Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
File:                     NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json)
Hash identifier:          BMfPVtLtaJICDvWeft5kJjm+bmFUsOkIYG0j859fx/4=
Subject key identifier:   B3:A6:9B:D5:33:D3:7A:AA:52:97:A1:64:27:48:F4:77:72:D4:66:F0
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Certificate issuer:       /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial:       0649
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
Manifest number:          0BB4
Signing time:             Thu 30 May 2024 19:37:27 +0000
Manifest this update:     Thu 30 May 2024 19:37:26 +0000
Manifest next update:     Thu 06 Jun 2024 19:37:26 +0000
Files and hashes:         1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: YYe9PtUP+ak0sHtmchTKGETNtWQp1dEt4qWkR0gRMls=)
                          2: 48F1847A526611EEB6730D84C4F9AE02.roa (hash: P3fGxw61KjWxEhOg+5rnZ/JfNhkSuGr4ppa7xzSzr2Q=)
                          3: 94F63B5E526611EEB3469984C4F9AE02.roa (hash: dStnJMplMvYOHad3AfCPjt8ObYX9lBkMIZC8ouHPBl0=)
                          4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: /Gt//5TXUFWHrpjTWO/wAx+DZp6dKRqm04fYDYPiaOs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
                          rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 19:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609 (0x649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
        Validity
            Not Before: May 30 19:37:26 2024 GMT
            Not After : Jun  6 19:37:26 2024 GMT
        Subject: CN=6658d577-50ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:83:8f:b4:c9:33:14:90:05:95:2c:85:ea:
                    d4:83:28:41:55:0a:bf:0c:6c:b8:02:33:b4:01:49:
                    25:a9:56:cf:fc:df:ce:57:44:67:ea:3c:f3:94:e9:
                    83:53:63:66:d2:cd:56:86:98:b4:90:60:2d:b3:ca:
                    18:c1:82:21:8c:2d:03:1c:0b:db:fe:23:dd:ed:39:
                    59:d5:e5:59:52:9e:d8:a8:a1:0b:a5:b2:f2:42:b1:
                    fb:69:33:46:f6:55:44:c7:10:e2:18:04:65:29:34:
                    d4:9a:1d:23:72:a6:f3:94:8f:e4:46:cb:6a:4b:7c:
                    f5:43:ac:7e:ee:cf:f4:c1:3c:ee:57:c5:83:6a:44:
                    d4:03:06:27:9c:19:7f:f9:05:f8:fd:62:f6:a0:e3:
                    97:2d:6c:7e:66:ac:62:4c:bc:1b:b0:76:a3:67:c9:
                    d6:fc:f0:20:ad:6b:5e:08:6e:6b:e9:ae:52:5c:84:
                    af:59:8f:ad:ef:9b:2d:0e:d2:7c:4a:a1:4f:a6:ca:
                    0c:fe:a6:41:26:31:51:43:9c:96:4e:52:b3:b6:7c:
                    80:e9:1b:37:26:3e:3f:dc:ee:78:51:6f:cf:4d:26:
                    4c:60:16:60:3a:d2:a5:eb:54:ee:6c:b6:5a:41:ed:
                    ab:51:cc:d2:22:b6:d4:1d:e8:54:5b:92:fb:3e:16:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A6:9B:D5:33:D3:7A:AA:52:97:A1:64:27:48:F4:77:72:D4:66:F0
            X509v3 Authority Key Identifier:
                keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fe:b7:63:00:7a:41:97:ab:4c:58:bf:bd:61:21:01:7e:ec:
         87:72:66:50:b6:58:59:d5:6f:3a:07:0d:49:8c:6f:5e:30:86:
         2f:31:76:9c:f9:84:c4:81:3c:52:53:61:cb:c7:1a:d5:15:b2:
         43:0d:85:15:31:f1:14:65:a7:61:b1:d6:87:c7:c9:84:15:44:
         25:ce:b1:92:c8:25:8e:ce:05:1d:5c:be:07:95:cc:d4:13:c9:
         fd:00:11:3d:6f:e5:df:75:db:3b:ad:a7:e9:05:52:f8:38:61:
         36:88:48:11:6f:c1:ba:5b:57:7b:aa:64:bb:da:7a:a2:1d:f3:
         b5:37:ba:a6:d1:02:a6:8e:3e:7b:21:99:07:1c:09:a2:f0:4b:
         55:e4:42:1e:9b:3e:ce:58:23:b2:4b:df:31:a6:27:c9:82:26:
         75:6d:df:e4:a3:24:99:88:65:3a:d7:b6:6a:e3:1b:38:9d:cc:
         68:87:5f:c3:b8:0f:83:d5:e1:56:35:c1:14:75:89:b5:8b:e7:
         f5:e4:71:83:39:5b:ea:c6:b9:ac:f8:e5:68:b4:3c:5c:2c:6e:
         d2:ca:e0:ae:e3:49:4f:28:89:f2:06:f2:6c:d2:9a:45:e1:ff:
         5f:96:b9:99:97:29:81:cf:05:be:8b:21:0e:5f:10:eb:19:01:
         fc:99:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 21:49:32 2024 by rpki-client on console-ams.rpki-client.org