Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
File:                     eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft (raw, json)
Hash identifier:          IUMK7e8cUCqqy6Uvi+526EwI6qRNRM0MDQD5Hi1dx4I=
Subject key identifier:   8C:F7:35:0D:DD:39:7A:C2:36:C6:B0:0F:1D:F7:E6:1C:81:34:03:25
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Certificate issuer:       /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
Manifest number:          D5
Signing time:             Fri 31 May 2024 06:55:17 +0000
Manifest this update:     Fri 31 May 2024 06:55:16 +0000
Manifest next update:     Fri 07 Jun 2024 06:55:16 +0000
Files and hashes:         1: eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl (hash: 2L9R11LGbPkjrV9YMO5emL4+K+7Px116VLQG9Khoc0k=)
                          2: C435BF20EE8E11ED8FA7F510C4F9AE02.roa (hash: bgH0l4+BRXH0ubtoQA/3qWGbOrg+Yp6MWBrWOxzlcME=)
                          3: 93D558E84A8411EE8643216EC4F9AE02.roa (hash: 8HYmodHNRCT5mHmn6Q/fJ6goXwfaiW87TXtsUwEGp5s=)
                          4: 83EB3618E98C11EDAE292D56C4F9AE02.roa (hash: zU/J0DfB5rEGamHi07mOwvF8JI1lPOQ49R823+2sjM0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
                          rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 06:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
        Validity
            Not Before: May 31 06:55:16 2024 GMT
            Not After : Jun  7 06:55:16 2024 GMT
        Subject: CN=66597454-16df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:3b:16:27:ee:4d:a2:a0:3c:17:48:4b:40:d8:
                    ee:f6:65:15:e9:a3:8c:1d:51:b9:cf:3d:27:02:1e:
                    23:1b:be:e8:d8:c5:d7:58:9b:cf:a1:ba:a8:8e:90:
                    f2:a7:9f:c8:e5:01:7e:1f:d0:92:10:85:d3:70:21:
                    c4:e7:f4:6d:a6:56:c8:80:cf:eb:b6:fc:66:de:66:
                    e5:7d:f6:d6:17:c8:d3:2f:b4:d1:1c:14:24:2d:f3:
                    9a:d6:5a:49:c9:8a:f9:66:0f:db:f4:00:87:91:87:
                    83:3b:dc:dc:0f:d9:57:1b:d8:0b:f5:0a:f9:d0:be:
                    ed:a9:d5:2d:9a:64:74:cd:29:67:01:3e:01:e6:2d:
                    23:f7:8b:c8:bc:69:cf:b6:29:3d:dd:ab:04:5b:83:
                    27:3e:ad:bb:ab:66:e6:88:68:26:23:d3:69:9e:ca:
                    c3:82:ea:0a:91:11:3d:bf:4e:76:82:3c:45:e1:02:
                    ba:77:d5:0d:59:2e:21:98:2d:84:aa:c6:0a:a4:a6:
                    07:8d:04:0c:be:22:43:cb:69:b2:7a:50:fb:98:6a:
                    e1:20:47:42:b3:5f:3d:59:76:e7:3d:7a:85:9f:fd:
                    63:e8:76:dc:8d:af:28:77:aa:33:82:fe:35:85:74:
                    72:dd:24:39:76:79:e8:76:95:c0:e5:25:11:49:c1:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F7:35:0D:DD:39:7A:C2:36:C6:B0:0F:1D:F7:E6:1C:81:34:03:25
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:74:6b:0d:00:c9:5a:8a:73:e6:2e:dc:30:f7:0b:18:ef:39:
         b4:40:d5:1f:0e:f1:6b:d8:9f:3e:7b:41:58:59:0e:9a:cb:e6:
         22:f1:98:fa:41:2a:c7:f3:0f:57:5e:b3:a5:99:3a:bc:e3:40:
         b2:1b:78:ac:18:c3:ee:f0:02:bb:ad:d8:29:79:e1:d4:a8:3c:
         b1:0e:45:61:4e:42:49:ac:59:cd:3e:59:07:2f:68:f2:91:20:
         8d:05:73:90:0c:e1:b7:dc:d9:36:c6:b6:e2:9c:f1:03:31:db:
         f6:80:5c:c6:82:b4:2a:7d:58:f8:46:77:c9:1d:9d:1a:1f:d9:
         ad:9d:73:34:70:80:24:cf:dc:f5:18:f2:d5:3a:a9:f2:90:3b:
         cf:a6:78:d3:ab:0f:fe:69:ff:58:78:73:f0:54:b8:4f:c1:42:
         f1:85:e1:59:0f:50:56:40:cc:fa:37:be:0d:e5:64:f4:3f:6e:
         8c:e6:4f:66:e4:0d:5c:ce:0f:7b:69:3e:61:c2:2c:6b:a4:46:
         9c:64:89:f3:46:ac:bf:d3:3c:57:dc:b0:f9:3f:b8:1b:cf:2b:
         96:00:28:43:14:1c:e1:88:40:e4:83:aa:21:5e:76:4a:03:ff:
         68:47:7b:7f:af:2e:7c:e1:0f:60:2b:58:b8:89:de:99:e7:b5:
         1f:97:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 08:38:29 2024 by rpki-client on console-fra.rpki-client.org