Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
File:                     4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json)
Hash identifier:          UwPp6opzgSzVuZLDlM0dfD4Y7OWs1P3rt97EdZVHC7w=
Subject key identifier:   9C:CA:2D:10:38:E0:94:37:90:D1:DE:C0:FB:93:10:B4:18:FD:69:88
Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E
Certificate issuer:       /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
Manifest number:          EE
Signing time:             Sun 19 May 2024 05:47:34 +0000
Manifest this update:     Sun 19 May 2024 05:47:33 +0000
Manifest next update:     Sun 26 May 2024 05:47:33 +0000
Files and hashes:         1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: ulxsI6VTOaGg1dwgMOVmS24Y+/DyKCs67aJ1yknXM/Q=)
                          2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: 8i6c3KX1azuyqBz1zng1wW9VBIHPVACW3fjSe4k+Kng=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl
                          rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
        Validity
            Not Before: May 19 05:47:33 2024 GMT
            Not After : May 26 05:47:33 2024 GMT
        Subject: CN=66499275-bbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:fa:70:34:69:ed:94:f7:65:18:8e:70:bd:
                    2a:cd:ca:52:74:2a:d5:64:9b:5c:ab:30:b0:16:86:
                    92:fe:7d:68:e3:be:1e:d7:3c:b4:c6:77:6a:04:7f:
                    9c:78:a6:e9:89:35:ef:4d:63:fe:4c:b9:f3:de:8f:
                    77:9e:7d:78:2c:5a:eb:cf:82:ca:26:ff:86:b0:09:
                    90:e6:69:11:b4:0b:81:ed:d2:af:9a:90:ed:7b:63:
                    29:2f:67:99:d7:b5:bc:db:74:48:1d:bc:dc:96:bb:
                    82:ca:71:85:59:ad:c1:44:1c:42:0f:57:47:49:78:
                    f4:b9:3c:13:de:eb:e5:2d:40:2b:02:d0:0c:d8:87:
                    02:64:42:fb:be:7d:d2:d8:35:53:ef:ab:46:29:f4:
                    a8:66:8e:da:8b:fe:f7:90:2b:e1:3d:a3:f2:04:d1:
                    5f:0d:03:59:83:79:0e:6d:f7:2e:66:ad:4e:11:94:
                    8c:2f:b8:ae:fe:e5:a2:f6:f0:9c:c0:98:1f:7d:a9:
                    88:ec:75:6e:af:64:88:4f:72:59:d8:ad:44:c7:a1:
                    f7:86:ea:cb:12:1b:1a:2d:d9:2a:1c:95:d8:ef:a5:
                    a9:12:87:0b:11:67:f2:ad:8c:ef:85:37:7a:e3:57:
                    2f:f8:82:0e:12:10:17:45:fa:0d:d3:51:da:7a:3a:
                    c0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CA:2D:10:38:E0:94:37:90:D1:DE:C0:FB:93:10:B4:18:FD:69:88
            X509v3 Authority Key Identifier:
                keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:d3:a3:7a:ad:9a:72:15:f5:a7:21:f9:bb:d3:15:bc:fe:
         4c:3e:c9:84:d6:4c:74:40:fe:4b:25:95:90:8b:0a:b2:e9:4b:
         ff:f9:9e:b5:32:a2:5b:53:a5:d8:91:10:17:5b:5b:be:4a:9a:
         73:96:0c:12:72:f0:b7:21:5d:ed:e8:81:60:ce:7a:22:ee:c2:
         21:79:85:e9:c7:26:25:4a:22:b9:63:a4:59:50:42:67:8f:27:
         b9:d9:80:a5:ca:65:11:73:de:ad:05:d4:b3:1c:12:94:42:76:
         41:5f:8c:b9:8f:ea:0d:ff:40:bd:4d:8f:1e:42:29:7a:75:f1:
         3d:45:7a:37:55:c6:20:22:18:b0:c1:24:0d:3b:39:90:c0:8c:
         4a:2c:ad:94:ba:ea:b2:ac:e3:8a:fb:58:2b:ea:02:9c:34:6d:
         8d:3f:95:5e:60:1d:52:81:7b:5a:ad:1d:bc:5d:e7:bb:6d:cc:
         49:4d:0c:b0:69:09:52:0f:8e:da:90:04:ac:5e:a3:2b:2b:13:
         c4:25:4e:44:58:74:60:6b:e3:6b:53:d9:dc:7c:74:72:f0:4c:
         22:df:f8:86:ce:3f:63:db:4b:04:2d:53:1d:ce:c7:3f:ba:33:
         63:fc:30:f3:40:8e:38:33:1c:dd:b8:04:2b:21:32:dc:bd:a9:
         1b:51:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org