Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
File:                     9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json)
Hash identifier:          6cYO7PziC1RP+NjpffzCJDJQOo0xQt/pt+LmYFRS0g4=
Subject key identifier:   3D:CF:D6:81:F7:05:8B:D2:7E:32:03:C7:8B:9E:E5:85:63:27:B3:44
Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6
Certificate issuer:       /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
Certificate serial:       0569
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
Manifest number:          0564
Signing time:             Sun 19 May 2024 00:44:43 +0000
Manifest this update:     Sun 19 May 2024 00:44:43 +0000
Manifest next update:     Sun 26 May 2024 00:44:43 +0000
Files and hashes:         1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: X6XMjjmffKa5vF8bWZthSF1/oI/8+b+00uA06eYXPBc=)
                          2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: WhjYXkxZApUyC6kLLwWsyENauT6qc8+742zotM8AzHo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl
                          rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385 (0x569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
        Validity
            Not Before: May 19 00:44:43 2024 GMT
            Not After : May 26 00:44:43 2024 GMT
        Subject: CN=66494b7b-769a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:14:59:4b:5b:19:db:84:0f:79:38:a6:73:
                    60:b8:10:e1:d5:60:3b:b9:63:05:86:af:ff:ff:62:
                    9f:eb:02:83:97:55:66:71:39:88:fd:46:d5:15:a8:
                    81:a9:97:48:67:c5:f7:44:46:e6:c5:cd:e2:47:d3:
                    59:57:c2:32:9f:1f:94:aa:06:6f:0f:15:cb:f5:e2:
                    28:38:8d:c3:d7:c5:52:d4:43:37:e5:b4:f5:77:f6:
                    45:e1:39:52:e8:ed:20:c9:72:1e:d4:0d:04:b2:c8:
                    fb:09:fe:ef:2a:cb:d7:41:63:f8:4f:c6:0e:b8:c9:
                    ce:1a:29:79:9d:74:b5:85:f1:24:45:f4:6a:60:bf:
                    aa:83:ba:f5:dc:18:ef:0a:1f:e3:ca:e1:74:ed:8e:
                    f8:a2:1a:0e:46:61:a4:59:2d:45:24:0a:49:fd:1a:
                    3d:91:c0:14:d4:45:bb:53:71:e6:e1:d3:60:e6:46:
                    29:3f:d8:1e:0c:00:de:2d:93:ca:3c:54:5a:7b:62:
                    12:77:8a:e4:e2:dc:4d:e7:4a:34:0f:cc:68:cb:01:
                    32:39:92:8c:5c:f4:be:b0:49:ed:fa:fa:3c:4d:fd:
                    f5:5d:16:bd:66:1c:68:1e:08:ad:a1:47:e1:64:75:
                    f6:e4:60:1a:05:1b:48:93:f1:06:f9:cf:0e:e5:40:
                    53:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CF:D6:81:F7:05:8B:D2:7E:32:03:C7:8B:9E:E5:85:63:27:B3:44
            X509v3 Authority Key Identifier:
                keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:57:a2:a3:85:95:a8:3f:7f:0c:5a:de:30:40:15:2b:04:96:
         d0:cd:51:f9:42:3c:17:3d:7b:74:b7:64:34:df:30:59:3a:95:
         a5:a2:ae:26:78:ed:00:c1:40:a5:88:45:24:d4:96:a2:b1:4a:
         14:48:60:2b:cf:87:46:e2:57:86:73:9e:11:e8:81:f1:65:2a:
         5b:42:12:56:ee:84:7f:40:d7:39:b0:5f:d2:6a:16:46:fa:ba:
         be:cb:d2:10:0e:78:53:8d:5c:38:c3:3b:1e:a8:14:a7:93:8b:
         99:99:d9:8d:f3:11:07:bd:20:65:c0:96:68:3a:bf:6a:db:03:
         85:cb:a0:2d:e2:3c:a9:41:40:dd:13:f3:31:5a:77:df:a4:11:
         88:9f:bf:e1:4a:c1:5d:49:35:99:3d:49:fd:42:f1:97:22:d1:
         c1:61:d6:a1:bf:41:ec:28:ea:7f:56:c1:c3:2d:a1:91:b3:f7:
         3b:bd:1e:b5:f5:03:08:ea:c3:5a:16:5a:a7:9f:6f:2a:53:5a:
         3b:76:3e:55:56:5f:fb:98:c5:bd:44:39:e5:4e:53:bc:9f:bb:
         62:b5:e5:61:b4:ac:67:9d:03:fe:61:78:a0:f2:f7:67:de:1d:
         45:1c:71:cb:30:af:c6:e2:0f:da:de:75:56:b6:cf:d4:8b:09:
         49:a6:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:08 2024 by rpki-client on console-ams.rpki-client.org