Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
File:                     Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft (raw, json)
Hash identifier:          YryniahYO+crz5yqvxyBgY3ibuOr4kezNpzmY/wskRI=
Subject key identifier:   D3:81:E3:7D:7C:0F:51:5C:A7:E8:4F:57:95:2D:11:D2:FE:70:3C:0A
Authority key identifier: 52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E
Certificate issuer:       /CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
Manifest number:          0113
Signing time:             Sun 19 May 2024 05:30:54 +0000
Manifest this update:     Sun 19 May 2024 05:30:53 +0000
Manifest next update:     Sun 26 May 2024 05:30:53 +0000
Files and hashes:         1: Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl (hash: rpAdrirrEMUcwcWeYnKzbpUTVUrIU7hblW9WSDfdHP8=)
                          2: 2F38972E672B11EEBA84E00CC4F9AE02.roa (hash: TmvjIoCjMLlHsVJS0YtfoVR07x8F2nlw5BJpr8aNrus=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl
                          rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E
        Validity
            Not Before: May 19 05:30:53 2024 GMT
            Not After : May 26 05:30:53 2024 GMT
        Subject: CN=66498e8e-b457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:80:cd:2c:9d:b7:ae:ff:b4:95:40:b6:f3:
                    7a:0a:01:cd:82:ac:74:b6:7a:8d:67:02:fc:b1:bb:
                    91:8a:a8:68:32:91:da:09:dd:bb:3f:16:8f:0e:ca:
                    b1:9a:74:f6:3e:54:c2:6d:82:13:c1:f3:33:25:b6:
                    e3:43:24:5d:03:b4:07:2c:c0:59:ec:52:8c:1a:d1:
                    da:1f:89:c3:a8:7c:96:6a:7d:4d:f7:69:76:fd:f5:
                    32:17:80:47:1b:7f:2d:ca:6a:d2:d7:a0:15:45:7c:
                    3d:14:30:e8:75:5a:e2:ca:04:ec:95:ca:61:15:5e:
                    a3:ad:9c:97:42:ac:46:04:d9:45:81:97:12:9b:48:
                    da:fe:52:ee:f2:c1:b3:92:e6:de:ff:8a:75:9d:79:
                    41:21:e9:df:1c:bf:2e:9b:da:77:94:ee:56:2b:f5:
                    67:11:c7:b6:35:8c:8a:27:4b:0b:be:90:78:24:d3:
                    2c:c5:b5:07:7d:29:ed:31:d4:2d:5f:56:27:7b:80:
                    92:7c:77:1b:70:c4:90:c5:23:89:1a:f1:49:83:48:
                    b0:9d:4f:55:37:45:3d:dd:65:c9:92:9c:77:52:77:
                    ee:9b:59:b8:16:8b:13:85:f1:75:d2:44:f6:f1:8f:
                    bb:c1:d5:00:7b:63:0a:34:e5:a9:67:0e:f2:61:fc:
                    15:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:81:E3:7D:7C:0F:51:5C:A7:E8:4F:57:95:2D:11:D2:FE:70:3C:0A
            X509v3 Authority Key Identifier:
                keyid:52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4a:8d:e0:49:1b:ad:7b:7a:81:58:ba:21:b5:13:fa:a4:2d:
         e8:55:52:73:81:63:0b:52:3b:0f:76:a2:f6:83:c8:d7:e6:d8:
         c5:88:fd:4d:50:cb:20:74:47:7a:9a:a5:77:5f:97:ac:6b:c2:
         97:52:f7:09:b0:78:5a:d3:49:b6:b6:b9:2e:2d:89:fd:6d:7a:
         2d:c4:81:b2:95:1f:c6:bd:ec:48:50:b5:e8:f3:3d:93:8d:e7:
         9f:7a:bf:ab:18:7f:36:bf:2b:1b:ee:5e:0e:4a:35:b8:6a:34:
         a5:6a:50:a6:ba:06:14:1f:52:51:1d:af:20:94:a2:75:e6:0b:
         03:69:19:95:8a:c8:a3:6f:21:28:de:9f:65:dd:32:ae:77:88:
         c6:c2:c2:e3:2a:8c:6d:42:e5:00:72:af:fc:3d:d8:bc:21:1b:
         6e:82:59:9d:97:21:88:03:47:a0:75:58:cb:84:a0:cd:bd:3b:
         8c:25:07:b7:83:f9:2d:6d:7e:0d:2e:87:fc:41:8a:3b:01:85:
         71:bb:4f:d9:63:d1:72:c0:1f:57:48:55:f8:1e:10:a5:00:64:
         95:9b:22:3f:a3:87:07:6c:04:4d:47:51:55:50:cb:3f:2c:c9:
         e0:bf:f2:70:43:dc:43:1e:e2:84:e6:3a:93:ea:73:57:7e:64:
         71:ca:4e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org