Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
File:                     eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft (raw, json)
Hash identifier:          ivmhR4lqnHPIiPpRxZ0GHu2SG7zKBKqu6oKtxDNST8Y=
Subject key identifier:   57:2C:65:8D:C0:5C:F1:91:16:03:0A:CA:14:72:AC:5F:F8:7E:25:9B
Authority key identifier: 79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44
Certificate issuer:       /CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
Certificate serial:       227D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
Manifest number:          226D
Signing time:             Sat 18 May 2024 16:10:53 +0000
Manifest this update:     Sat 18 May 2024 16:10:53 +0000
Manifest next update:     Sat 25 May 2024 16:10:53 +0000
Files and hashes:         1: eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl (hash: 6FX/Ps8NI0lj3gWVvrn133rbAVqxvyd8NTf2iw0sQBQ=)
                          2: 3FDC5DFEF42011E98CE43179C4F9AE02.roa (hash: beJZNg8lxpqAAHJoJpUot8LHQN46ww5o/CHFoYK6NF4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl
                          rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8829 (0x227d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
        Validity
            Not Before: May 18 16:10:53 2024 GMT
            Not After : May 25 16:10:53 2024 GMT
        Subject: CN=6648d30d-4a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:a8:71:14:24:7d:5f:96:c7:3b:62:03:9e:
                    20:e4:1e:35:0d:03:af:7c:b6:a8:6d:e9:42:4f:df:
                    91:05:86:57:91:df:e9:6a:2f:93:89:0d:64:23:d8:
                    d9:9a:23:b1:73:78:4e:9b:19:f0:ad:5e:ce:0a:31:
                    d9:d8:fc:63:33:98:5e:79:ce:3d:24:60:0e:a9:9b:
                    42:fb:6d:02:ec:59:4e:80:7a:7e:7d:ef:bc:36:f8:
                    69:e7:f7:8f:d9:7b:ef:67:1a:ec:a0:59:f3:0b:5c:
                    ba:9f:7e:46:dc:e0:e6:23:18:5c:df:4a:52:25:ab:
                    d0:3d:07:f5:85:10:12:e9:9b:db:a2:ee:ef:ea:1a:
                    b1:e9:fe:f6:e1:7c:f8:97:d0:21:be:c9:20:19:07:
                    7d:d0:15:fd:d2:5f:b7:04:36:c1:45:dc:ed:bf:fc:
                    f1:ba:ba:46:63:b1:08:d1:80:32:27:b6:bf:61:7a:
                    93:5f:ae:98:1d:65:14:07:26:12:84:2a:42:ac:9f:
                    57:78:2b:11:8a:ec:e0:ea:53:f4:89:0a:6f:b1:b4:
                    5c:17:ee:e2:b4:e8:9d:ab:14:64:96:3e:dc:70:f4:
                    12:7a:5f:44:a4:e8:12:73:5b:bb:51:c9:56:4f:1a:
                    9b:32:01:0b:b6:2c:07:40:f8:7b:b9:7b:be:f5:6f:
                    8f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2C:65:8D:C0:5C:F1:91:16:03:0A:CA:14:72:AC:5F:F8:7E:25:9B
            X509v3 Authority Key Identifier:
                keyid:79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c2:0d:51:55:c2:ee:b6:36:18:35:dd:36:79:43:f2:80:d2:
         6a:8b:10:10:56:96:a4:d2:9f:1d:ab:cd:40:c7:60:98:f9:72:
         b8:5d:76:7e:ad:6b:62:14:a5:20:35:b0:a9:8f:85:d5:59:d0:
         2e:c0:8c:ba:26:53:67:18:4a:11:5a:2a:85:4e:da:9c:2f:2b:
         94:a0:82:34:b7:a1:03:96:bf:fa:e2:b1:27:1f:0d:b9:4a:00:
         dc:f9:97:00:ea:98:bf:58:7b:a1:4c:ee:9d:49:e6:33:f3:ab:
         c8:92:15:f9:35:04:40:bf:fa:41:07:b5:a2:fc:28:a9:bf:82:
         50:d0:4a:bc:30:e3:5e:55:49:df:0f:37:0e:8c:ce:6a:cf:98:
         d8:80:d2:09:8b:17:5c:b7:44:72:94:0d:71:5f:cf:4f:50:1b:
         23:af:5b:0a:e8:90:26:6d:34:a4:aa:e1:f1:17:89:48:cf:a9:
         a0:18:62:5f:3c:99:d3:8c:ea:5b:2f:43:62:87:a2:c2:66:26:
         50:2b:ed:7f:a5:1a:44:99:ae:d9:05:66:b7:db:1a:ec:e8:5f:
         50:bf:c9:73:d9:4f:00:d1:99:16:0e:a2:f5:b0:c0:a3:69:f8:
         69:a1:56:3c:ca:c2:ee:e8:64:39:cb:65:21:6e:53:84:cc:fe:
         72:80:f6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org