Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
File:                     mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json)
Hash identifier:          XVKuVwluXn20MFV7WAiYjW0cFCiFuf95JoOeL05KEf8=
Subject key identifier:   20:1A:CF:B3:D0:19:F3:13:45:3D:73:1B:BB:E1:2F:9A:EE:37:8E:31
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Certificate issuer:       /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
Manifest number:          01F0
Signing time:             Sun 19 May 2024 04:14:17 +0000
Manifest this update:     Sun 19 May 2024 04:14:16 +0000
Manifest next update:     Sun 26 May 2024 04:14:16 +0000
Files and hashes:         1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: W4nqRd0amqvGEi3K9ERzDh7TvOj1qsivFyWnUSxwLNg=)
                          2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: iRvK7gi1MIaKjl4pKKpEsL6fi8pWyGo8kzALYvZpty8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
                          rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
        Validity
            Not Before: May 19 04:14:16 2024 GMT
            Not After : May 26 04:14:16 2024 GMT
        Subject: CN=66497c99-da8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:67:da:02:79:f7:1e:0b:13:a5:75:c1:99:
                    84:8d:4e:94:77:a7:77:3e:7d:5d:35:63:aa:1a:e4:
                    5e:14:1d:6c:61:98:1c:ca:30:13:71:90:b4:98:70:
                    e2:93:4b:b2:c2:17:98:60:05:45:51:05:4d:7b:ae:
                    8e:c8:cd:f0:7b:9c:98:91:81:fb:bc:46:be:50:69:
                    d7:b3:40:ce:11:a4:dc:ae:04:5d:d6:2e:0c:e3:aa:
                    b9:bc:e3:ac:99:cf:64:33:51:24:58:d2:2d:4e:dd:
                    b7:58:1b:0e:a0:42:1c:7c:73:6b:ad:ec:33:d7:28:
                    14:84:51:82:1b:23:31:c8:e5:1a:7c:d0:ac:d1:eb:
                    86:36:65:d9:31:9f:28:2b:90:c2:f9:bb:9f:c0:c0:
                    c7:82:ac:59:84:4f:9d:1e:38:21:2a:a8:36:81:cf:
                    bb:93:69:75:3b:6b:53:b0:59:11:b1:6c:d8:d2:c3:
                    56:63:b6:07:3f:36:22:48:2f:27:cd:61:fe:ae:e9:
                    62:e8:98:d9:b8:a0:94:b1:e2:74:0e:db:7b:df:5f:
                    32:07:d1:21:f8:2b:b7:e1:05:1a:ea:10:fd:a8:bf:
                    83:8c:0f:b2:0b:c2:fe:fc:08:23:f6:0f:e4:35:7e:
                    75:04:dc:a8:bb:d4:b7:55:fe:e1:4f:13:c7:61:5b:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1A:CF:B3:D0:19:F3:13:45:3D:73:1B:BB:E1:2F:9A:EE:37:8E:31
            X509v3 Authority Key Identifier:
                keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:38:4a:ff:85:a8:1c:6c:16:0c:89:2c:09:56:77:3a:3b:57:
         70:48:c8:68:77:dc:30:b4:0e:a3:33:9e:22:07:6a:ce:47:72:
         f0:dc:8a:a8:70:39:33:44:3d:c7:cf:76:38:12:25:73:db:ff:
         19:b3:77:5e:96:2a:72:54:bb:cb:f2:d4:20:d5:1a:74:7b:ac:
         a6:3b:98:6a:a5:e0:71:3e:1f:29:0c:80:af:e3:78:52:d7:b3:
         e4:d6:66:de:ac:bf:22:b0:60:12:ad:fe:e1:2d:70:6d:ee:4d:
         b0:95:5c:07:31:1d:2c:ee:0d:b9:b1:7a:4a:32:b3:01:b9:63:
         f1:00:f6:e3:2f:4e:ff:ff:62:12:9c:c5:5a:9a:8b:a4:f9:5c:
         3d:85:aa:3a:fe:34:00:a6:02:96:57:5a:46:0d:b8:d1:ca:d7:
         11:48:e0:42:7d:08:1f:08:6d:d4:e4:53:15:c9:70:fb:c2:39:
         28:4e:aa:e8:e7:5e:36:86:43:43:7d:0d:d2:5b:2d:4c:05:f3:
         df:32:60:0d:eb:ed:a4:6c:3b:ee:36:09:3d:db:93:1d:a0:d1:
         36:f9:e1:0f:2c:1f:b6:b4:79:f7:21:9d:d7:48:96:fa:b6:b8:
         bb:90:e9:c6:cd:45:3b:1b:c9:6e:b5:26:d6:a5:5b:e7:38:28:
         90:35:e4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:56:54 2024 by rpki-client on console-fra.rpki-client.org