Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
File:                     6rJKkMbQRs2D-170o8WY5OqaFow.mft (raw, json)
Hash identifier:          QZULQrHxf3JjnO89FZi9TEXiPKD2KyRasmjw6XvqrTY=
Subject key identifier:   2A:0C:99:F8:DB:07:82:80:A8:C0:A5:BF:37:36:E8:0C:72:DB:E1:87
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       06CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
Manifest number:          1368
Signing time:             Sat 18 May 2024 18:49:34 +0000
Manifest this update:     Sat 18 May 2024 18:49:33 +0000
Manifest next update:     Sat 25 May 2024 18:49:33 +0000
Files and hashes:         1: 6rJKkMbQRs2D-170o8WY5OqaFow.crl (hash: evCazCAxu9a83Jn9H8kvKfS91bNQOgCk6t2kmdyHMGg=)
                          2: CCA48F32EAD311EE846A5E5AC4F9AE02.roa (hash: vEqzObLdUOAKuFGpmJ9G5OSLrus/8lx1AotifrrUM+g=)
                          3: 3EF4711CC1A311EC8986B978C4F9AE02.roa (hash: JZVV2i4d2g3bcsUx5Xgjo1ZV5pQ+/nzEQpAU1f+dqG0=)
                          4: 403163B4C1A311EC8986B978C4F9AE02.roa (hash: URzUl2zpul8FHzxSfHY/OMihJElFp0YOE5fipD/Akgw=)
                          5: 41372C94C1A311EC8986B978C4F9AE02.roa (hash: BeIkC8TIz8cmG4PBjxI0cVVXTtBWwt9WPuG7CJ+NsAQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741 (0x6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: May 18 18:49:33 2024 GMT
            Not After : May 25 18:49:33 2024 GMT
        Subject: CN=6648f83d-9e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:6a:24:15:07:36:f7:74:14:7e:a5:32:3f:
                    36:f0:fe:af:24:c4:6c:f7:56:f9:80:cc:bb:af:6f:
                    52:fc:08:01:36:17:e3:8a:40:20:6f:f0:c4:76:f7:
                    ab:b4:3f:10:11:16:ef:9f:d3:21:22:f5:40:d5:2b:
                    bf:6d:38:ed:c8:5e:b4:1c:7e:07:23:a3:68:cf:57:
                    a8:38:67:34:af:d9:7e:e9:a9:66:32:5b:67:27:97:
                    d2:0c:7c:cf:13:0b:49:26:83:f5:55:da:15:74:22:
                    e1:14:17:8c:8b:c7:84:4c:30:23:a2:ca:91:9b:57:
                    90:a6:c8:1f:56:56:7e:52:6c:d0:17:13:c0:3e:c5:
                    a2:d0:8c:0d:b9:4f:fc:f2:02:65:26:d7:21:8d:2f:
                    f9:f3:88:1e:ea:db:76:23:81:d9:e6:56:46:11:06:
                    36:63:e5:53:f6:ac:34:bd:99:ec:38:e5:d4:55:b2:
                    5d:f2:a0:6b:b3:03:2a:62:a5:d4:fe:3a:f7:9c:31:
                    d3:a1:42:fa:91:0a:9c:e8:57:97:1c:e2:b8:00:4d:
                    13:9f:4e:62:59:44:71:3d:94:37:5e:ed:a7:03:b1:
                    37:46:6e:3e:cd:85:0a:4a:3b:34:34:0f:37:01:6c:
                    a4:5e:6b:79:81:99:e8:45:b7:da:25:b9:b7:d2:46:
                    39:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0C:99:F8:DB:07:82:80:A8:C0:A5:BF:37:36:E8:0C:72:DB:E1:87
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:72:4d:bb:e6:47:23:e8:e8:99:fd:c6:f6:db:82:6c:b5:69:
         5c:51:a7:a0:67:19:3a:b9:06:0e:18:0a:75:6f:2c:3a:2f:3b:
         54:ae:f9:3c:59:40:3d:81:97:16:e0:67:db:86:58:b1:a3:4e:
         fa:15:71:ab:7e:b2:3e:e0:ba:bc:00:97:89:43:f4:50:49:73:
         89:4e:9b:ff:f6:04:92:2f:78:2b:56:8b:58:bf:22:d8:e9:45:
         e8:21:25:85:d6:04:eb:24:01:6e:75:e6:36:e4:64:9f:3c:c5:
         3f:6c:67:7f:4d:ed:fb:b9:9f:ae:73:b4:2e:87:3c:40:11:4f:
         76:be:3a:cb:ec:bb:92:f0:6c:99:13:ab:39:e4:15:e9:4b:e3:
         1a:7b:a7:52:fd:47:b9:57:12:97:9b:d1:4e:9c:75:b5:e4:7b:
         03:b0:53:8e:44:28:a5:7e:43:84:54:1e:42:94:42:28:83:67:
         22:57:08:d5:39:46:75:57:78:6e:81:47:ec:77:8b:df:66:e0:
         bf:f1:d8:91:f6:86:2e:6e:c9:01:6d:68:b6:66:93:73:b4:d0:
         66:22:c2:f1:00:d3:bc:97:69:89:90:0f:5e:f5:46:64:5f:a8:
         ce:06:3f:d7:69:fa:32:1a:4e:64:fa:4a:5a:04:f2:4b:3b:68:
         2f:eb:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:15:59 2024 by rpki-client on console-ams.rpki-client.org