Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
File:                     51IOJIn_YDiw2HmwRxcPnFGs984.mft (raw, json)
Hash identifier:          ZIyv8fuqOuJ8ZggTfR4RGGWtA+KEmzsdGMJDcvieSxs=
Subject key identifier:   27:77:79:2A:C5:FE:73:83:85:59:32:F6:14:FE:B1:5D:F6:A9:FA:27
Authority key identifier: E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE
Certificate issuer:       /CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
Manifest number:          0123
Signing time:             Sun 19 May 2024 05:14:45 +0000
Manifest this update:     Sun 19 May 2024 05:14:45 +0000
Manifest next update:     Sun 26 May 2024 05:14:45 +0000
Files and hashes:         1: 51IOJIn_YDiw2HmwRxcPnFGs984.crl (hash: YtuF8pTlqEU761Jv0GhY9jj5pfpRZBPpMNYQWfxf7+M=)
                          2: 27C38AF4C0C111EE84A55128C4F9AE02.roa (hash: krChI2Ncs7taBptMzXF+aTStVwnzaxOAnu3OmU8IMMo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl
                          rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
        Validity
            Not Before: May 19 05:14:45 2024 GMT
            Not After : May 26 05:14:45 2024 GMT
        Subject: CN=66498ac5-cc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:ed:78:48:ca:be:42:19:28:ed:0d:77:ea:
                    b0:f2:1c:79:c4:a9:89:cd:93:57:a4:66:ab:e0:12:
                    6b:26:2b:df:cb:b4:c0:94:97:31:6d:9f:b1:5e:4c:
                    20:60:79:fb:8d:e4:08:5c:be:dd:bf:e4:30:da:ae:
                    d4:1a:8a:14:fe:60:24:de:7f:d5:1f:6c:62:16:cc:
                    ad:65:0a:7d:53:58:27:30:03:e9:37:a3:50:8b:f7:
                    fc:62:7a:f4:2e:b6:d6:a5:f5:fa:5a:1e:fa:0b:c9:
                    8d:67:41:04:17:ca:e3:a5:07:e7:e3:d0:ac:fe:e9:
                    42:8d:bb:05:1c:92:6b:60:e7:1c:bc:31:ed:48:af:
                    f9:db:72:38:a0:cf:7d:0e:f5:eb:99:82:1a:dc:d1:
                    df:c9:e1:52:b1:ee:8e:33:eb:de:35:17:e0:68:a2:
                    39:1a:7c:85:85:d2:bc:76:81:ca:5c:75:b1:2a:65:
                    a4:91:cb:e0:de:1d:77:99:4a:72:03:eb:75:74:0b:
                    91:6b:5d:af:e5:4d:c5:41:d2:8d:3b:0a:08:f6:77:
                    f1:0d:35:74:b2:fd:4c:15:40:7e:cb:37:03:26:50:
                    b0:16:03:15:b2:ce:78:e9:40:31:38:9a:b5:c7:02:
                    c4:26:51:db:81:a2:91:64:5f:46:79:da:56:bb:e1:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:77:79:2A:C5:FE:73:83:85:59:32:F6:14:FE:B1:5D:F6:A9:FA:27
            X509v3 Authority Key Identifier:
                keyid:E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bc:3a:8b:56:22:ef:3a:77:fa:79:0f:bc:0a:db:c1:ff:ac:
         c1:c0:0f:41:35:d6:5d:61:c2:ef:31:0c:db:3d:4e:2a:80:41:
         e4:d3:86:2c:78:11:cb:c0:fd:f5:33:16:2f:91:20:2f:2a:dc:
         50:13:8d:42:46:c1:00:78:06:d8:ef:a0:c8:90:77:fe:c9:1a:
         43:7a:e9:62:f2:90:5e:a5:f3:91:b9:f8:12:6d:82:af:35:c6:
         a9:5c:1d:3d:0c:6c:b5:ea:bc:ac:6a:d7:2b:e3:6a:a9:c1:23:
         b1:c2:14:01:8d:cb:45:3f:75:0f:1e:91:27:64:51:fb:3d:21:
         d4:fb:23:a8:ba:ea:aa:ed:5f:31:79:76:a8:2b:ce:69:72:3e:
         18:4d:b8:79:25:06:ec:48:bc:a7:37:4d:a2:66:4a:32:a9:bb:
         d3:3b:c1:b6:75:ef:6c:12:9f:67:b6:c4:ff:cf:55:88:f5:3d:
         7e:37:ea:cd:e2:91:7c:bd:a9:d6:32:30:7d:cc:e6:10:6f:7f:
         01:8d:0f:f1:c7:ad:d2:d5:c9:31:db:90:90:c3:d4:d6:d4:cf:
         f4:64:7a:42:35:06:5f:da:9d:cd:78:c6:88:9c:6f:a6:d0:92:
         ea:00:3d:0e:45:72:02:72:66:82:89:62:db:01:e3:46:85:90:
         b7:a6:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:14:32 2024 by rpki-client on console-ams.rpki-client.org