Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File:                     dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier:          Q9SkuZHyqSWp3kXDIKP+TXF8ZsS8R4IWCnpA6uN2qM8=
Subject key identifier:   0B:2F:8F:42:17:08:51:05:2A:47:B3:0F:71:A7:E8:08:83:23:79:BA
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number:          016C
Signing time:             Sun 19 May 2024 04:54:34 +0000
Manifest this update:     Sun 19 May 2024 04:54:33 +0000
Manifest next update:     Sun 26 May 2024 04:54:33 +0000
Files and hashes:         1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: yrkD8p4y43d2PEmJX6KvAxUMJeEAh9F/iXWkNHro+sk=)
                          2: 4A82F578377111EDA5C68B0DC4F9AE02.roa (hash: 7Ctt3XGuSQUSTPFxbToK+A0lcjnajA20f/glx2Q/W+8=)
                          3: 49CA1D50377111EDA5C68B0DC4F9AE02.roa (hash: AclFAgwSZwBmXEb6fxpwjURYBM+TXlzMK5AxrSy23Qg=)
                          4: 36FD50B6DB2111EEB3E9271CC4F9AE02.roa (hash: oeDiK+A9UKZB1HFjbNtctia+APIUziXWGa6Lrf4JM1Q=)
                          5: 2EDAFB36DB2111EEA9D71A1CC4F9AE02.roa (hash: K/LxOk6+wc9EhEHUif4s2E+hpge144Px8Bl1HKkA3xM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: May 19 04:54:33 2024 GMT
            Not After : May 26 04:54:33 2024 GMT
        Subject: CN=6649860a-8615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:e0:aa:4a:98:d8:51:e1:ad:07:08:3a:36:
                    e5:3b:21:63:e0:8c:0a:36:cc:46:39:65:03:11:69:
                    c2:5d:90:ff:c6:8f:68:7a:84:bf:d6:65:f1:96:9c:
                    ed:1a:ff:5f:ca:6f:64:17:96:a6:ce:b5:b7:ff:38:
                    29:7a:21:3b:03:b6:71:29:7a:d6:aa:aa:7c:17:2c:
                    6a:33:df:32:57:78:60:28:d3:80:29:2c:01:16:20:
                    ee:e5:4a:b6:a4:96:8d:d8:f9:fb:2f:23:ef:83:82:
                    f4:fe:cb:ae:69:4e:62:1f:43:44:de:ff:7d:0b:ab:
                    39:96:5a:32:6b:bc:9e:07:ff:4e:5c:e8:41:9b:5b:
                    89:86:25:54:73:15:97:c9:61:2c:56:15:27:f4:f8:
                    a2:ef:68:22:d0:0f:72:e7:78:4e:03:88:5e:1f:72:
                    7c:30:27:0e:db:b6:b0:e4:e7:91:ad:4c:11:70:a1:
                    09:b0:7b:95:df:51:0f:fb:e3:1a:f3:a0:57:62:e2:
                    a5:09:12:95:cf:25:c6:97:1d:6b:d7:a9:f5:4f:a9:
                    91:45:f8:00:26:df:fd:51:79:60:ec:01:e3:bb:fa:
                    e3:08:1a:0e:68:e0:1a:4a:82:fd:4a:06:0e:cb:c0:
                    63:b6:0c:22:15:24:a0:2e:8b:7c:6e:1c:9b:bf:64:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2F:8F:42:17:08:51:05:2A:47:B3:0F:71:A7:E8:08:83:23:79:BA
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:ca:88:93:0d:c7:c2:27:75:0c:61:f3:b6:d4:35:be:69:
         8d:aa:76:9c:d5:32:f4:28:73:2c:1d:5a:8c:d7:67:af:16:f1:
         21:c9:3f:dd:70:9a:82:4c:14:94:e1:a9:11:4f:c4:72:a8:cc:
         2f:ba:3d:e1:68:c1:e7:47:82:33:20:6f:1b:d9:9e:50:e5:d5:
         3d:b3:d8:1d:bd:44:ae:09:5d:e7:cb:21:b3:43:4a:79:5d:2e:
         64:a9:57:a6:bf:e8:e2:da:cb:83:82:54:fe:d3:eb:5c:60:f7:
         dd:13:bc:f4:72:53:b0:73:4d:49:9c:b3:ad:50:74:f6:0d:d3:
         48:fa:b0:79:3d:7e:6d:c6:b5:ee:ee:6b:8a:5e:59:63:37:68:
         11:7b:8f:14:39:3e:0d:6d:85:df:1a:16:7f:ae:ae:d0:78:db:
         5a:d9:c8:72:66:a7:08:6c:95:3e:bb:78:5f:65:1d:3e:79:6e:
         bb:29:87:9b:6a:b7:72:f1:57:d0:19:2e:c4:5e:50:ee:b6:1a:
         21:a1:f0:a8:1d:93:f5:11:5e:8e:03:92:ab:d5:8b:30:0b:64:
         76:00:c6:11:4a:c1:b7:64:24:d1:90:7a:11:79:60:dd:be:7b:
         b1:63:88:8a:a3:ed:26:3f:d2:95:eb:65:63:c7:64:1f:a7:cd:
         bb:13:07:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org