Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File:                     dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier:          cCaUHL0R50IGGgHhqrYryW+JR9EJJoBztWpA0lqhD54=
Subject key identifier:   EF:AA:50:3F:D8:A6:1A:99:F3:97:26:E9:19:94:C9:29:0D:2F:7A:BF
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number:          99
Signing time:             Sun 19 May 2024 06:55:15 +0000
Manifest this update:     Sun 19 May 2024 06:55:14 +0000
Manifest next update:     Sun 26 May 2024 06:55:14 +0000
Files and hashes:         1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: PTYcl/o5ikQtSW8HftDDi6Cv7MlclD63Br6MCR8ha3U=)
                          2: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 6x2mPRr8tFBujOQtjeq5IPE1uq8HvCy9BoUj1YCgyMk=)
                          3: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: vZyDruUuGk4hx5G1OpTn2aVtFxEyPcTfQBZ971Jhif8=)
                          4: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: Elvwrb+lnz51/voO2VptmUh2haZZEQ24Voi0xDDY46w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: May 19 06:55:14 2024 GMT
            Not After : May 26 06:55:14 2024 GMT
        Subject: CN=6649a253-9e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:6d:c3:d3:cb:78:5c:78:c7:c7:67:aa:e7:
                    04:da:24:22:b8:95:4b:0c:e3:eb:25:06:b1:29:26:
                    bb:f2:4c:d5:b5:bb:6d:ad:49:d6:05:2b:5d:02:34:
                    5d:b4:0a:a9:43:cc:61:6f:75:1d:9d:c1:42:36:58:
                    a8:08:47:3a:ea:5b:55:bd:6c:6f:8e:2a:6a:4f:0e:
                    b0:fd:17:ea:1c:98:90:86:90:b8:9a:bd:26:5d:b4:
                    22:06:c0:4e:21:ba:03:60:85:98:4d:e8:a1:c6:3a:
                    6c:9d:bc:7d:c9:67:70:62:68:90:bf:b2:5d:d6:9a:
                    3f:56:2f:9d:39:cc:f2:42:40:2f:6a:2d:9b:93:34:
                    40:4b:a0:59:85:7f:6f:68:e8:04:15:96:be:77:28:
                    59:0c:8a:81:ee:99:f4:36:22:ad:1e:c0:4d:0c:7c:
                    73:ec:c8:ed:14:e9:61:e9:77:c1:6a:05:81:c7:7e:
                    b3:70:8c:38:41:e6:cc:1b:83:5a:a7:08:22:70:50:
                    2a:c6:7d:08:95:fb:bf:81:35:81:45:87:42:0a:4f:
                    05:d6:3a:f5:ca:55:75:27:e3:33:77:88:d5:8d:9f:
                    db:1a:5a:8f:8b:fb:50:0b:a3:02:65:c7:d1:42:c3:
                    67:d4:9c:89:cb:47:8f:aa:f8:1b:47:6b:f7:d3:e3:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AA:50:3F:D8:A6:1A:99:F3:97:26:E9:19:94:C9:29:0D:2F:7A:BF
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3d:78:5f:13:6f:9b:9c:bd:cd:d9:89:8c:60:9a:75:4c:22:
         05:7e:9d:b5:6c:2c:35:25:d5:44:d0:3e:23:d1:03:d3:cf:8e:
         11:e2:27:ed:12:c8:b9:1e:5e:d1:10:4e:09:f5:d7:f5:aa:21:
         49:2c:f3:fa:bb:16:82:53:49:d5:42:89:c2:74:05:2a:f6:e4:
         dc:c7:67:d6:e4:bb:67:e6:c5:68:c9:b7:36:c4:c4:be:d9:75:
         c6:e3:69:dd:3e:5f:e9:b6:4e:e4:4e:07:f2:9d:94:20:0e:5c:
         1f:f0:7f:1d:22:5b:73:74:93:98:0f:f4:b3:6f:b7:8f:54:41:
         88:d0:37:10:13:7f:4e:d1:f4:c2:30:10:c6:68:49:ee:75:38:
         01:fb:6d:b0:d3:da:dc:03:c4:36:ba:8f:54:d1:68:e5:b5:f4:
         0a:29:4b:19:9e:20:0a:bf:d3:9f:de:dc:3a:20:2d:77:3b:9d:
         95:c8:7e:76:40:6a:a3:13:ef:84:41:29:f9:5c:50:79:c5:4f:
         b2:f1:b1:6f:b3:61:49:44:9d:b3:81:78:c8:9b:1c:93:cc:9a:
         4e:cf:3f:7f:e3:09:b9:01:3d:b8:8e:80:9b:00:0c:6d:0e:e8:
         c9:f6:bb:f4:af:ee:83:d9:bc:21:3f:db:8d:fb:d3:73:87:9c:
         44:b8:1b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org