Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File:                     Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier:          R5HSC9N//knDlVUAAM3TOrFf73+yYX0nfCG+nVDXVRk=
Subject key identifier:   B0:EC:08:67:CA:A1:B1:10:AE:23:97:52:DF:D7:7D:51:56:96:7E:98
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer:       /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial:       0804
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number:          07EC
Signing time:             Sat 18 May 2024 21:58:19 +0000
Manifest this update:     Sat 18 May 2024 21:58:19 +0000
Manifest next update:     Sat 25 May 2024 21:58:19 +0000
Files and hashes:         1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: hq78mEeH4B2hm8B+Y5SmVh5ujx94BcaGS1MxsNW5jLw=)
                          2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: RuINhF2PAQ9fVQvaa/nlC34dALITzZSCmAOEzcedlFI=)
                          3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: ltlfrlUHISmA7QAU+zbb0n7XbL6k8oTar+kPBLTi47o=)
                          4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: 84+SX+WZRBLF23SmV8Z4wZ3c8jqDkimTM0kIMMPP+Kg=)
                          5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: amWkI8EJnpB0l45lHnJHw1bJ3YiEznB3Tvl/Qm8umkw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052 (0x804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
        Validity
            Not Before: May 18 21:58:19 2024 GMT
            Not After : May 25 21:58:19 2024 GMT
        Subject: CN=6649247b-1561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:8c:f4:bb:0a:de:42:06:3b:22:76:11:21:
                    f2:21:7a:8e:eb:a9:0f:12:a2:b6:55:a8:d5:68:38:
                    74:0f:cd:9b:6b:70:a6:f2:c4:bd:1d:38:f4:d3:91:
                    b3:13:06:b7:8b:9a:d3:98:f5:f3:12:58:b8:0b:00:
                    a5:57:9e:d4:3e:82:24:cb:ab:8c:b7:48:e0:06:fa:
                    94:02:82:10:21:5f:04:83:bb:27:ec:b4:f3:39:4e:
                    b2:ec:1c:cc:9b:c4:e9:2d:16:bb:57:4d:b9:de:0a:
                    a6:fa:67:0c:a8:20:54:80:4e:6e:bb:74:8c:6b:a5:
                    44:4c:ea:10:71:19:36:48:6c:42:f2:d9:ed:81:a8:
                    82:5a:9d:fa:d1:4e:b3:b9:03:0c:b3:a4:6a:19:a6:
                    bb:1c:de:12:fc:80:11:e1:64:4f:c8:7a:a6:aa:92:
                    c4:8c:08:ea:31:8f:72:b3:ed:21:0b:4d:1b:df:91:
                    1a:77:ab:5b:a6:1e:90:71:b4:19:e8:0a:6c:2a:1d:
                    d4:3e:60:4f:e6:23:a9:da:69:8e:b8:ca:1e:45:50:
                    a7:b5:ec:a3:e4:46:c0:e8:17:d4:8a:80:5f:c9:af:
                    0b:bc:8d:57:2e:1d:de:6a:7e:67:11:36:90:a7:4c:
                    9c:00:cc:ec:b8:00:80:2f:a5:ca:5b:c2:77:37:d3:
                    c7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EC:08:67:CA:A1:B1:10:AE:23:97:52:DF:D7:7D:51:56:96:7E:98
            X509v3 Authority Key Identifier:
                keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:05:61:1c:f4:36:52:57:73:33:bc:fb:91:12:be:41:1a:65:
         36:81:69:44:21:67:14:8e:4a:45:3a:fc:ef:3f:42:dd:a3:c4:
         b3:a9:27:0e:40:de:e2:f1:77:7a:6c:78:2f:75:a6:a2:e7:94:
         36:e4:d3:80:b4:6d:e7:f7:40:46:fb:aa:ba:c6:d7:02:ac:43:
         77:21:3a:90:bc:bb:e1:a9:0a:75:83:70:03:47:fb:be:30:83:
         03:a0:9d:6e:34:9d:68:45:e5:fa:1c:7a:06:58:32:07:02:34:
         1e:64:da:c8:0e:bd:2b:99:41:dd:f6:43:b0:f9:04:c8:89:55:
         7c:fc:a1:d7:d7:2e:7f:ac:c5:f9:c2:84:97:c7:6b:d6:74:dc:
         69:1b:42:2d:ec:41:6d:8b:29:53:d4:b5:52:42:ba:80:f2:a9:
         fa:f3:9c:d2:e2:8d:7d:f0:28:48:9e:89:11:da:43:16:99:fe:
         f4:64:63:cf:3e:b9:3b:e6:b8:b4:7a:46:9d:db:46:86:32:1f:
         0e:8f:e8:4f:d3:59:fa:f3:e1:f6:1c:2c:07:f4:55:e4:d8:7d:
         65:93:3c:6d:58:00:33:ef:b2:a6:da:85:74:d1:75:d5:77:79:
         83:0b:b3:ae:a2:dc:24:f8:c8:cf:92:14:70:30:44:c9:3a:1d:
         0c:cc:6c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:14 2024 by rpki-client on console-ams.rpki-client.org