Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
File:                     FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json)
Hash identifier:          qJb+SRvMfFB/a7p+TupJytDiEq3WYMwpOw2O8QqSyqI=
Subject key identifier:   EF:C8:45:DD:15:38:B9:C1:88:7F:75:6F:E6:9B:48:67:01:12:13:0E
Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
Certificate issuer:       /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Certificate serial:       1859
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
Manifest number:          184D
Signing time:             Fri 31 May 2024 17:08:21 +0000
Manifest this update:     Fri 31 May 2024 17:08:20 +0000
Manifest next update:     Fri 07 Jun 2024 17:08:20 +0000
Files and hashes:         1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: Yea2aqrcFWMkqderdS6hXwApa9i0We+T6HMzcZunqQM=)
                          2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: fKwJVqgMUMQZB27+5tjX0qOaFLH1LRRBqtOZNdKWHTc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
                          rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 17:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6233 (0x1859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
        Validity
            Not Before: May 31 17:08:20 2024 GMT
            Not After : Jun  7 17:08:20 2024 GMT
        Subject: CN=665a0404-4612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:df:f2:59:f2:a4:c6:c7:c5:96:a7:b9:f1:
                    73:37:6e:e0:32:9a:21:fe:52:c3:9d:c2:d8:35:20:
                    b9:e6:84:81:c6:ae:fb:e7:8e:a5:e2:e2:c6:b4:03:
                    20:c6:8d:ba:18:0d:9b:fd:aa:70:a1:ac:72:f4:48:
                    4b:5f:e1:5d:8c:0e:4a:e1:a2:2d:e6:3b:1c:59:1a:
                    28:ab:94:db:10:ae:4d:3f:1d:b2:b2:d3:af:68:4c:
                    ac:35:20:47:e9:b4:76:b8:31:1b:f0:e7:f6:b2:f1:
                    a0:8c:b5:db:66:0a:84:ce:88:2c:a5:3a:7a:30:f8:
                    13:f9:e7:b7:da:a8:b3:e6:ee:8d:83:79:87:5c:a0:
                    b4:a4:bd:8f:ba:bd:36:a7:66:ac:04:77:06:da:32:
                    40:76:9c:5d:38:8d:82:2e:36:2e:73:57:4d:e9:f9:
                    01:d5:e5:92:37:d6:af:5e:95:8a:3b:a6:07:e7:b9:
                    bd:cc:e9:4a:99:77:bf:7a:4c:79:2e:d6:d6:a8:02:
                    bf:39:c8:00:5a:db:ff:28:e6:40:ce:62:ff:71:1f:
                    96:31:78:43:40:1a:bd:7d:8c:c4:ca:d4:90:f9:0e:
                    0a:7a:54:18:81:e1:ba:22:b6:43:57:e1:ac:c9:9e:
                    b4:0f:df:57:2a:29:23:24:fb:49:c1:a2:89:af:82:
                    63:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C8:45:DD:15:38:B9:C1:88:7F:75:6F:E6:9B:48:67:01:12:13:0E
            X509v3 Authority Key Identifier:
                keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e1:36:f3:c8:2d:21:ef:66:da:6d:96:0d:ca:bf:4f:85:1c:
         d5:e9:0d:c4:53:e0:43:e2:b9:c9:4d:0d:05:02:59:06:35:d7:
         a8:f8:27:da:fd:17:31:eb:01:35:2d:46:3e:49:1a:b1:d6:de:
         b6:1c:ba:35:72:07:b1:4c:74:3c:93:b2:59:c8:af:20:ad:95:
         2e:28:66:32:be:5a:ab:45:f7:b9:f1:97:dd:07:3e:ce:ec:4f:
         8c:d7:5c:d8:6c:f8:84:8d:82:61:1c:f5:7f:78:a2:6f:1e:c9:
         d7:52:0b:d8:5c:12:a6:df:dd:b6:2b:fa:fd:74:00:e2:aa:74:
         a7:d9:e4:e0:22:12:29:50:a1:5a:15:f8:90:75:71:86:8a:f8:
         3e:a7:15:43:a6:ed:a3:c6:da:93:62:48:e4:03:97:db:fa:ae:
         56:2f:08:01:21:f6:49:db:27:54:f8:66:4a:a6:97:d3:3b:81:
         42:af:7d:25:18:83:80:be:61:fc:bc:cf:ba:83:ca:80:d6:27:
         ad:83:98:ec:d7:31:28:14:87:30:04:f6:2a:50:27:bd:3d:f1:
         b7:eb:77:3d:92:f6:2b:b6:77:e1:7c:1b:a1:9e:18:6a:3f:fd:
         2a:b2:15:a9:b8:97:a1:66:b9:b2:76:d5:47:51:9a:e5:50:d8:
         48:d7:2d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:33:57 2024 by rpki-client on console-ams.rpki-client.org