Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
File:                     dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft (raw, json)
Hash identifier:          y6GDQaw6jDuzbEKXpcJ5AC/0UvnfE5q4wcYk4MFPsaY=
Subject key identifier:   FB:7E:A5:E9:6F:6D:D9:67:34:73:90:C0:49:0A:2C:65:01:9D:DA:48
Authority key identifier: 76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C
Certificate issuer:       /CN=A9150733/serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
Manifest number:          0B16
Signing time:             Fri 31 May 2024 20:59:09 +0000
Manifest this update:     Fri 31 May 2024 20:59:08 +0000
Manifest next update:     Fri 07 Jun 2024 20:59:08 +0000
Files and hashes:         1: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl (hash: Mm/L6NJwqQCM090/fjRFXYlrwrCFF8M9sRsz3sI1V6o=)
                          2: DC41F9C4214411EEBC685C79C4F9AE02.roa (hash: LlmFtucv67NIV6SVDjcp+KXSQX2AmgL34grHdaVZjas=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl
                          rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150733/serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C
        Validity
            Not Before: May 31 20:59:08 2024 GMT
            Not After : Jun  7 20:59:08 2024 GMT
        Subject: CN=665a3a1c-c8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:9f:7f:90:31:87:1e:af:0c:d8:09:69:9f:
                    a3:d1:d0:80:3f:eb:ae:9a:77:a0:f7:63:ae:dd:7f:
                    69:33:51:05:ea:f2:76:5f:36:1c:6e:7c:fa:b5:42:
                    7e:8f:a6:13:bc:87:4c:65:d0:b8:3f:65:94:7b:ff:
                    00:6f:c4:63:6b:63:65:fa:16:70:5d:d1:c5:76:ef:
                    c3:ba:c4:0f:46:3d:e0:e5:4d:08:9b:19:f5:fa:f4:
                    e0:ee:58:47:e1:d4:bf:1f:90:ac:fa:3a:2b:98:d0:
                    0b:8a:df:e6:e5:77:21:e9:e6:fc:00:9b:04:69:78:
                    30:82:a3:3e:10:bd:ed:70:3a:92:1d:84:42:95:d6:
                    ea:73:ca:70:85:be:c0:34:25:a7:c0:83:44:ed:bf:
                    5b:5f:83:e2:4c:95:06:c5:ce:97:b6:9b:0a:54:af:
                    f9:ab:3e:98:a1:cc:8f:97:58:fc:c2:cd:e1:37:83:
                    d3:55:2c:75:be:2d:48:96:7a:2f:48:dc:1e:c9:87:
                    0f:92:df:30:a0:5b:7e:f1:f0:1b:2c:2f:bc:01:54:
                    54:bb:b9:98:f6:91:31:28:6a:35:ac:31:fb:fb:b1:
                    9e:d7:b3:c8:00:eb:f7:3a:10:61:55:6e:17:d8:9d:
                    36:8a:da:c2:cf:69:93:6e:1a:49:40:f0:43:66:d2:
                    5b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7E:A5:E9:6F:6D:D9:67:34:73:90:C0:49:0A:2C:65:01:9D:DA:48
            X509v3 Authority Key Identifier:
                keyid:76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:b5:fd:87:41:5c:8e:b3:31:62:ea:7c:90:17:f7:5f:e8:74:
         39:5a:f5:b3:39:62:6a:6f:68:14:a3:57:79:34:3e:bf:a4:58:
         c5:a8:ac:80:8c:18:bd:1b:a5:96:bd:54:1a:20:49:2c:dc:9e:
         fd:98:64:d5:5e:7d:e1:d2:d2:e7:ef:8d:9a:0f:76:96:47:e4:
         3e:78:16:18:91:b4:1a:00:8a:0b:dc:5d:8f:9d:0a:01:5e:fc:
         40:d5:5a:e8:49:0f:56:ba:bb:f5:ce:30:90:27:5f:49:b3:8b:
         d0:64:ca:70:34:2e:ff:aa:f9:d5:7d:e0:36:a6:b4:ce:b7:0c:
         e8:1b:7d:4f:25:d2:b5:2a:c4:48:b1:37:9d:98:28:aa:4c:c5:
         e0:de:a2:02:e5:4c:e9:94:d7:99:4a:8d:0b:0d:3b:de:08:bd:
         9c:5e:f3:52:9d:9b:a3:e6:6c:27:1c:81:b3:1b:c2:d5:8b:59:
         c7:38:6b:4e:82:64:27:e2:df:03:74:4f:71:93:17:4d:1c:fb:
         59:a8:58:b4:15:31:bb:54:37:54:45:11:93:51:87:d2:eb:ae:
         83:33:3e:35:76:32:71:7f:d1:22:d8:6e:ca:5b:3d:70:55:b5:
         e4:77:70:37:f1:36:ec:b7:86:a4:55:72:99:27:b2:43:c0:d8:
         99:72:f7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:14 2024 by rpki-client on console-ams.rpki-client.org