Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
File:                     -lmybsZZeADDV53XBz-ktoWnwtI.mft (raw, json)
Hash identifier:          8ByfNbxu8dvADoMn4J9+nSTVVenEZgJAEOxFXhrcFjs=
Subject key identifier:   7A:50:33:F8:1E:9F:0F:C3:36:D6:50:A3:77:E6:24:0D:87:E8:46:05
Authority key identifier: FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2
Certificate issuer:       /CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
Certificate serial:       0334
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
Manifest number:          032F
Signing time:             Fri 31 May 2024 03:36:12 +0000
Manifest this update:     Fri 31 May 2024 03:36:12 +0000
Manifest next update:     Fri 07 Jun 2024 03:36:12 +0000
Files and hashes:         1: -lmybsZZeADDV53XBz-ktoWnwtI.crl (hash: floiYTsAyMtYbSzI559c3UzNimKH0ETczU9ZukgVLyI=)
                          2: 445C8236B69311EC9650A57CC4F9AE02.roa (hash: OSjZRmeKXZKax23+4VxeOvWOIIsbDVZIV+tHsONt1jk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl
                          rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 03:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
        Validity
            Not Before: May 31 03:36:12 2024 GMT
            Not After : Jun  7 03:36:12 2024 GMT
        Subject: CN=665945ac-939e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:b2:dc:f7:55:11:95:8b:0c:4b:9a:f4:ed:
                    2b:9b:89:ad:d7:20:46:34:2f:29:52:c9:78:0b:72:
                    50:8b:26:14:f0:09:2a:e8:58:be:17:16:0a:f3:1a:
                    81:40:3c:27:75:b7:8f:c6:37:72:fc:6a:37:74:26:
                    cc:95:46:10:a8:3a:47:4d:04:89:a6:40:34:c1:d4:
                    70:d4:64:42:8b:12:0f:b4:72:4a:a4:dc:86:c1:f1:
                    bc:45:36:68:bf:a8:78:f8:b1:ef:5d:66:90:06:0c:
                    5f:af:17:cf:95:56:6a:02:3b:99:f2:1f:49:21:d8:
                    59:02:5a:d0:75:f0:70:ed:91:60:fa:4e:2a:30:cc:
                    cb:74:11:5c:34:2a:f0:16:b4:db:4d:f0:37:ec:7b:
                    3e:19:00:5a:f4:e2:e1:a7:f9:2b:d0:f4:47:c3:8b:
                    7a:65:54:9b:79:86:33:df:2f:18:b4:9c:7b:d2:bb:
                    93:fe:f1:b2:e7:0f:96:1d:a2:a1:f1:81:cf:b4:76:
                    a0:f3:29:59:e4:b5:4b:0b:03:6c:64:76:1e:9c:83:
                    c3:ef:6c:3e:e7:36:83:ca:6e:06:ab:dd:ef:1f:82:
                    46:9d:2c:88:22:16:b0:9c:75:28:9a:2a:81:db:85:
                    66:41:8d:7c:48:e7:46:a9:1e:b1:4c:86:ec:37:2e:
                    e5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:50:33:F8:1E:9F:0F:C3:36:D6:50:A3:77:E6:24:0D:87:E8:46:05
            X509v3 Authority Key Identifier:
                keyid:FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:36:b2:3c:d1:1f:a4:43:d8:8c:35:37:a7:a2:7d:21:00:0c:
         30:ab:e3:8d:54:32:d0:e2:e2:b6:cf:f1:fa:63:a9:83:33:b6:
         e0:04:05:0e:a3:d8:ca:43:ff:4a:d2:0a:9d:a7:62:bb:dd:4f:
         e2:f9:47:29:1d:19:6a:c4:ab:58:a4:a9:c3:71:12:0f:81:2f:
         d2:cf:5c:99:82:2a:9b:3f:6d:31:5f:cf:b9:7a:d0:01:96:c9:
         25:3e:aa:ee:b0:fb:df:a3:98:a3:10:08:9a:ab:d2:26:c6:7a:
         8b:9f:7d:c5:1f:14:23:cc:e2:28:b9:0f:d9:9c:6d:f9:5e:93:
         bd:a6:f8:6e:dc:44:a4:eb:ea:cf:a5:6e:54:d1:14:71:2c:1a:
         34:ee:e7:29:84:0f:e5:df:c1:2b:67:55:b7:8d:2b:4b:b5:b6:
         12:a6:a4:78:f7:1b:82:50:26:58:e9:c7:a0:56:52:6b:92:7a:
         d0:e7:ba:13:12:78:35:3a:dc:fd:b0:cb:c3:44:a5:f8:48:bb:
         d6:d7:77:b6:28:21:b9:bc:d6:6a:8a:51:6c:e2:ef:17:13:2c:
         db:c6:7a:38:3b:aa:66:63:d9:b2:3b:2b:93:06:4a:26:7c:50:
         a8:ce:0a:ac:55:c1:34:6f:2d:9d:8d:75:d9:f3:a1:c1:34:11:
         aa:a2:66:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 06:49:08 2024 by rpki-client on console-ams.rpki-client.org