Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
File:                     rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json)
Hash identifier:          OS1b0elA5CLmHy/hRmSJy9FWU8xwQpVsUq/RM8TM450=
Subject key identifier:   1B:5E:CF:B5:EA:FB:45:5C:05:04:D9:F0:1E:28:EF:86:3D:8B:CF:CD
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Certificate issuer:       /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
Manifest number:          0132
Signing time:             Sat 01 Jun 2024 06:24:45 +0000
Manifest this update:     Sat 01 Jun 2024 06:24:44 +0000
Manifest next update:     Sat 08 Jun 2024 06:24:44 +0000
Files and hashes:         1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: aTgU3pZui2kvlWzUaHysVqY51bvwNGIeasSV+QFbwrw=)
                          2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: TI9mHaq+nSiF95UKzqARFSVJjwuPveXnpdDY0+JZwvM=)
                          3: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: 9Vezv6f2TBHikRfC4HayJsEyH5ehPHuwkPj3WFW/m9o=)
                          4: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: eIVi7HYbt0D8MqI/rpORYfeMPzB1M0qkWd8yT90MMQI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
                          rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
        Validity
            Not Before: Jun  1 06:24:44 2024 GMT
            Not After : Jun  8 06:24:44 2024 GMT
        Subject: CN=665abead-915a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:58:0a:0a:63:61:47:55:0a:79:1c:90:cd:9f:
                    db:0d:84:97:e4:db:ef:0b:e0:d6:dc:45:a6:fe:ee:
                    28:03:ad:4c:37:d2:c3:94:f4:3d:87:d0:b1:ee:65:
                    b5:17:bf:ec:b7:83:ba:4e:b5:2f:3e:36:a5:19:2d:
                    3f:1c:ff:7d:17:e4:58:60:c5:78:50:35:a6:d0:18:
                    bd:52:1a:05:27:4e:e3:bd:08:74:95:5d:28:82:14:
                    3d:62:93:ed:75:ca:ec:b9:f5:ef:b8:2a:58:4f:54:
                    70:29:35:66:b6:be:fc:6f:00:f2:a6:8c:da:88:8e:
                    04:f3:eb:76:6b:a7:c0:e1:9c:3f:1f:84:28:6b:44:
                    60:30:56:8d:8d:88:7e:56:83:9b:3b:74:85:d9:f0:
                    80:4e:25:c1:ab:e9:25:d9:41:25:1e:61:c6:98:3c:
                    7e:c7:bd:7e:d8:cd:55:78:1e:78:0e:fb:24:0e:84:
                    6c:e5:18:c7:6b:a4:bd:e8:45:e6:63:11:2b:ec:33:
                    7d:29:63:43:a8:47:cc:11:97:2c:62:71:d7:98:73:
                    a0:9f:d8:12:7b:f0:d3:79:3b:ed:75:a6:d3:05:e5:
                    a9:24:90:0b:9e:82:67:dd:6c:b9:fd:4d:3b:fe:58:
                    f5:f7:d8:52:cd:22:ce:9e:d8:f3:19:c9:18:ea:01:
                    71:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5E:CF:B5:EA:FB:45:5C:05:04:D9:F0:1E:28:EF:86:3D:8B:CF:CD
            X509v3 Authority Key Identifier:
                keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:75:fa:d0:75:1a:b4:62:64:02:a2:64:57:0e:de:99:3a:38:
         d2:2f:fc:31:a3:99:bf:d9:0d:5d:c5:5a:bf:1d:04:3e:64:88:
         48:04:c4:da:b6:a3:ea:1c:07:fc:1b:80:53:0b:2c:4e:9b:52:
         0c:4c:44:e0:6f:fc:fd:4c:31:79:2b:61:a2:df:c6:f1:1b:75:
         77:37:f1:46:2d:e9:38:2d:b6:35:de:6d:29:29:3c:fb:54:93:
         35:1e:0b:82:c6:b7:5e:eb:90:ad:0b:da:c1:71:59:f5:61:39:
         86:3b:c6:55:4d:e1:54:0b:86:17:63:55:16:79:92:a0:5e:c5:
         a3:55:e4:fc:22:7d:31:7f:97:d3:ef:ee:49:58:21:1b:a1:cf:
         de:55:a8:0e:e6:da:0d:2b:11:7d:16:6b:94:1d:c4:18:59:8d:
         c1:70:50:3c:ac:9a:38:87:de:2a:ce:96:7d:81:ab:5a:b1:ed:
         e0:93:1d:5d:b8:34:da:70:00:3a:6e:12:3c:dd:24:ef:95:9d:
         15:f5:08:82:59:ae:9a:4c:e4:30:2f:e3:45:2f:cd:60:64:89:
         de:cb:f4:9a:94:93:45:89:02:43:86:01:b0:15:39:75:79:63:
         b6:85:f9:2e:e0:20:22:12:8c:42:41:a6:4c:92:00:94:6f:07:
         ad:f1:36:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:10 2024 by rpki-client on console-ams.rpki-client.org