:cc:f9:0e:6a:d0:
         29:e5:ed:e9:99:56:5f:be:15:2e:a0:4d:ba:41:f3:69:30:35:
         ba:af:a0:68:83:34:18:34:c6:a2:df:9a:dd:7a:1b:9c:3f:a8:
         0d:40:77:20:9c:6c:3e:52:f0:73:9a:0c:8f:9b:98:1e:c4:bb:
         68:b9:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:37:31 2024 by rpki-client on console-fra.rpki-client.org