Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
File:                     MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft (raw, json)
Hash identifier:          g5ElDBqcXDDKR7W1FFhp0eDU4ADL+2CGS6FeIkq0sv8=
Subject key identifier:   F1:6B:24:14:D9:8D:61:26:51:1B:B4:65:30:B2:DA:EC:2B:2D:30:29
Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
Certificate issuer:       /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Certificate serial:       0506
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
Manifest number:          04F9
Signing time:             Thu 23 May 2024 01:12:36 +0000
Manifest this update:     Thu 23 May 2024 01:12:36 +0000
Manifest next update:     Thu 30 May 2024 01:12:36 +0000
Files and hashes:         1: MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl (hash: xjUPgUhgJAdulzh+jTbMy/Y1V4AP43Bhz8A/+xlpdo0=)
                          2: B87A46B4FEA211EDB9013076C4F9AE02.roa (hash: r8r/ffLXsiK1EC74sEY12yC3C4pjczV8wBvO+XEJa4Y=)
                          3: B9A42F96FEA211EDB9013076C4F9AE02.roa (hash: ArEg32Cuq9ncM3zIARMue2qcKrb8uSEE2v+HVPiVbo8=)
                          4: B7BBC928FEA211EDB9013076C4F9AE02.roa (hash: Ao1tv/oC6DHEIsrO50brMTGNKACODp2rT6dyQrhvkoY=)
                          5: B902532EFEA211EDB9013076C4F9AE02.roa (hash: tNwf9pVzGm+FnD7pt0/d40duH3c1/jTiM6sNrpFRZ0M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
                          rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 00:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286 (0x506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
        Validity
            Not Before: May 23 01:12:36 2024 GMT
            Not After : May 30 01:12:36 2024 GMT
        Subject: CN=664e9804-5e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1f:90:2a:0f:ce:db:58:e5:20:06:10:a9:a8:
                    da:65:68:5f:12:80:40:24:f7:e1:ca:9c:45:af:8a:
                    ea:0e:aa:ee:4c:9e:50:50:ac:8e:fd:5e:dd:a5:30:
                    25:c4:5c:98:36:c0:e7:68:3b:ff:36:dc:1b:0c:34:
                    33:7e:32:27:66:57:28:ac:ef:3a:6a:14:6f:b5:7b:
                    8d:58:40:e8:93:7f:b1:0c:a4:31:e9:ad:73:9a:ab:
                    7e:e4:0d:9f:62:68:30:c5:2a:2b:9f:16:27:95:58:
                    da:55:49:38:2f:1e:9a:51:e1:2e:92:64:2b:1e:da:
                    85:28:7c:33:a4:ac:bf:c2:17:f0:3f:fd:68:1b:c1:
                    bb:b9:f9:e9:46:ad:09:80:01:08:39:53:36:4a:d5:
                    ee:35:34:b4:34:da:38:3c:81:77:b2:ed:68:94:cb:
                    41:eb:4a:38:43:83:c2:35:48:1a:31:66:24:62:bd:
                    24:95:05:a1:4d:1c:e1:6d:a9:80:ab:d1:d9:25:ba:
                    09:b3:bc:fe:0c:5a:99:38:ea:ec:5a:db:eb:0c:8b:
                    3d:1f:55:f7:47:9e:3c:0a:30:5a:fc:b9:f1:61:88:
                    d8:5e:43:26:f7:d1:86:ee:94:f8:13:fb:03:16:4b:
                    38:b7:2f:ac:fa:66:fe:23:dd:1a:f8:b9:f7:fb:df:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6B:24:14:D9:8D:61:26:51:1B:B4:65:30:B2:DA:EC:2B:2D:30:29
            X509v3 Authority Key Identifier:
                keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:47:af:7c:49:91:64:a7:8d:31:37:51:92:ce:94:0a:3d:5e:
         c7:52:dc:05:83:77:74:62:3d:fe:4d:1a:4d:1c:5b:a8:09:c8:
         c0:bc:2e:1e:ca:fb:b4:ea:18:01:9e:e4:f7:cf:b9:31:4f:2c:
         92:7d:d5:1a:fc:78:9e:3a:ab:b7:dc:33:1e:09:5b:59:1d:95:
         75:dc:4b:11:e1:dc:14:38:57:12:b3:ec:d9:b5:c3:51:c1:c4:
         3b:9a:76:8b:7b:31:17:75:8f:f8:43:e9:22:d8:07:2c:af:90:
         b2:d4:1e:7b:45:04:a6:13:70:3a:d6:de:f1:fe:96:38:6c:e6:
         ed:91:e1:41:d1:92:d0:d5:7e:61:7b:1b:c5:a6:44:d1:5f:bc:
         8f:70:b4:36:8e:8c:ea:ac:d1:3d:4a:3a:83:3c:c5:ee:18:5d:
         1b:17:b9:37:87:92:a5:dc:fe:53:13:b5:fa:25:43:72:60:fc:
         65:b3:a0:c8:b6:e1:89:6e:6d:01:4d:05:59:7c:64:dc:a6:b2:
         fc:56:10:2a:49:aa:1b:d7:f8:88:2b:42:ae:ef:f9:c8:83:4e:
         04:17:36:4a:fe:85:5f:fb:bb:f1:c5:38:ac:a3:9b:b5:24:98:
         dc:19:3e:1a:54:d6:05:81:16:39:1c:b8:96:7f:2f:a3:95:11:
         8d:eb:30:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:34:44 2024 by rpki-client on console-fra.rpki-client.org