Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B1D/935BD104572D11ECB2C4CB77C4F9AE02/LA_KCbhIAw75SKUs69ATLbduYlY.mft
File:                     LA_KCbhIAw75SKUs69ATLbduYlY.mft (raw, json)
Hash identifier:          MraUR/EaSky1juwLZxSD+GCQkCoWMwnggDxVNubyT78=
Subject key identifier:   8D:3B:A0:1D:1C:A4:DF:97:A7:4F:39:D4:DB:44:6A:E8:5B:D1:CA:74
Authority key identifier: 2C:0F:CA:09:B8:48:03:0E:F9:48:A5:2C:EB:D0:13:2D:B7:6E:62:56
Certificate issuer:       /CN=A9150B1D/serialNumber=2C0FCA09B848030EF948A52CEBD0132DB76E6256
Certificate serial:       03CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LA_KCbhIAw75SKUs69ATLbduYlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150B1D/935BD104572D11ECB2C4CB77C4F9AE02/LA_KCbhIAw75SKUs69ATLbduYlY.mft
Manifest number:          03B1
Signing time:             Sun 19 May 2024 02:41:13 +0000
Manifest this update:     Sun 19 May 2024 02:41:13 +0000
Manifest next update:     Sun 26 May 2024 02:41:13 +0000
Files and hashes:         1: LA_KCbhIAw75SKUs69ATLbduYlY.crl (hash: QmNNvzHikx+ayJXwRWFMfGCcSM7Ea2uFbBR2qNNpWAI=)
                          2: 3198163ABBF311EEA81EB652C4F9AE02.roa (hash: u+7JP5g7Nw5pL0DdbseM6yZDZo8JGkgqsGSQtBS7zUY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150B1D/935BD104572D11ECB2C4CB77C4F9AE02/LA_KCbhIAw75SKUs69ATLbduYlY.crl
                          rsync://rpki.apnic.net/member_repository/A9150B1D/935BD104572D11ECB2C4CB77C4F9AE02/LA_KCbhIAw75SKUs69ATLbduYlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LA_KCbhIAw75SKUs69ATLbduYlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150B1D/serialNumber=2C0FCA09B848030EF948A52CEBD0132DB76E6256
        Validity
            Not Before: May 19 02:41:13 2024 GMT
            Not After : May 26 02:41:13 2024 GMT
        Subject: CN=664966c9-2f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:76:d1:23:42:15:3c:9c:e4:ac:c7:b6:02:
                    41:ea:c1:bc:13:43:7b:95:75:33:14:2b:d4:92:85:
                    14:3f:e7:b6:11:4f:68:fe:be:0e:44:12:6c:5e:d0:
                    fd:4a:bb:10:68:d0:6e:55:c6:d9:85:41:23:e5:94:
                    93:fd:23:d6:96:46:6f:95:26:a5:02:8a:fb:8c:97:
                    14:96:43:c9:1f:67:c5:19:98:f8:7e:c8:f1:f4:4b:
                    6c:b5:0a:2f:fb:e0:25:47:be:07:58:48:56:3d:58:
                    7c:de:b7:85:d3:f6:cd:2e:04:d3:db:b3:c3:0d:60:
                    7b:2c:95:0f:ac:ba:3e:f1:24:0d:40:45:50:bd:d4:
                    04:ff:07:47:26:c0:69:ad:69:72:6b:e3:2d:92:74:
                    99:5a:1e:62:78:1c:36:25:15:63:53:8e:ed:60:2e:
                    9d:a5:c9:13:b0:3c:0f:42:09:58:d8:c1:de:29:c0:
                    1b:74:41:ac:6e:36:90:89:57:83:0e:31:12:a8:39:
                    ce:82:c9:f0:db:a6:f5:6c:99:f5:f6:cb:f0:19:d2:
                    3f:9e:20:a1:b0:02:43:25:3c:68:3a:87:fe:02:6e:
                    ba:76:68:ff:d1:4a:9f:3c:0f:8f:31:ee:a2:92:a0:
                    8c:5f:bb:d0:a1:61:9c:a0:87:7b:8a:21:76:45:4a:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3B:A0:1D:1C:A4:DF:97:A7:4F:39:D4:DB:44:6A:E8:5B:D1:CA:74
            X509v3 Authority Key Identifier:
                keyid:2C:0F:CA:09:B8:48:03:0E:F9:48:A5:2C:EB:D0:13:2D:B7:6E:62:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150B1D/935BD104572D11ECB2C4CB77C4F9AE02/LA_KCbhIAw75SKUs69ATLbduYlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LA_KCbhIAw75SKUs69ATLbduYlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B1D/935BD104572D11ECB2C4CB77C4F9AE02/LA_KCbhIAw75SKUs69ATLbduYlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5f:f6:ba:10:90:ca:9b:4c:22:10:e9:ea:3c:ee:11:54:95:
         ba:71:9b:99:d6:43:dc:b1:c6:32:36:c2:9a:3c:95:87:73:4f:
         97:3f:1f:08:5c:f8:da:91:ea:dc:71:d5:9e:28:bd:85:58:99:
         fe:9c:3d:24:f2:fb:0d:b3:b8:b7:bd:fd:3c:ea:f8:2e:10:a1:
         9e:2d:53:8f:db:9b:46:fe:7d:48:3c:25:33:ad:b5:c7:b8:d5:
         03:f6:ed:b3:fc:8e:d8:2e:a0:8e:a1:fc:67:44:3e:35:50:f8:
         f4:27:1d:b3:30:a4:6b:fc:6c:50:3c:28:c3:43:16:d9:e9:e3:
         90:af:a8:cd:f2:12:00:6f:3d:ab:65:b5:4d:04:69:31:43:a9:
         80:b3:9d:0f:67:a1:09:4c:ec:26:ba:84:52:db:30:e9:e1:11:
         67:37:68:69:9b:5d:6b:7a:b2:66:b7:99:27:e2:4c:df:06:04:
         f1:a7:70:50:6c:2b:4e:6b:bf:2f:cd:f2:fe:e9:e2:4e:4b:d2:
         82:92:95:3f:ef:e1:4e:ed:36:f3:b5:18:8a:16:58:de:a8:9d:
         5a:68:f4:56:07:58:a9:b5:c3:2c:eb:94:47:4e:5c:d1:5c:f9:
         3d:b9:02:53:b1:fb:29:4f:55:c0:ed:6e:bf:f7:1f:e8:51:67:
         d6:66:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org