Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft
File:                     kUk2UwsP-H5UDYRskCD7hNO19YM.mft (raw, json)
Hash identifier:          slFweia3mFixjlCs2fcvi1WDTnYVYAZIWA7Laqmi+L0=
Subject key identifier:   48:DD:8F:B7:DE:DC:30:43:05:B5:10:B4:61:CB:DA:74:5E:43:0B:65
Authority key identifier: 91:49:36:53:0B:0F:F8:7E:54:0D:84:6C:90:20:FB:84:D3:B5:F5:83
Certificate issuer:       /CN=A913D680/serialNumber=914936530B0FF87E540D846C9020FB84D3B5F583
Certificate serial:       0621
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft
Manifest number:          061B
Signing time:             Fri 31 May 2024 00:18:46 +0000
Manifest this update:     Fri 31 May 2024 00:18:46 +0000
Manifest next update:     Fri 07 Jun 2024 00:18:46 +0000
Files and hashes:         1: kUk2UwsP-H5UDYRskCD7hNO19YM.crl (hash: RhwyUkQZCf5rCb3ro/Jm15hnEJgAZJHFFTsVNuAZilo=)
                          2: 12C61BCA37CA11EDB8E79257C4F9AE02.roa (hash: w/LPsf1fuNhXTUpVcTEl4mS9U0ZYhq4ApJJQJuCMBlQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.crl
                          rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 00:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D680/serialNumber=914936530B0FF87E540D846C9020FB84D3B5F583
        Validity
            Not Before: May 31 00:18:46 2024 GMT
            Not After : Jun  7 00:18:46 2024 GMT
        Subject: CN=66591766-2bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:b0:0b:b5:d3:9e:9e:f4:f4:88:60:46:60:
                    b6:cf:2e:2c:b1:fd:7f:c9:f4:44:1f:53:a7:7d:f3:
                    82:b5:75:44:d3:0a:d5:df:3f:91:ac:ef:c5:32:8c:
                    f0:68:5c:48:1c:dd:20:a9:3e:0f:3f:c7:ef:03:5c:
                    61:a2:cb:31:8a:ea:ee:7b:4a:2f:ad:8e:41:88:8b:
                    99:25:75:9c:3e:20:99:c3:ea:98:75:57:39:6a:63:
                    2c:fb:10:44:41:ac:5e:c3:81:11:10:56:0e:5f:71:
                    13:8c:bb:f7:70:5c:c0:c1:18:5c:eb:57:f7:f1:a8:
                    c0:3e:76:a8:68:57:24:b5:7b:45:4e:5a:d7:56:50:
                    f0:51:01:8d:62:67:8c:ff:6e:5b:13:b7:8a:19:a3:
                    3c:a1:d6:73:46:23:a3:c1:be:8e:8a:37:e0:c6:66:
                    e5:a3:02:cd:9d:ed:89:a6:6a:89:56:e5:7e:a9:b8:
                    c6:d9:ce:e0:1e:1f:8b:6e:53:ed:16:32:3d:6d:94:
                    47:c0:66:10:b1:b5:55:74:51:64:a5:63:0a:73:aa:
                    b2:51:e5:8f:65:b6:3e:3c:86:3b:af:f1:7c:f8:61:
                    16:a8:c4:63:a7:a2:c6:76:a4:ae:3a:af:38:6a:ac:
                    4e:7e:3f:1e:0d:2f:1e:90:4f:cc:ec:b2:29:54:2a:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DD:8F:B7:DE:DC:30:43:05:B5:10:B4:61:CB:DA:74:5E:43:0B:65
            X509v3 Authority Key Identifier:
                keyid:91:49:36:53:0B:0F:F8:7E:54:0D:84:6C:90:20:FB:84:D3:B5:F5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:ab:fc:f7:e6:95:de:f9:66:7a:39:8d:54:49:e3:23:ec:
         b8:76:6f:1b:a5:dd:7f:00:45:89:c3:59:84:78:1e:37:44:09:
         7d:e2:2f:f0:78:fa:c2:39:84:88:73:c7:6a:78:dc:e7:3e:42:
         8b:45:c5:1e:b8:3c:84:c3:08:dc:48:46:50:82:c1:6a:84:fe:
         ad:89:35:68:c7:76:11:08:2e:76:15:36:85:96:4e:54:6a:45:
         7a:71:3b:ab:9b:03:f5:80:24:4d:df:b0:be:76:b8:69:e4:df:
         78:66:a8:4a:09:e8:d9:1b:d1:d5:6b:a1:fb:db:30:47:73:9c:
         2b:f7:53:e5:8d:a8:f5:a7:58:b1:e3:4a:ca:8b:33:52:c7:d4:
         bf:5a:45:6f:97:92:70:74:09:51:79:65:d1:0d:e7:b2:42:98:
         da:e6:49:72:c1:5e:38:7a:48:6f:b4:23:89:75:55:fd:a5:8d:
         77:11:1c:ce:07:a6:3f:b6:64:62:92:59:96:a1:6d:15:64:39:
         99:b3:f0:48:16:9c:83:30:21:3f:b1:34:28:3b:03:aa:c6:c0:
         d5:cb:75:e6:73:3d:d6:a7:3e:06:49:68:c1:36:74:65:75:a1:
         99:db:1e:f8:32:b1:fb:81:2f:94:1a:10:f0:60:5a:86:38:1e:
         f7:07:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 01:33:47 2024 by rpki-client on console-ams.rpki-client.org