Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
File:                     KPut8cC1pCW10h189FxAyqRO3OE.mft (raw, json)
Hash identifier:          9F69uqhiCsCKwTEF225/N+9IOn8v7NmR0C5vd4hhQJU=
Subject key identifier:   05:52:A9:43:25:57:A7:CE:46:B5:B6:95:8E:18:4A:DA:F3:DD:D2:3C
Authority key identifier: 28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1
Certificate issuer:       /CN=A9136AF7/serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1
Certificate serial:       0BEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
Manifest number:          0BDF
Signing time:             Sat 18 May 2024 19:03:41 +0000
Manifest this update:     Sat 18 May 2024 19:03:40 +0000
Manifest next update:     Sat 25 May 2024 19:03:40 +0000
Files and hashes:         1: KPut8cC1pCW10h189FxAyqRO3OE.crl (hash: Y5vrkP8kpnDFc6nbBtEJBB0boi33SHCs6YbYkGfKHyU=)
                          2: E8803B90F27411E99E67A342C4F9AE02.roa (hash: kYBuYcKPKBp85+i7Uj2fjGVl7YIsW3/imIoGdYeNAvo=)
                          3: E73FF93CF27411E99E67A342C4F9AE02.roa (hash: HTuKrOXo2Ww1fzisrGMVtViC8UEXYANAgC/2a/ph0C0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.crl
                          rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3054 (0xbee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136AF7/serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1
        Validity
            Not Before: May 18 19:03:40 2024 GMT
            Not After : May 25 19:03:40 2024 GMT
        Subject: CN=6648fb8c-f93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:fc:58:27:25:73:ac:ae:88:aa:c4:65:a5:
                    c9:50:31:4c:0b:18:90:d6:bc:b2:1a:12:7f:64:64:
                    ff:c1:56:a0:0c:f5:fa:9c:df:e5:17:c9:3c:84:31:
                    22:bb:db:af:5a:f9:ab:73:c4:0c:ff:76:ab:f8:e5:
                    5a:d4:98:e5:35:f6:36:d7:4c:ee:3d:11:89:df:69:
                    b0:c5:8a:64:89:36:10:f4:fe:b1:fc:57:c2:d1:f8:
                    65:9a:a5:ca:28:f7:48:c4:ea:a8:02:69:8c:1f:1b:
                    5d:9a:c8:8c:6d:fa:45:90:2b:45:40:36:62:f8:11:
                    d2:60:b4:a4:81:e4:8e:a8:84:44:e0:5e:b9:77:91:
                    74:c4:7f:45:29:45:af:ec:56:a7:72:22:ac:64:2e:
                    0c:29:0d:34:68:cf:06:1f:01:88:45:fd:3a:94:ee:
                    39:a7:4f:81:83:82:0c:1f:3d:85:d5:8b:a3:29:fe:
                    7a:22:03:8c:bb:50:ef:c9:4a:13:73:e5:c9:65:cc:
                    f0:ac:11:de:d2:02:f0:84:4e:20:52:f9:85:7b:78:
                    be:b3:24:5d:8c:9a:0a:f9:f7:2c:98:2f:d1:74:25:
                    bb:54:11:61:6a:76:4e:b2:88:56:be:a3:83:7a:65:
                    08:c7:82:9c:39:5e:ac:5a:41:17:45:d9:46:aa:18:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:52:A9:43:25:57:A7:CE:46:B5:B6:95:8E:18:4A:DA:F3:DD:D2:3C
            X509v3 Authority Key Identifier:
                keyid:28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e2:0d:01:11:c2:da:48:6e:91:8d:cc:48:0f:2f:e7:36:39:
         d4:e4:37:5e:96:06:02:79:62:45:ad:e7:48:ee:68:74:06:21:
         10:c7:16:ae:27:e5:71:71:99:c5:d2:31:5b:bc:61:60:f6:8a:
         c5:dc:39:e1:7d:bb:47:23:f8:81:dc:b1:3e:66:16:ba:26:ce:
         52:8b:46:25:0c:15:1b:af:41:a4:cc:3f:7b:f9:df:94:c3:e3:
         92:96:96:78:5e:b7:f6:c9:ef:b8:11:31:3c:01:b4:58:5a:4f:
         50:ff:e9:c6:06:b1:88:92:ff:ba:d9:6e:a1:3a:44:c9:15:98:
         a8:ea:6e:7b:2a:9e:d1:ee:1e:ae:d9:23:41:6e:15:f6:03:65:
         6a:b6:f7:01:5e:1e:61:04:ec:7e:5f:4c:ca:36:70:42:ee:97:
         db:4e:49:c8:31:79:0f:a1:b8:13:0f:f8:cd:fa:69:7c:d7:a6:
         e5:06:e0:66:3c:fa:44:0e:c7:ea:fc:43:03:a1:39:54:61:8b:
         fa:f3:36:20:5f:f1:2a:0f:4d:63:b9:45:70:db:d3:1f:3f:dc:
         3f:f3:39:6a:cd:02:2a:87:79:3a:ce:ef:01:c1:ab:8d:ce:91:
         b8:e2:da:84:82:0a:a7:84:35:31:71:08:ae:3d:1a:85:81:11:
         5c:cc:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org